Hallo Forum,

bin nicht sicher, ob es ein Virus (etc.) ist..., aber web.de ist für mich in
50% der Anfragen nicht erreichbar. "Zeitüberschreitung der Anforderung" heisst
es dann. Nach 30 min funktioniert wieder alles... Egal welcher Browser (FF,Chrome,Opera).

Habt ihr eine Idee, was das sein könnte ?

Danke

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo Schrauber,

danke für die schnelle Antwort.
System ist WIN7 64bit.
Hier zuerst FRST.txt, addition.txt in der nächsten Antwort.


FRST.txt


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-09-2013
Ran by Roy (administrator) on ROY-PC on 25-09-2013 07:55:57
Running from C:\Uhrenbilder
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\CompPtcVUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\BASVC.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Windows\PLFSetI.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Mister Group) C:\Program Files (x86)\System Explorer\SystemExplorer.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(Mister Group) C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.EXE
(MagicISO, Inc.) C:\Program Files (x86)\MagicDisc\MagicDisc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\SnagIt\SnagIt32.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office10\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Opera Software) C:\Program Files\Opera Next x64\Opera.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office10\EXCEL.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\ACD Systems\ACDSee\ACDSee.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(RealNetworks, Inc.) c:\program files (x86)\real\realplayer\RealPlay.exe
(RealNetworks, Inc.) c:\program files (x86)\real\realplayer\update\RealOneMessageCenter.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-08-07] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-08-06] (Egis Technology Inc.)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2009-08-19] (Acer Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8098848 2009-09-03] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1814312 2009-08-14] (Synaptics Incorporated)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2008-07-29] ()
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1680976 2010-10-29] (Logitech, Inc.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1281512 2013-01-27] (Microsoft Corporation)
HKLM\...\Run: [Ocs_SM] - C:\Users\Roy\AppData\Roaming\OCS\SM\SearchAnonymizer.exe
HKLM-x32\...\RunOnce: [20130923] - C:\Program Files\AVAST Software\Avast\setup\emupdate\26364cfc-92fd-49c4-b93d-8812cc0e0d34.exe /check [75112 2013-09-24] (AVAST Software)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-09-08] (Google Inc.)
HKCU\...\Run: [GoogleChromeAutoLaunch_33D22A5565F5D10B364D87CB9F5A5723] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [829392 2013-09-17] (Google Inc.)
HKCU\...\Run: [SystemExplorerAutoStart] - C:\Program Files (x86)\System Explorer\SystemExplorer.exe [2846168 2012-12-02] (Mister Group)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18678376 2013-04-19] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1811368 2013-09-06] (Valve Corporation)
MountPoints2: {43123b17-1c8f-11e0-845c-0c6076aed563} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\Start.hta
MountPoints2: {7da0309b-f593-11df-8554-806e6f6e6963} - E:\.autorun\autorun.exe
MountPoints2: {8200fbfe-0bfe-11e0-a488-0c6076aed563} - F:\autorun.exe
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-09-22] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [825864 2009-08-18] (Dritek System Inc.)
HKLM-x32\...\Run: [VitaKeyPdtWzd] - C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe [3567616 2009-08-28] (Egis Technology Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] - C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [419112 2009-10-06] (CyberLink Corp.)
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-06-07] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2013\avgui.exe [3147384 2012-12-11] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-07-12] (RealNetworks, Inc.)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [162336 2009-07-08] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [162336 2009-07-08] ()
Lsa: [Notification Packages] C:\Program Files (x86)\Acer Bio Protection\PwdFilterV64
Startup: C:\Users\Roy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
ShortcutTarget: MagicDisc.lnk -> C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_8940g&r=27361110p206l0373z1h5t4891a229
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {2329651E-CDE9-41DE-8D85-B9FC310889BF} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=a5c6ff79-a787-4634-9e04-2c9ae31f9357&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {431BFA64-D667-4CEC-855E-2622E316DD10} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=a5c6ff79-a787-4634-9e04-2c9ae31f9357&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {4CD3B922-6928-4751-A543-6F427BBDEF6E} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=a5c6ff79-a787-4634-9e04-2c9ae31f9357&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {5A3E0C78-4DBA-4B4B-B5E0-A609B5F4BB19} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=a5c6ff79-a787-4634-9e04-2c9ae31f9357&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E676F6F676C652E636F6D2F7365617263683F736F7572636569643D69653726713D7B7365617263685465726D737D26726C733D636F6D2E6D6963726F736F66743A7B6C616E67756167657D3A7B72656665727265723A736F757263653F7D2669653D7B696E707574456E636F64696E677D266F653D7B6F7574707574456E636F64696E677D26726C7A3D31493741434157&st={searchTerms}&clid=a5c6ff79-a787-4634-9e04-2c9ae31f9357&pid=freewarede&k=0
SearchScopes: HKCU - {D7C27CBE-CF63-4336-9A83-21453664E791} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=a5c6ff79-a787-4634-9e04-2c9ae31f9357&pid=freewarede&mode=bounce&k=0
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO-x32: DivX HiQ - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM -  No Name - !{82E1477C-B154-48D3-9891-33D83C26BCD3} -  No File
Toolbar: HKLM -  No Name - !{F3FEE66E-E034-436a-86E4-9690573BEE8A} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 -  No Name - !{82E1477C-B154-48D3-9891-33D83C26BCD3} -  No File
Toolbar: HKLM-x32 -  No Name - !{F3FEE66E-E034-436a-86E4-9690573BEE8A} -  No File
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://javadl-esd.sun.com/update/1.6.0/jinstall-6u30-windows-i586.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.7.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Roy\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF SearchPlugin: C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\searchplugins\11-suche.xml
FF SearchPlugin: C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\searchplugins\google-ssl.xml
FF SearchPlugin: C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: toolbar - C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\Extensions\toolbar@web.de.xpi
FF Extension: Skype extension - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video
FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF Extension: DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKCU\...\Firefox\Extensions: [finder@meingutscheincode.de] - C:\Program Files (x86)\Mein Gutscheincode Finder\Firefox
FF HKCU\...\Firefox\Extensions: [sparpilot@sparpilot.com] - C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\extensions\sparpilot@sparpilot.com

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://ebay.de/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U7) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.70.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll No File
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (RealJukebox NS Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll No File
CHR Extension: (YouTube) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.5_0
CHR Extension: (Google Search) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (RealDownloader) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_0
CHR Extension: (WEB.DE MailCheck) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.2_0
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [ealchnonpofjocgofjpopjdoegbbkofj] - C:\Program Files (x86)\HappyLyrics\Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM-x32\...\Chrome\Extension: [jaogepninmlbinccpbiakcgiolijlllo] - C:\Program Files (x86)\1&1 Mail & Media\WEB.DE MailCheck\GC\webde_mailcheck.1.0.crx
CHR HKLM-x32\...\Chrome\Extension: [jgfpelakfkbbkkdchaaaknckhoadkcbo] - C:\Program Files (x86)\Mein Gutscheincode Finder\Chrome\chrome-extension.crx
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [5814904 2012-11-16] (AVG Technologies CZ, s.r.o.)
S2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [196664 2012-10-22] (AVG Technologies CZ, s.r.o.)
R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [796192 2009-08-19] (Acer Incorporated)
R2 IGBASVC; C:\Program Files (x86)\Acer Bio Protection\BASVC.exe [3450368 2009-08-28] (Egis Technology Inc.)
S2 McNeelUpdate; C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe [67752 2012-09-28] (Robert McNeel & Associates)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
R2 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [311592 2009-08-06] (Egis Technology Inc.)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [253952 2009-07-10] (Acer Incorporated)
S3 Samsung UPD Service2; C:\Windows\System32\SUPDSvc2.exe [158208 2012-04-06] (Samsung Electronics)
S3 SandraAgentSrv; C:\Programme\SiSoftware\SiSoftware Sandra Lite 2011a\RpcAgentSrv.exe [93848 2009-08-10] (SiSoftware)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [821720 2012-11-25] (Mister Group)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S0 johci; C:\Windows\System32\DRIVERS\johci.sys [22640 2009-08-24] (JMicron )
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
R3 nuvotoncir; C:\Windows\System32\DRIVERS\nuvotoncir.sys [48128 2009-06-24] (Nuvoton Technology Corporation)
S3 SANDRA; C:\Programme\SiSoftware\SiSoftware Sandra Lite 2011a\WNt500x64\Sandra.sys [23112 2009-08-08] (SiSoftware)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [146928 2009-09-02] (CyberLink Corp.)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [146928 2009-09-02] (CyberLink Corp.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-25 07:54 - 2013-09-25 07:54 - 00000000 ____D C:\FRST
2013-09-24 23:25 - 2013-09-24 23:25 - 00000000 ____D C:\Users\Roy\AppData\Local\{E68272D6-FD97-4804-B195-1C2F92544016}
2013-09-24 11:24 - 2013-09-24 11:25 - 00000000 ____D C:\Users\Roy\AppData\Local\{F67DB33D-CF52-47A1-A862-3694CB865416}
2013-09-23 23:24 - 2013-09-23 23:24 - 00000000 ____D C:\Users\Roy\AppData\Local\{FDF9F093-94DA-4B80-80D6-9E4A96CA9261}
2013-09-23 11:23 - 2013-09-23 11:24 - 00000000 ____D C:\Users\Roy\AppData\Local\{F3D61760-FCDE-4497-BF38-5554270CBEF7}
2013-09-22 23:23 - 2013-09-22 23:23 - 00000000 ____D C:\Users\Roy\AppData\Local\{0BBE6448-75EF-4668-A68C-1AF787836574}
2013-09-22 11:23 - 2013-09-22 11:23 - 00000000 ____D C:\Users\Roy\AppData\Local\{2E35A3B6-B181-494C-BE84-0D2C3813A7C2}
2013-09-21 23:22 - 2013-09-21 23:23 - 00000000 ____D C:\Users\Roy\AppData\Local\{41DDBA39-5F76-4CE5-A805-8D0AC498612A}
2013-09-21 11:22 - 2013-09-21 11:22 - 00000000 ____D C:\Users\Roy\AppData\Local\{79827C39-9EE7-4D6B-AD94-643317824C85}
2013-09-21 08:20 - 2013-09-21 08:21 - 00291504 _____ C:\Windows\Minidump\092113-58047-01.dmp
2013-09-20 23:21 - 2013-09-20 23:22 - 00000000 ____D C:\Users\Roy\AppData\Local\{23B78F9F-B61F-4990-BA17-A99454489FFE}
2013-09-20 11:21 - 2013-09-20 11:21 - 00000000 ____D C:\Users\Roy\AppData\Local\{6881CC9A-F5B8-4780-A37E-919DBC1EAA4A}
2013-09-19 23:21 - 2013-09-19 23:21 - 00000000 ____D C:\Users\Roy\AppData\Local\{44CCCA98-DC33-4A81-9214-611730A1C14F}
2013-09-19 11:20 - 2013-09-19 11:21 - 00000000 ____D C:\Users\Roy\AppData\Local\{6192EC2C-3862-4203-9189-53DFDCD47502}
2013-09-19 09:23 - 2013-09-25 07:53 - 00000000 ____D C:\Uhrenbilder
2013-09-18 23:20 - 2013-09-18 23:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{91E7A245-F8EC-417B-80DE-1DE001076F71}
2013-09-18 20:21 - 2013-09-18 20:21 - 00013584 _____ C:\Users\Roy\AppData\Local\recently-used.xbel
2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{45E9094B-A28F-47F2-AE17-69E6559A5FEB}
2013-09-18 09:13 - 2013-09-18 12:08 - 00022528 _____ C:\Users\Roy\Documents\Bestellung praxis.xls
2013-09-17 23:20 - 2013-09-17 23:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{09D7E641-DAB7-4E0C-BD93-665877D2AE16}
2013-09-17 20:22 - 2013-09-19 09:59 - 00000000 ____D C:\Grieche
2013-09-17 20:21 - 2013-09-17 20:21 - 00000000 ____D C:\Neuer Ordner (2)
2013-09-17 11:20 - 2013-09-17 11:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{C107F7AE-5168-41FA-9674-FD5FCB9BF1AE}
2013-09-16 22:48 - 2013-09-16 22:48 - 00000000 ____D C:\Users\Roy\AppData\Local\{1B20179D-CC7A-4ED0-9EE0-BA2ECEF2BE8C}
2013-09-16 10:48 - 2013-09-16 10:48 - 00000000 ____D C:\Users\Roy\AppData\Local\{82CD7926-0CE0-4274-B800-3CF6EEE57DA7}
2013-09-15 22:47 - 2013-09-15 22:48 - 00000000 ____D C:\Users\Roy\AppData\Local\{A2FF1D7E-8FEB-40D8-9997-9BD2171ECDC0}
2013-09-15 10:47 - 2013-09-15 10:47 - 00000000 ____D C:\Users\Roy\AppData\Local\{426B37D3-4F8C-4E60-BB95-CBC135281039}
2013-09-14 20:06 - 2013-09-14 20:06 - 00000000 ____D C:\Users\Roy\AppData\Local\{C5CCD7F8-2C48-4F5E-9CE8-25C62AA3C29E}
2013-09-14 08:05 - 2013-09-14 08:06 - 00000000 ____D C:\Users\Roy\AppData\Local\{8840F9CE-03A3-4DD7-BA57-6AC419F334D0}
2013-09-13 20:05 - 2013-09-13 20:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{A5B85E7F-0FB3-4562-93A7-3331BD39515B}
2013-09-13 11:07 - 2013-09-16 08:57 - 00027136 ____H C:\Users\Roy\Documents\~WRL1242.tmp
2013-09-13 11:07 - 2013-09-16 08:50 - 00026624 ____H C:\Users\Roy\Documents\~WRL1770.tmp
2013-09-13 11:07 - 2013-09-14 03:09 - 00025600 ____H C:\Users\Roy\Documents\~WRL0904.tmp
2013-09-13 11:07 - 2013-09-13 11:07 - 00024064 ____H C:\Users\Roy\Documents\~WRL1117.tmp
2013-09-13 08:05 - 2013-09-13 08:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{046B52D8-B160-4C95-ACB4-E3A8A42D59CD}
2013-09-12 20:04 - 2013-09-12 20:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{FEDA9A97-3B45-43DD-8393-D13D9AAA4BF0}
2013-09-12 08:34 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-12 08:34 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-12 08:34 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-12 08:34 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-12 08:34 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-12 08:34 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-12 08:34 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-12 08:34 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-12 08:34 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-12 08:34 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-12 08:34 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-12 08:33 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-12 08:33 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-11 20:01 - 2013-09-11 20:01 - 00000000 ____D C:\Users\Roy\AppData\Local\{FC9E8CEA-513A-4032-AE81-F56F17B82FF7}
2013-09-11 14:29 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 14:29 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 14:29 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 14:29 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 14:29 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 14:29 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 14:29 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 14:29 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 14:29 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 14:29 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 14:29 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 14:29 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 14:29 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 14:29 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 14:29 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 14:29 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 14:29 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 14:29 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 14:29 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 14:29 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 14:29 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 14:29 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 14:29 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 14:29 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 14:29 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 14:29 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 21:57 - 2013-09-10 21:57 - 00024064 ____H C:\Users\Roy\Documents\~WRL0682.tmp
2013-09-10 20:00 - 2013-09-10 20:01 - 00000000 ____D C:\Users\Roy\AppData\Local\{341E286F-8D20-4861-8A6C-110C105F1D28}
2013-09-10 08:00 - 2013-09-10 08:00 - 00000000 ____D C:\Users\Roy\AppData\Local\{523F1115-BD37-45E8-A761-12D0E67F12DF}
2013-09-09 07:59 - 2013-09-12 08:04 - 00000000 ____D C:\Users\Roy\AppData\Local\{849D243E-F132-439A-A518-C313DBAD8C9F}
2013-09-08 19:27 - 2013-09-08 19:27 - 00000000 ____D C:\Users\Roy\AppData\Local\{CA3A1017-5743-4439-AAF7-354F4DC00EC8}
2013-09-08 17:50 - 2013-09-08 17:50 - 00025600 ____H C:\Users\Roy\Documents\~WRL2862.tmp
2013-09-08 07:27 - 2013-09-08 07:27 - 00000000 ____D C:\Users\Roy\AppData\Local\{4DDCE5CE-CA47-4092-96FE-874025FE1960}
2013-09-08 01:15 - 2013-09-08 01:16 - 00120224 _____ C:\Users\Roy\Documents\USB0001
2013-09-08 00:27 - 2013-09-08 00:28 - 00123581 _____ C:\Users\Roy\Documents\USB1
2013-09-08 00:17 - 2013-09-08 00:24 - 00123534 _____ C:\Users\Roy\Documents\USB002
2013-09-08 00:06 - 2013-09-08 00:06 - 00134893 _____ C:\Users\Roy\Documents\USB001
2013-09-08 00:04 - 2013-09-08 00:04 - 00123291 _____ C:\Users\Roy\Documents\usb
2013-09-07 22:25 - 2011-06-22 18:14 - 00034304 _____ () C:\Windows\system32\sst2cl6.dll
2013-09-07 22:25 - 2010-03-04 18:20 - 01909016 ____N C:\Windows\sst2cLTR.prn
2013-09-07 22:25 - 2010-03-04 18:20 - 01909016 ____N C:\Windows\sst2cA4.prn
2013-09-07 22:25 - 2009-08-27 20:25 - 00000357 _____ C:\Windows\system32\sst2cl6.smt
2013-09-07 22:25 - 2009-08-27 20:24 - 00151552 _____ (SS) C:\Windows\system32\sst2cci.exe
2013-09-07 22:25 - 2009-08-27 20:24 - 00089600 _____ (SS) C:\Windows\system32\sst2cci.dll
2013-09-07 13:55 - 2013-09-07 13:55 - 00000000 ____D C:\Users\Roy\AppData\Local\{5BDDCB18-646C-47F8-AC34-8B384379C663}
2013-09-06 23:52 - 2013-09-06 23:53 - 00000000 ____D C:\Users\Roy\AppData\Local\{BF8CB26D-EAA4-4B7F-ADAF-858E72D6BF40}
2013-09-06 15:31 - 2013-09-06 15:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-06 09:19 - 2013-09-06 09:19 - 00000000 ____D C:\Users\Roy\AppData\Local\{6A72D973-77EF-4644-AC45-78B57CE7F8A0}
2013-09-05 21:19 - 2013-09-05 21:19 - 00000000 ____D C:\Users\Roy\AppData\Local\{42E5B2EA-27A5-4098-A1C2-F676CEF26CF2}
2013-09-05 09:18 - 2013-09-05 09:19 - 00000000 ____D C:\Users\Roy\AppData\Local\{3E9CA061-DAE8-4FB3-8E72-781C39CFC53D}
2013-09-04 21:18 - 2013-09-04 21:18 - 00000000 ____D C:\Users\Roy\AppData\Local\{C32FBA2F-5FA2-4599-8E8C-59A55655826C}
2013-09-04 00:15 - 2013-09-04 00:15 - 00000000 ____D C:\Users\Roy\AppData\Local\{3A37E278-E484-4087-98E8-8A005DFCE557}
2013-09-03 12:14 - 2013-09-03 12:15 - 00000000 ____D C:\Users\Roy\AppData\Local\{7B1C7B9E-61C0-4FA4-A74A-CE9FE2E368CC}
2013-09-03 00:14 - 2013-09-03 00:14 - 00000000 ____D C:\Users\Roy\AppData\Local\{1FEBCB14-B989-47FD-A8AB-EB5D9139C29C}
2013-09-02 12:14 - 2013-09-02 12:14 - 00000000 ____D C:\Users\Roy\AppData\Local\{09F5B520-0816-4F7A-96C2-C5A9852E8E1C}
2013-09-02 00:13 - 2013-09-02 00:14 - 00000000 ____D C:\Users\Roy\AppData\Local\{20FDD8AD-6F1D-4761-AEF5-2728999D1EC3}
2013-09-01 12:13 - 2013-09-01 12:13 - 00000000 ____D C:\Users\Roy\AppData\Local\{A58ADCB2-841C-4AC9-B18F-E7DCC28207B7}
2013-09-01 00:12 - 2013-09-01 00:13 - 00000000 ____D C:\Users\Roy\AppData\Local\{108AF808-BE41-467C-B5C7-706CAE65FCA4}
2013-08-31 12:12 - 2013-08-31 12:12 - 00000000 ____D C:\Users\Roy\AppData\Local\{3FA4DBCF-3342-412E-8BF2-490E96FFC381}
2013-08-31 00:12 - 2013-08-31 00:12 - 00000000 ____D C:\Users\Roy\AppData\Local\{9C514648-A7FD-4AB3-8353-ACB016FEE4F5}
2013-08-30 08:05 - 2013-08-30 08:06 - 00000000 ____D C:\Users\Roy\AppData\Local\{7DD150D7-EF39-4875-A3E6-DE6771D734D7}
2013-08-29 17:17 - 2013-08-29 17:17 - 00000000 ____D C:\Users\Roy\AppData\Local\{274E3297-C680-44F5-9DC3-EDFEC90C9C43}
2013-08-26 11:34 - 2013-08-31 22:07 - 00026112 ____H C:\Users\Roy\Documents\~WRL0675.tmp
2013-08-26 11:34 - 2013-08-26 14:00 - 00025600 ____H C:\Users\Roy\Documents\~WRL1800.tmp
2013-08-26 11:34 - 2013-08-26 11:36 - 00024064 ____H C:\Users\Roy\Documents\~WRL2614.tmp
2013-08-26 11:34 - 2013-08-26 11:34 - 00024064 ____H C:\Users\Roy\Documents\~WRL0383.tmp
2013-08-26 08:55 - 2013-08-26 08:55 - 00000000 ____D C:\Users\Roy\AppData\Local\{6B7804CC-BF1A-49B8-9FC2-1E01562AF803}

==================== One Month Modified Files and Folders =======

2013-09-25 07:54 - 2013-09-25 07:54 - 00000000 ____D C:\FRST
2013-09-25 07:53 - 2013-09-19 09:23 - 00000000 ____D C:\Uhrenbilder
2013-09-25 07:48 - 2010-11-21 19:22 - 01570041 _____ C:\Windows\WindowsUpdate.log
2013-09-25 07:36 - 2010-11-28 16:18 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-25 07:35 - 2012-01-27 00:50 - 00000432 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-09-25 07:34 - 2013-04-21 17:12 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-25 07:34 - 2011-01-23 18:07 - 00000000 ____D C:\Users\Roy\AppData\Roaming\Skype
2013-09-24 23:25 - 2013-09-24 23:25 - 00000000 ____D C:\Users\Roy\AppData\Local\{E68272D6-FD97-4804-B195-1C2F92544016}
2013-09-24 14:36 - 2010-11-28 16:18 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-24 14:08 - 2012-11-28 10:35 - 00000000 ____D C:\AUDI A2
2013-09-24 11:25 - 2013-09-24 11:24 - 00000000 ____D C:\Users\Roy\AppData\Local\{F67DB33D-CF52-47A1-A862-3694CB865416}
2013-09-23 23:24 - 2013-09-23 23:24 - 00000000 ____D C:\Users\Roy\AppData\Local\{FDF9F093-94DA-4B80-80D6-9E4A96CA9261}
2013-09-23 11:24 - 2013-09-23 11:23 - 00000000 ____D C:\Users\Roy\AppData\Local\{F3D61760-FCDE-4497-BF38-5554270CBEF7}
2013-09-23 08:39 - 2012-02-04 13:02 - 00000000 ____D C:\ACO
2013-09-22 23:23 - 2013-09-22 23:23 - 00000000 ____D C:\Users\Roy\AppData\Local\{0BBE6448-75EF-4668-A68C-1AF787836574}
2013-09-22 22:09 - 2012-06-29 10:13 - 00000000 ____D C:\Users\Roy\AppData\Roaming\vlc
2013-09-22 11:23 - 2013-09-22 11:23 - 00000000 ____D C:\Users\Roy\AppData\Local\{2E35A3B6-B181-494C-BE84-0D2C3813A7C2}
2013-09-21 23:23 - 2013-09-21 23:22 - 00000000 ____D C:\Users\Roy\AppData\Local\{41DDBA39-5F76-4CE5-A805-8D0AC498612A}
2013-09-21 11:22 - 2013-09-21 11:22 - 00000000 ____D C:\Users\Roy\AppData\Local\{79827C39-9EE7-4D6B-AD94-643317824C85}
2013-09-21 08:33 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-21 08:33 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-21 08:29 - 2013-06-03 16:54 - 00000000 ____D C:\Program Files (x86)\Steam
2013-09-21 08:24 - 2013-03-26 14:30 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-21 08:22 - 2012-12-26 15:26 - 00000336 _____ C:\Windows\Tasks\DriverScanner.job
2013-09-21 08:21 - 2013-09-21 08:20 - 00291504 _____ C:\Windows\Minidump\092113-58047-01.dmp
2013-09-21 08:21 - 2013-06-09 00:22 - 00004011 _____ C:\Windows\setupact.log
2013-09-21 08:21 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-21 08:20 - 2013-07-13 18:55 - 00002944 _____ C:\Windows\PFRO.log
2013-09-21 08:20 - 2011-02-03 20:37 - 00000000 ____D C:\Windows\Minidump
2013-09-21 08:20 - 2010-11-21 19:33 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-20 23:22 - 2013-09-20 23:21 - 00000000 ____D C:\Users\Roy\AppData\Local\{23B78F9F-B61F-4990-BA17-A99454489FFE}
2013-09-20 21:45 - 2011-02-03 20:25 - 00002147 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-20 11:21 - 2013-09-20 11:21 - 00000000 ____D C:\Users\Roy\AppData\Local\{6881CC9A-F5B8-4780-A37E-919DBC1EAA4A}
2013-09-19 23:21 - 2013-09-19 23:21 - 00000000 ____D C:\Users\Roy\AppData\Local\{44CCCA98-DC33-4A81-9214-611730A1C14F}
2013-09-19 11:21 - 2013-09-19 11:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{6192EC2C-3862-4203-9189-53DFDCD47502}
2013-09-19 09:59 - 2013-09-17 20:22 - 00000000 ____D C:\Grieche
2013-09-19 09:27 - 2010-12-01 20:56 - 00000000 ____D C:\alles von samsung
2013-09-19 09:25 - 2012-10-20 09:45 - 00000000 ____D C:\abacus
2013-09-18 23:20 - 2013-09-18 23:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{91E7A245-F8EC-417B-80DE-1DE001076F71}
2013-09-18 20:21 - 2013-09-18 20:21 - 00013584 _____ C:\Users\Roy\AppData\Local\recently-used.xbel
2013-09-18 20:21 - 2013-08-04 19:17 - 00000000 ____D C:\Users\Roy\AppData\Local\gtk-2.0
2013-09-18 20:03 - 2013-07-22 17:14 - 00000000 ____D C:\Users\Roy\.gimp-2.8
2013-09-18 12:08 - 2013-09-18 09:13 - 00022528 _____ C:\Users\Roy\Documents\Bestellung praxis.xls
2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{45E9094B-A28F-47F2-AE17-69E6559A5FEB}
2013-09-17 23:20 - 2013-09-17 23:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{09D7E641-DAB7-4E0C-BD93-665877D2AE16}
2013-09-17 20:21 - 2013-09-17 20:21 - 00000000 ____D C:\Neuer Ordner (2)
2013-09-17 19:08 - 2011-10-23 23:18 - 00000000 ____D C:\DTA
2013-09-17 11:20 - 2013-09-17 11:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{C107F7AE-5168-41FA-9674-FD5FCB9BF1AE}
2013-09-16 22:48 - 2013-09-16 22:48 - 00000000 ____D C:\Users\Roy\AppData\Local\{1B20179D-CC7A-4ED0-9EE0-BA2ECEF2BE8C}
2013-09-16 10:48 - 2013-09-16 10:48 - 00000000 ____D C:\Users\Roy\AppData\Local\{82CD7926-0CE0-4274-B800-3CF6EEE57DA7}
2013-09-16 08:57 - 2013-09-13 11:07 - 00027136 ____H C:\Users\Roy\Documents\~WRL1242.tmp
2013-09-16 08:50 - 2013-09-13 11:07 - 00026624 ____H C:\Users\Roy\Documents\~WRL1770.tmp
2013-09-15 22:48 - 2013-09-15 22:47 - 00000000 ____D C:\Users\Roy\AppData\Local\{A2FF1D7E-8FEB-40D8-9997-9BD2171ECDC0}
2013-09-15 10:47 - 2013-09-15 10:47 - 00000000 ____D C:\Users\Roy\AppData\Local\{426B37D3-4F8C-4E60-BB95-CBC135281039}
2013-09-14 20:06 - 2013-09-14 20:06 - 00000000 ____D C:\Users\Roy\AppData\Local\{C5CCD7F8-2C48-4F5E-9CE8-25C62AA3C29E}
2013-09-14 08:06 - 2013-09-14 08:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{8840F9CE-03A3-4DD7-BA57-6AC419F334D0}
2013-09-14 03:09 - 2013-09-13 11:07 - 00025600 ____H C:\Users\Roy\Documents\~WRL0904.tmp
2013-09-13 20:05 - 2013-09-13 20:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{A5B85E7F-0FB3-4562-93A7-3331BD39515B}
2013-09-13 11:07 - 2013-09-13 11:07 - 00024064 ____H C:\Users\Roy\Documents\~WRL1117.tmp
2013-09-13 08:05 - 2013-09-13 08:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{046B52D8-B160-4C95-ACB4-E3A8A42D59CD}
2013-09-13 07:05 - 2009-09-08 05:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-12 20:05 - 2013-09-12 20:04 - 00000000 ____D C:\Users\Roy\AppData\Local\{FEDA9A97-3B45-43DD-8393-D13D9AAA4BF0}
2013-09-12 10:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-12 09:06 - 2010-11-22 04:14 - 00697098 _____ C:\Windows\system32\perfh007.dat
2013-09-12 09:06 - 2010-11-22 04:14 - 00148362 _____ C:\Windows\system32\perfc007.dat
2013-09-12 09:06 - 2009-07-14 07:13 - 01613412 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-12 09:02 - 2010-11-21 19:33 - 00000000 ___RD C:\Users\Roy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-12 09:02 - 2010-11-21 19:33 - 00000000 ___RD C:\Users\Roy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-12 08:58 - 2009-07-14 06:45 - 00438568 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-12 08:33 - 2013-07-19 07:39 - 00000000 ____D C:\Windows\system32\MRT
2013-09-12 08:26 - 2010-12-25 18:50 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-12 08:04 - 2013-09-09 07:59 - 00000000 ____D C:\Users\Roy\AppData\Local\{849D243E-F132-439A-A518-C313DBAD8C9F}
2013-09-12 01:43 - 2012-11-08 19:39 - 00000000 ____D C:\ba
2013-09-11 23:50 - 2011-02-17 10:45 - 00000000 ____D C:\bilder neu
2013-09-11 20:01 - 2013-09-11 20:01 - 00000000 ____D C:\Users\Roy\AppData\Local\{FC9E8CEA-513A-4032-AE81-F56F17B82FF7}
2013-09-11 07:40 - 2013-04-21 17:12 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-11 07:40 - 2013-04-21 17:12 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-11 07:40 - 2013-04-21 17:12 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-10 21:57 - 2013-09-10 21:57 - 00024064 ____H C:\Users\Roy\Documents\~WRL0682.tmp
2013-09-10 20:01 - 2013-09-10 20:00 - 00000000 ____D C:\Users\Roy\AppData\Local\{341E286F-8D20-4861-8A6C-110C105F1D28}
2013-09-10 08:00 - 2013-09-10 08:00 - 00000000 ____D C:\Users\Roy\AppData\Local\{523F1115-BD37-45E8-A761-12D0E67F12DF}
2013-09-10 07:42 - 2013-06-28 16:39 - 00000000 ____D C:\j
2013-09-09 10:57 - 2010-11-21 19:32 - 00000000 ____D C:\Users\Roy\AppData\Local\VirtualStore
2013-09-08 21:05 - 2013-07-21 19:13 - 00000000 ____D C:\roy-doc
2013-09-08 19:27 - 2013-09-08 19:27 - 00000000 ____D C:\Users\Roy\AppData\Local\{CA3A1017-5743-4439-AAF7-354F4DC00EC8}
2013-09-08 17:50 - 2013-09-08 17:50 - 00025600 ____H C:\Users\Roy\Documents\~WRL2862.tmp
2013-09-08 07:27 - 2013-09-08 07:27 - 00000000 ____D C:\Users\Roy\AppData\Local\{4DDCE5CE-CA47-4092-96FE-874025FE1960}
2013-09-08 01:16 - 2013-09-08 01:15 - 00120224 _____ C:\Users\Roy\Documents\USB0001
2013-09-08 01:16 - 2012-01-19 12:57 - 00000099 _____ C:\Users\Public\LMDebug.log
2013-09-08 00:28 - 2013-09-08 00:27 - 00123581 _____ C:\Users\Roy\Documents\USB1
2013-09-08 00:24 - 2013-09-08 00:17 - 00123534 _____ C:\Users\Roy\Documents\USB002
2013-09-08 00:06 - 2013-09-08 00:06 - 00134893 _____ C:\Users\Roy\Documents\USB001
2013-09-08 00:04 - 2013-09-08 00:04 - 00123291 _____ C:\Users\Roy\Documents\usb
2013-09-07 23:58 - 2012-01-19 12:57 - 00000276 _____ C:\Users\Public\Desktop\SAMSUNG Dr.Printer.url
2013-09-07 23:47 - 2013-04-06 12:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-07 23:44 - 2013-03-09 12:46 - 00000000 ____D C:\BMW
2013-09-07 23:29 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-07 22:25 - 2012-01-19 12:52 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-09-07 22:03 - 2012-03-04 18:21 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-07 21:28 - 2013-07-09 08:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak
2013-09-07 13:55 - 2013-09-07 13:55 - 00000000 ____D C:\Users\Roy\AppData\Local\{5BDDCB18-646C-47F8-AC34-8B384379C663}
2013-09-06 23:53 - 2013-09-06 23:52 - 00000000 ____D C:\Users\Roy\AppData\Local\{BF8CB26D-EAA4-4B7F-ADAF-858E72D6BF40}
2013-09-06 15:32 - 2013-09-06 15:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-06 15:09 - 2012-03-15 16:57 - 01421824 ___SH C:\Users\Roy\Thumbs.db
2013-09-06 13:20 - 2013-07-03 16:34 - 00000000 ____D C:\mopar alles muss wech
2013-09-06 09:19 - 2013-09-06 09:19 - 00000000 ____D C:\Users\Roy\AppData\Local\{6A72D973-77EF-4644-AC45-78B57CE7F8A0}
2013-09-05 21:19 - 2013-09-05 21:19 - 00000000 ____D C:\Users\Roy\AppData\Local\{42E5B2EA-27A5-4098-A1C2-F676CEF26CF2}
2013-09-05 09:19 - 2013-09-05 09:18 - 00000000 ____D C:\Users\Roy\AppData\Local\{3E9CA061-DAE8-4FB3-8E72-781C39CFC53D}
2013-09-04 21:18 - 2013-09-04 21:18 - 00000000 ____D C:\Users\Roy\AppData\Local\{C32FBA2F-5FA2-4599-8E8C-59A55655826C}
2013-09-04 00:15 - 2013-09-04 00:15 - 00000000 ____D C:\Users\Roy\AppData\Local\{3A37E278-E484-4087-98E8-8A005DFCE557}
2013-09-03 12:15 - 2013-09-03 12:14 - 00000000 ____D C:\Users\Roy\AppData\Local\{7B1C7B9E-61C0-4FA4-A74A-CE9FE2E368CC}
2013-09-03 00:14 - 2013-09-03 00:14 - 00000000 ____D C:\Users\Roy\AppData\Local\{1FEBCB14-B989-47FD-A8AB-EB5D9139C29C}
2013-09-02 12:14 - 2013-09-02 12:14 - 00000000 ____D C:\Users\Roy\AppData\Local\{09F5B520-0816-4F7A-96C2-C5A9852E8E1C}
2013-09-02 00:14 - 2013-09-02 00:13 - 00000000 ____D C:\Users\Roy\AppData\Local\{20FDD8AD-6F1D-4761-AEF5-2728999D1EC3}
2013-09-01 12:13 - 2013-09-01 12:13 - 00000000 ____D C:\Users\Roy\AppData\Local\{A58ADCB2-841C-4AC9-B18F-E7DCC28207B7}
2013-09-01 00:13 - 2013-09-01 00:12 - 00000000 ____D C:\Users\Roy\AppData\Local\{108AF808-BE41-467C-B5C7-706CAE65FCA4}
2013-08-31 22:07 - 2013-08-26 11:34 - 00026112 ____H C:\Users\Roy\Documents\~WRL0675.tmp
2013-08-31 12:12 - 2013-08-31 12:12 - 00000000 ____D C:\Users\Roy\AppData\Local\{3FA4DBCF-3342-412E-8BF2-490E96FFC381}
2013-08-31 00:12 - 2013-08-31 00:12 - 00000000 ____D C:\Users\Roy\AppData\Local\{9C514648-A7FD-4AB3-8353-ACB016FEE4F5}
2013-08-30 09:48 - 2013-03-26 14:30 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00204880 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-30 09:47 - 2013-03-26 14:29 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-08-30 09:47 - 2012-03-04 18:21 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-08-30 08:06 - 2013-08-30 08:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{7DD150D7-EF39-4875-A3E6-DE6771D734D7}
2013-08-29 17:17 - 2013-08-29 17:17 - 00000000 ____D C:\Users\Roy\AppData\Local\{274E3297-C680-44F5-9DC3-EDFEC90C9C43}
2013-08-28 18:59 - 2013-04-28 10:47 - 00000000 ____D C:\Users\Roy\AppData\Local\Citrix
2013-08-26 14:00 - 2013-08-26 11:34 - 00025600 ____H C:\Users\Roy\Documents\~WRL1800.tmp
2013-08-26 11:36 - 2013-08-26 11:34 - 00024064 ____H C:\Users\Roy\Documents\~WRL2614.tmp
2013-08-26 11:34 - 2013-08-26 11:34 - 00024064 ____H C:\Users\Roy\Documents\~WRL0383.tmp
2013-08-26 08:55 - 2013-08-26 08:55 - 00000000 ____D C:\Users\Roy\AppData\Local\{6B7804CC-BF1A-49B8-9FC2-1E01562AF803}

Files to move or delete:
====================
C:\Users\Roy\csbgame.dat
C:\Users\Roy\csbgame2.dat
C:\Users\Roy\CSBwin12_100.exe
C:\Users\Roy\dungeon.dat
C:\Users\Roy\gimp-2.8.6-setup.exe
C:\Users\Roy\googleupdatesetup.exe
C:\Users\Roy\graphics.dat


Some content of TEMP:
====================
C:\Users\Roy\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-21 10:03

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-09-2013
Ran by Roy at 2013-09-25 08:01:32
Running from C:\Uhrenbilder
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Microsoft Security Essentials (Enabled - Up to date) {3F839487-C7A2-C958-E30C-E2825BA31FB5}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: Microsoft Security Essentials (Enabled - Up to date) {84E27563-E198-C6D6-D9BC-D9F020245508}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (x32)
*tmx englisch (x32 Version: 5.00.0000)
3Dconnexion 3DxSoftware (x64 Edition) (x32 Version: 3.16.1)
3Dconnexion 3DxWare (x64) (Version: 6.16.0000)
3Dconnexion Add-In for AutoCAD 2007 - 2010 (Version: 4.5.1)
3Dconnexion Add-In for Inventor 11 - 2013 (Version: 1.11.0)
3Dconnexion Add-In for Solid Edge V18 - ST5 (Version: 2.21.1)
3Dconnexion Add-In for SolidWorks 2005 - 2013 (Version: 2.22.1)
3Dconnexion Add-On for XSI v5.0 - 2013 (Version: 2.10.1)
3Dconnexion Collage (x32 Version: 1.3.0)
3Dconnexion Extension for SketchUp (x32 Version: 3.1.3)
3Dconnexion Plug-In for 3ds Max v9 - 2013 (Version: 5.5.1)
3Dconnexion Plug-in for Acrobat 3D (x32 Version: 1.2.0)
3Dconnexion Plug-In for Maya v8.5 - 2013 (Version: 4.2.2)
3Dconnexion Plug-In for NX v3.0 - v8.5 (Version: 2.12.2)
3Dconnexion Plug-In for Photoshop CS3 - CS6 (Version: 2.3.1)
3Dconnexion Plug-In for Pro/ENGINEER Wildfire 3.0 - Creo 2.0 (Version: 1.12.2)
3Dconnexion Trainer (x32 Version: 3.2.0)
3GP Media Player 1.0 (x32)
ACDSee (x32)
ACDSee Pro 2.5 (x32 Version: 2.5.335)
ACDSee Pro 3 (x32 Version: 3.0.355)
Acer Arcade Deluxe (x32 Version: 3.1.7020)
Acer Arcade Instant On (x32 Version: 3.0.20.1)
Acer Backup Manager (x32 Version: 2.0.1.28)
Acer Bio Protection (x32 Version: 6.2.54)
Acer Crystal Eye Webcam (x32 Version: 5.2.7.1)
Acer eRecovery Management (x32 Version: 4.05.3003)
Acer GridVista (x32 Version: 3.01.0730)
Acer PowerSmart Manager (x32 Version: 4.06.3004)
Acer Registration (x32 Version: 1.02.3006)
Acer ScreenSaver (x32 Version: 1.11.0715)
Acer Updater (x32 Version: 1.01.3014)
Acer VCM (x32 Version: 4.05.3000)
Acrobat.com (x32 Version: 1.6.65)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Reader XI (11.0.01) - Deutsch (x32 Version: 11.0.01)
Adobe Scout CC (Version: 1.1.0.354003)
Adobe Shockwave Player 11.5 (x32 Version: 11.5.9.620)
Agent Ransack 2010 (64-bit)
Apple Application Support (x32 Version: 2.1.5)
Apple Software Update (x32 Version: 2.1.3.127)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
AVG 2013 (Version: 13.0.2899)
AVG 2013 (Version: 2013.0.2904)
Backup Manager Advance (x32 Version: 2.0.1.28)
Boulder Dash® - Treasure Pleasure™ 1.15 (x32 Version: 1.15)
Broadcom Gigabit NetLink Controller (Version: 12.26.01)
CCleaner (Version: 4.02)
CDBurnerXP (x32 Version: 4.5.1.4003)
Citrix Online Launcher (x32 Version: 1.0.122)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)
Corel Graphics - Windows Shell Extension (x32 Version: 16.0.0.707)
Corel Graphics - Windows Shell Extension (x32 Version: 16.0.707)
Corel Graphics - Windows Shell Extension 64 Bit (Version: 16.0.707)
CorelDRAW Graphics Suite X6 - Capture (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - Common (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - Connect (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - Custom Data (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - DE (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - Draw (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - Filters (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - FontNav (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - IPM (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - PHOTO-PAINT (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - Photozoom Plugin (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - Redist (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - Setup Files (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - VBA (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - VideoBrowser (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - VSTA (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 - Writing Tools (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 (x32 Version: 16.0)
CorelDRAW Graphics Suite X6 (x32 Version: 16.0.0.707)
D3DX10 (x32 Version: 15.4.2368.0902)
Der große IQ-Test 2002 (x32)
D-Fend Reloaded 1.1.0 (deinstallieren) (x32 Version: 1.1.0)
Digital Photo Software FotoMorph 12.4.4 (x32 Version: 12.4.4)
DivX-Setup (x32 Version: 2.4.1.4)
Drakensang - Am Fluss der Zeit (x32)
EasyBits GO (HKCU)
ElsterFormular-Upgrade (x32 Version: 14.1.11318)
eReg (x32 Version: 1.20.138.34)
eSobi v2 (x32 Version: 2.0.4.000274)
FastStone Image Viewer 4.2 (x32 Version: 4.2)
Fingerprint Solution (x32 Version: 6.1.54.0)
FormatFactory 2.70 (x32 Version: 2.70)
Free Screen Video Capture by Topviewsoft 4.1.7 (x32)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128)
FreePDF (Remove only) (x32)
GIMP 2.8.6 (Version: 2.8.6)
Google Chrome (x32 Version: 29.0.1547.76)
Google Earth (x32 Version: 7.1.1.1888)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752)
Google Update Helper (x32 Version: 1.3.21.153)
GoToMeeting 5.5.0.1132 (HKCU Version: 5.5.0.1132)
GPL Ghostscript (Version: 9.04)
GPL Ghostscript (Version: 9.07)
Happy Lyrics (x32)
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (x32 Version: 1)
Identity Card (x32 Version: 1.00.3001)
Inkscape 0.48.2 (x32 Version: 0.48.2)
Intel® Matrix Storage Manager
Java 7 Update 7 (x32 Version: 7.0.70)
Java Auto Updater (x32 Version: 2.1.9.0)
Java(TM) 6 Update 30 (x32 Version: 6.0.300)
Java(TM) 6 Update 31 (x32 Version: 6.0.310)
JavaFX 2.1.1 (x32 Version: 2.1.1)
JMicron 1394 Filter Driver (x32 Version: 1.00.05.00)
JMicron Flash Media Controller Driver (x32 Version: 1.00.29.02)
jose (x32 Version: 1.3)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Klett Nussknacker 4 (x32)
Launch Manager (x32 Version: 3.0.03)
Likno Web Button Maker - Free version (x32 Version: 1.4)
Linkury Smartbar (x32 Version: 1.6.0.391)
Logitech SetPoint 6.20 (Version: 6.20.64)
Macromedia FreeHand 10 (x32 Version: 10)
Magic ISO Maker v5.5 (build 0281) (x32)
MagicDisc 2.7.106 (x32)
Malwarebytes Anti-Malware Version 1.62.0.1300 (x32 Version: 1.62.0.1300)
Mathe1x1 (x32)
Maxwell (x32)
Maxwell for Rhino x86 (x32 Version: 1.8.3)
Micrografx Picture Publisher 10 (x32 Version: 1.0.0.0)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Language Pack 2007 - German/Deutsch (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office O MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) (x32)
Microsoft Office SharePoint Designer MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Suite Activation Assistant (x32 Version: 2.9)
Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office X MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office XP Professional mit FrontPage (x32 Version: 10.0.6626.0)
Microsoft Security Client (Version: 4.2.0223.1)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Security Essentials (Version: 4.2.223.1)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft VC80 Support DLLs (x32 Version: 1.0.0)
Microsoft Visual Basic for Applications 7.1 (x86) (x32 Version: 7.1.00.00)
Microsoft Visual Basic for Applications 7.1 (x86) German (x32 Version: 7.1.0.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (x32 Version: 11.0.51106.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (x32 Version: 9.0.30729)
Microsoft Works (x32 Version: 9.7.0621)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyPhoneExplorer (x32 Version: 1.8.4)
MyWinLocker (x32 Version: 3.1.72.0)
Norton Online Backup (x32 Version: 1.2.0.36)
NTI Backup Now 5 (x32 Version: 5.1.2.627)
NTI Backup Now Standard (x32 Version: 5.1.2.627)
NTI Media Maker 8 (x32 Version: 8.0.12.6623)
Nuvoton CIR Device Driver (x32 Version: 8.60.1000)
NVIDIA 3D Vision Treiber 320.18 (Version: 320.18)
NVIDIA Grafiktreiber 320.18 (Version: 320.18)
NVIDIA HD-Audiotreiber 1.3.24.2 (Version: 1.3.24.2)
NVIDIA Install Application (Version: 2.1002.124.810)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2018)
NVIDIA Systemsteuerung 320.18 (Version: 320.18)
NVIDIA Update Components (Version: 4.11.9)
OpenOffice.org 3.2 (x32 Version: 3.2.9502)
Opera Next 12.50 internal build 1583 (Version: 12.50.1583)
Pdf995 (x32)
PDFCreator (x32 Version: 1.6.2)
phase-6 2.3.2b (x32 Version: 2.3.2b)
Portal 2 (x32)
Portal 2 Publishing Tool (x32)
PrivateOrganizer 1.0 (x32 Version: 1.0.0)
QuickTime (x32 Version: 7.71.80.42)
RealDownloader (x32 Version: 1.3.2)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0)
RealPlayer (x32 Version: 16.0.2)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5930)
RealUpgrade 1.1 (x32 Version: 1.1.0)
RedMon - Redirection Port Monitor
Rhinoceros 4.0 (x32 Version: 4.0.20206)
Rhinoceros 4.0 SR8 (x32 Version: 4.0.50401)
Rhinoceros 5.0 (64-bit) (Version: 5.1.20927.2215)
Rhinoceros 5.0 (x32 Version: 5.1.20927.2215)
Rhinoceros 5.0 Help Media (x32 Version: 5.1.20828.1435)
Rhinoceros 5.0 Language Pack Installer (de-DE) (x32 Version: 5.1.20905.0935)
Rocks'n'Diamonds 3.3.0.1 (x32)
Samsung Universal Print Driver (x32 Version: 2.03.09.00)
save2pc 5.24 (x32)
Scribus 1.4.2 (64bit) (Version: 1.4.2)
Sigel Beschriftungssoftware für PC-Mahnbescheide (x32)
SiSoftware Sandra Lite 2011a (Version: 17.20.2011.1)
Skype Toolbars (x32 Version: 5.3.7555)
Skype™ 6.3 (x32 Version: 6.3.107)
SnagIt 5 (x32 Version: 5.0)
Spybot - Search & Destroy (x32 Version: 2.0.12)
Steam (x32 Version: 1.0.0.0)
Synaptics Pointing Device Driver (Version: 14.0.0.3)
System Explorer 4.0.0 (x32)
The Elder Scrolls V: Skyrim (x32)
TomTom HOME (x32 Version: 2.9.4)
TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (x32)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Excel 2007 Help (KB963678) (x32)
Update for Microsoft Office OneNote 2007 Help (KB963670) (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update for Microsoft Office Script Editor Help (KB963671) (x32)
Update for Microsoft Office Word 2007 Help (KB963665) (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VC80CRTRedist - 8.0.50727.4053 (x32 Version: 1.1.0)
Virtual Engine Calculator 2.20j (x32 Version: 2.20.0100)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
VLC media player 2.0.2 (x32 Version: 2.0.2)
Wartung Samsung CLP-320 Series (x32)
Wartung Samsung CLX-3180 Series (x32)
WEB.DE MailCheck für Google Chrome (x32 Version: 1.0.0.0)
Welcome Center (x32 Version: 1.00.3005)
WIDCOMM Bluetooth Software (Version: 6.2.0.9700)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Sync (x32 Version: 14.0.8064.206)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
WinUAE 2.3.0 (x32 Version: 2.3.0)
WinZip 17.0 (Version: 17.0.10283)
XnView 2.03 (x32 Version: 2.03)
Youtube Downloader HD v. 2.9.8.5 (x32)
YTD Toolbar v7.0 (x32 Version: 7.0)
YTD Video Downloader 3.9 (x32)
Zip Motion Block Video codec (Remove Only) (x32)

==================== Restore Points  =========================

12-09-2013 06:09:37 Windows Update
13-09-2013 05:00:37 Windows Update
16-09-2013 06:33:30 Windows Update
19-09-2013 14:32:17 Windows Update
22-09-2013 16:18:05 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {01248736-07A7-4611-AD4C-E6EE12F9C52B} - System32\Tasks\{F34DA533-4A36-4979-8136-BF9EB98F2AE9} => E:\Setup.exe
Task: {0486266A-4883-4F8A-BD5D-787155EB4A56} - System32\Tasks\{4A34C5A1-CD05-458F-AB88-D5C3402AD9AE} => C:\Program Files\DergroßeIQTest2002\Bin\iq_rtl2.exe [2002-08-22] ()
Task: {0567094E-5791-41E7-865B-7E439AF838DA} - System32\Tasks\{234A69B2-7A93-468C-8014-E6A2217980E1} => C:\Program Files\DergroßeIQTest2002\Bin\iq_rtl2.exe [2002-08-22] ()
Task: {0826A62F-DC67-40DD-8B58-FD7A0A696EC9} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {0829F0DC-A7B2-42ED-B7FB-2A57C862F36C} - System32\Tasks\{FE4A7EEC-F8E2-440B-B82B-F263A28886E1} => C:\Program Files\DergroßeIQTest2002\Bin\iq_rtl2.exe [2002-08-22] ()
Task: {0893DC58-C26A-427B-90F8-03AA2337E2E2} - System32\Tasks\{76B38C8F-F1F4-452F-B78C-5FD573D5C044} => E:\SCsetup.exe
Task: {0D35B8AF-CC94-4164-A784-B00FE0457850} - System32\Tasks\DriverScanner => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe
Task: {25DD9970-AB92-476C-BC82-5B34912D40D1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-28] (Google Inc.)
Task: {288D616C-9F05-462D-947D-402B9619E26D} - System32\Tasks\{8362800B-2111-43F7-B269-3339F906FD6D} => E:\Setup.exe
Task: {34771B6A-92D5-419D-9DB4-D53DEDF39B4C} - System32\Tasks\{A96A1971-C609-4925-A3FB-D5FD280BF3AE} => E:\SCsetup.exe
Task: {3EB93BBA-F5B3-4794-9F6F-8DF52B553481} - System32\Tasks\{584AD210-3C5F-443F-BE6E-5F03C3F4F1C2} => E:\Setup.exe
Task: {41506217-776A-4F0C-A914-993BD4F4F908} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.)
Task: {4BA127CC-AF26-4E9D-816E-BA90A0B583C2} - System32\Tasks\{4E1EA1B6-C268-4328-86D9-6B53DF5F84EE} => E:\Setup.exe
Task: {4E91F82D-1BC8-45A6-AB3C-E2A7CD304B08} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5AC6B165-12DC-4742-93B4-DAA007DA7164} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {5AD0F5CE-A39F-419F-BB0A-DBA7DE5D632E} - System32\Tasks\3DconnexionCreateProcess_3DxSRV.EXE => C:\Program Files\3Dconnexion\3Dconnexion 3DxSoftware\3DxWare64\3DxSRV.EXE [2012-10-11] (3Dconnexion, INC)
Task: {5B2DA630-DE10-43DB-B1C2-B45C38B0DC0D} - System32\Tasks\{3358E146-AB80-4393-9DB9-758A5A6253DC} => C:\Program Files\DergroßeIQTest2002\Bin\iq_rtl2.exe [2002-08-22] ()
Task: {701B3D39-4C5C-4A6D-B019-7DAD10B62B4D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {7386951B-2A3F-47BB-9F14-AD2D648FCE09} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2986316192-1149215822-2473206717-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {81E95AA5-958C-4BA6-9BB9-8872CC75D56D} - System32\Tasks\Egis technology-Online-Aktualisierungsprogramm => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [2009-08-04] (Egis Technology Inc.)
Task: {85DEAEBB-C37B-4A25-AC71-401DA96F2569} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2986316192-1149215822-2473206717-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {8CEE4814-012C-4ECA-B9C1-6C1A22091998} - System32\Tasks\{D1347E5F-CE47-426C-9399-ECE29C01F66F} => C:\Program Files\DergroßeIQTest2002\Bin\iq_rtl2.exe [2002-08-22] ()
Task: {94BEA9FE-A2D2-41F3-9D6B-6E7F73335FCD} - System32\Tasks\{DA61739A-A3F9-4764-8060-88853816C7A4} => E:\Setup.exe
Task: {9B17CEB1-FEEB-486F-A227-2A93A00C09CB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-28] (Google Inc.)
Task: {9C04414D-D292-4363-B0F5-494376F9768D} - System32\Tasks\EPUpdater => C:\Users\Roy\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe
Task: {AC08385B-ADD3-46D3-9D55-CDB95C8BDEBF} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => C:\program files (x86)\real\realplayer\update\realsched.exe [2013-07-12] (RealNetworks, Inc.)
Task: {AEA092C8-AC36-4438-9F08-372C620C2B38} - System32\Tasks\{8AB93BFF-F538-4739-8C2C-00167F65F806} => E:\Setup.exe
Task: {C0B8C212-12CF-4CDA-BE8A-8E9BB3F32F0F} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2009-07-09] (Acer)
Task: {C2A2165E-D490-4F10-A703-8AA53BE6FC65} - System32\Tasks\{D0B02E1A-CA65-4B2D-96F2-1AAC03770D85} => C:\Program Files\DergroßeIQTest2002\Bin\iq_rtl2.exe [2002-08-22] ()
Task: {C2DA6C4C-9C83-47B0-96C5-C3D5C941C7E0} - System32\Tasks\{4821ABB3-AEC9-4B54-85D0-6F14DCDDB0B1} => E:\Setup.exe
Task: {C6FBFF6C-69F6-41FB-B734-AD197A50C70A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-11] (Adobe Systems Incorporated)
Task: {CE56EF87-A3D9-4269-BE74-0C7CDB1D702A} - System32\Tasks\{CAC5CD8C-B568-4AC2-AC75-8AA99E62D483} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-04-19] (Skype Technologies S.A.)
Task: {D327FD82-CE87-4CB5-A651-7314D160A62C} - System32\Tasks\ProtectedSearch\Protected Search => C:\Program Files (x86)\Protected Search\ProtectedSearch.exe
Task: {D32EA1E4-DA0E-467E-A498-AA8408663EE1} - System32\Tasks\{82E050B1-356E-4DC0-91BC-D604D2E77CBE} => Firefox.exe 
Task: {D7BE439E-B2CA-4A59-B89F-DF3B097D7075} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2986316192-1149215822-2473206717-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {D8D4EE8B-9F97-4F7E-9276-5A1C1EBFDC0E} - System32\Tasks\{D66B84C1-1E17-467A-9F3A-FD15E0D90F4B} => C:\Program Files\DergroßeIQTest2002\Bin\iq_rtl2.exe [2002-08-22] ()
Task: {DB6B5D38-2C7A-445A-AA9A-19F8A8707ED0} - System32\Tasks\{B8F1252F-570E-4F5E-B564-E8D5A718DC1B} => E:\SCsetup.exe
Task: {DB9E653D-384E-4F3F-B272-EE9281A0ACED} - System32\Tasks\{510215C7-EC1C-4469-89F5-06781063B31B} => E:\SCsetup.exe
Task: {DF769EEA-E338-4ED5-8CDE-2CA6C2B9137B} - System32\Tasks\{62A461A6-CA35-4655-A9E2-C371F0D2F6C4} => E:\SCsetup.exe
Task: {E2987134-169B-4FB9-A149-781247D84D00} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)
Task: {E32C1989-37B4-459C-B0D8-CB3C3DFD361C} - System32\Tasks\{27B3319B-4D98-4CC5-8F7F-D9087A183313} => C:\Windows\System32\msiexec.exe [2010-11-20] (Microsoft Corporation)
Task: {E552AA2E-3E43-40C7-9641-39F849B60838} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-18] (Adobe Systems Incorporated)
Task: {E718DADA-FBEA-448C-AAE9-E6A197013503} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {E9C7F707-E5BB-4567-B16B-1D5A7DB4625C} - System32\Tasks\{58A1D7F8-10A6-483A-A6F4-E174CC2472B8} => E:\Setup.exe
Task: {F101551F-8D94-4CE9-9E12-D386FBF24367} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2986316192-1149215822-2473206717-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {FCABFB8B-C8DB-4F24-B1F8-43D4DF622359} - System32\Tasks\{BAB97219-DB40-4F8B-B5E3-C2AABCB64D9A} => E:\SCsetup.exe
Task: {FCD92184-883C-43D3-8480-096C2844C871} - System32\Tasks\{B9382943-E085-44E4-B182-608A9B1A5EA1} => E:\SCsetup.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DriverScanner.job => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-11-12 18:00 - 2012-11-12 18:00 - 00012216 ____R (WinZip Computing, S.L.) C:\Program Files\WinZip\wzshls64.dll
2012-10-09 23:16 - 2012-06-17 14:22 - 00686080 _____ (Bandoo media inc) C:\Program Files (x86)\jZip\jZipShell64x.dll
2013-06-04 04:00 - 2013-05-12 22:34 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2010-12-20 20:35 - 2008-05-23 00:25 - 00043520 _____ (MagicISO, Inc.) C:\Program Files (x86)\MagicISO\misosh64.dll
2011-11-06 21:48 - 2010-03-29 14:32 - 00548264 _____ (Mythicsoft Ltd) C:\Program Files\Mythicsoft\Agent Ransack\ShellExt.dll
2013-06-04 03:35 - 2013-05-12 23:42 - 02935696 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-09-07 22:25 - 2011-06-22 18:13 - 00826880 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\sst2cdu.dll
2013-09-07 22:25 - 2011-06-22 18:13 - 01219584 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\system32\spool\DRIVERS\x64\3\sst2c.dll
2012-10-26 15:59 - 2012-10-26 15:59 - 20778896 _____ (Opera Software) C:\Program Files\Opera Next x64\Opera.dll
2013-09-11 14:29 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 14:29 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\syswow64\KERNEL32.dll
2013-09-11 14:29 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\syswow64\KERNELBASE.dll
2011-06-21 09:57 - 2010-11-20 14:08 - 00833024 _____ (Microsoft Corporation) C:\Windows\syswow64\USER32.dll
2011-06-21 09:57 - 2010-11-20 14:08 - 00311296 _____ (Microsoft Corporation) C:\Windows\syswow64\GDI32.dll
2009-07-14 01:25 - 2009-07-14 03:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\syswow64\LPK.dll
2013-01-10 00:21 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\syswow64\USP10.dll
2012-02-16 09:02 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\syswow64\msvcrt.dll
2011-06-21 09:57 - 2010-11-20 14:18 - 00640512 _____ (Microsoft Corporation) C:\Windows\syswow64\ADVAPI32.dll
2009-07-14 01:11 - 2009-07-14 03:16 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2013-08-14 11:05 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\syswow64\RPCRT4.dll
2012-07-12 12:25 - 2012-06-02 06:34 - 00096768 _____ (Microsoft Corporation) C:\Windows\syswow64\SspiCli.dll
2009-07-14 01:12 - 2009-07-14 03:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPTBASE.dll
2011-06-21 09:57 - 2010-11-20 14:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\comdlg32.dll
2011-06-21 09:57 - 2010-11-20 14:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\syswow64\SHLWAPI.dll
2013-09-11 14:29 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\SHELL32.dll
2011-06-21 09:58 - 2010-11-20 14:20 - 01414144 _____ (Microsoft Corporation) C:\Windows\syswow64\ole32.dll
2011-10-13 07:26 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\OLEAUT32.dll
2009-07-14 01:28 - 2009-07-14 03:15 - 00828928 _____ (Microsoft Corporation) C:\Windows\syswow64\MSCTF.dll
2009-07-14 01:44 - 2009-07-14 03:15 - 00522240 _____ (Microsoft Corporation) C:\Windows\syswow64\CLBCatQ.DLL
2011-06-21 09:57 - 2010-11-20 14:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\syswow64\WS2_32.dll
2009-07-14 01:12 - 2009-07-14 03:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\syswow64\NSI.dll
2013-09-12 08:34 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\syswow64\WININET.dll
2009-07-14 01:15 - 2009-07-14 03:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\syswow64\normaliz.DLL
2013-09-12 08:34 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\syswow64\iertutil.dll
2013-08-14 11:07 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPT32.dll
2011-06-21 09:56 - 2010-11-20 14:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\syswow64\MSASN1.dll
2011-06-21 09:58 - 2010-11-20 14:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\syswow64\SETUPAPI.dll
2011-06-29 07:19 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\syswow64\CFGMGR32.dll
2011-06-29 07:19 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\syswow64\DEVOBJ.dll
2011-06-21 09:57 - 2010-11-20 14:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\syswow64\WLDAP32.dll
2011-06-21 09:58 - 2010-11-20 14:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\syswow64\setupapi.dll
2013-08-14 11:07 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\syswow64\WINTRUST.dll
2009-07-14 02:03 - 2009-07-14 03:15 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2011-06-21 09:56 - 2010-11-20 14:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WINMM.dll
2011-06-21 09:55 - 2010-11-20 14:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2009-07-14 02:03 - 2009-07-14 03:15 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2011-06-21 09:58 - 2010-11-20 14:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2009-07-14 01:41 - 2009-07-14 03:16 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VERSION.dll
2009-07-14 01:27 - 2009-07-14 03:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2009-07-14 01:24 - 2009-07-14 03:15 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2009-07-14 01:51 - 2009-07-14 03:14 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vidcap.ax
2011-06-21 09:54 - 2010-11-20 14:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kswdmcap.ax
2011-04-15 15:18 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC42.dll
2011-06-21 09:58 - 2010-11-20 14:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBC32.dll
2009-07-14 02:11 - 2009-07-14 03:09 - 00229376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcint.dll
2011-10-13 07:26 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\oleaut32.dll
2013-09-12 08:34 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\syswow64\wininet.dll
2013-09-11 14:29 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\shell32.dll
2009-07-14 01:15 - 2009-07-14 03:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\syswow64\PSAPI.DLL
2013-08-14 11:07 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\syswow64\wintrust.dll
2013-09-12 08:34 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\syswow64\URLMON.DLL
2013-01-10 00:21 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2011-08-10 16:13 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XmlLite.dll
2011-06-21 09:58 - 2010-11-20 14:21 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWow64\JScript.dll
2013-09-12 08:33 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2012-07-12 12:25 - 2012-06-02 06:40 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2009-07-14 01:33 - 2009-07-14 03:17 - 00249680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2009-07-14 01:15 - 2009-07-14 03:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\syswow64\psapi.dll
2013-04-23 18:30 - 2013-08-22 00:18 - 00687104 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2011-06-21 09:57 - 2010-11-20 14:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\COMDLG32.dll
2013-05-03 15:35 - 2013-09-06 22:55 - 01120680 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-03-26 16:16 - 2013-08-07 21:31 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2013-09-12 08:34 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\syswow64\urlmon.dll
2012-12-11 09:51 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2012-12-11 09:51 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2012-12-11 09:51 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2012-04-12 08:25 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\syswow64\imagehlp.dll
2009-07-14 02:04 - 2009-07-14 03:15 - 00145408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dinput8.dll
2013-02-26 15:38 - 2013-02-26 15:38 - 01996392 ____R (Skype Technologies) C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
2013-09-12 08:34 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2009-02-02 18:33 - 2009-02-02 18:33 - 00460199 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2009-09-22 21:41 - 2009-09-22 21:41 - 00012800 _____ (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\MUI\0407\lang.dll
2011-06-21 09:57 - 2010-11-20 14:18 - 00640512 _____ (Microsoft Corporation) C:\Windows\syswow64\ADVAPI32.DLL
2011-06-21 09:57 - 2010-11-20 14:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\COMDLG32.DLL
2011-06-21 09:58 - 2010-11-20 14:20 - 01414144 _____ (Microsoft Corporation) C:\Windows\syswow64\OLE32.DLL
2011-10-13 07:26 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\OLEAUT32.DLL
2011-06-21 09:58 - 2010-11-20 14:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\syswow64\SetupApi.dll
2010-11-21 19:53 - 2010-11-21 19:53 - 00566832 _____ (EgisTec) C:\Windows\system32\NBMatS1SDK.DLL
2009-07-14 01:15 - 2009-07-14 03:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\syswow64\PSAPI.dll
2013-09-11 14:29 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\syswow64\kernel32.dll
2011-06-21 09:57 - 2010-11-20 14:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\syswow64\shlwapi.DLL
2009-07-14 02:07 - 2009-07-14 03:14 - 00064000 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\SysWOW64\l3codeca.acm
2012-04-12 08:25 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\syswow64\IMAGEHLP.DLL
2013-04-24 11:14 - 2012-11-13 14:06 - 00528288 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2013-04-24 11:14 - 2012-11-13 14:06 - 00108960 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-04-24 11:14 - 2012-11-13 14:06 - 03643352 _____ (Project JEDI) C:\Program Files (x86)\Spybot - Search & Destroy 2\Jcl150.bpl
2013-04-24 11:14 - 2012-11-13 14:06 - 00416160 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-08-14 11:07 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\syswow64\crypt32.dll
2013-04-24 11:14 - 2012-11-13 14:06 - 00158624 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-04-24 11:14 - 2012-11-13 14:06 - 00554400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
2009-07-14 01:15 - 2009-07-14 03:10 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SFC.DLL
2013-09-12 08:34 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2009-07-14 01:27 - 2009-07-14 03:16 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uiautomationcore.dll
2012-03-08 18:16 - 2012-03-08 18:16 - 00284512 _____ ( ) C:\Program Files (x86)\Windows Live\Writer\de\WindowsLive.Writer.Localization.resources.dll
2011-06-21 09:56 - 2010-11-20 14:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2009-07-14 01:29 - 2009-07-14 03:16 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qmgrprxy.dll
2009-09-08 05:53 - 2009-09-08 05:53 - 08007680 _____ ( ) C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
2013-06-25 03:14 - 2013-06-25 03:14 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2011-06-21 09:56 - 2010-11-20 14:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2009-07-14 02:10 - 2009-07-14 03:16 - 00316928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll
2011-06-21 09:57 - 2010-11-20 14:08 - 00311296 _____ (Microsoft Corporation) C:\Windows\syswow64\GDI32.DLL
2000-09-06 01:35 - 2000-09-06 01:35 - 00139264 _____ (Lingsoft, Inc.) C:\Program Files (x86)\Common Files\Microsoft Shared\Proof\MSSP3GE.DLL
2013-09-20 21:45 - 2013-09-17 05:20 - 00709584 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\libglesv2.dll
2013-09-20 21:45 - 2013-09-17 05:20 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\libegl.dll
2013-09-20 21:45 - 2013-09-17 05:21 - 04053456 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll
2013-09-20 21:45 - 2013-09-17 05:21 - 00410576 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll
2013-09-20 21:45 - 2013-09-17 05:20 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ffmpegsumo.dll
2013-02-03 20:47 - 2013-02-03 20:47 - 00109704 _____ (DVDVideoSoft Ltd.) C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_0\np_dvs_plugin.dll
2013-09-20 21:45 - 2013-09-17 05:21 - 13611984 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll
2012-09-09 17:17 - 2012-09-09 17:17 - 00015848 _____ () C:\Program Files (x86)\Java\jre7\bin\jp2native.dll
2009-07-14 01:43 - 2009-07-14 03:15 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2011-01-14 14:14 - 2000-11-16 10:10 - 00327680 _____ () C:\Program Files (x86)\ACD Systems\ACDSee\InTouchClient.dll
2009-07-14 01:26 - 2009-07-14 03:14 - 00211968 _____ (Microsoft Corporation) C:\Windows\AppPatch\AcXtrnal.DLL
2011-01-14 14:14 - 2000-11-14 13:42 - 00577536 _____ (ACD Systems, Ltd.) C:\Program Files (x86)\ACD Systems\PlugIns\IDE_ACDStd.apl
2011-06-21 09:57 - 2010-11-20 14:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\syswow64\WS2_32.DLL

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:8A44841A
AlternateDataStreams: C:\ProgramData\Temp:945EB89B
AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1
AlternateDataStreams: C:\Users\Roy\Downloads\Erinnerung QZ am 24. Oktober 2012.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/25/2013 00:31:34 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/23/2013 04:36:25 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/23/2013 03:57:34 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/23/2013 00:33:11 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/21/2013 10:03:56 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/20/2013 02:28:34 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/19/2013 01:51:07 AM) (Source: Microsoft-Windows-Defrag) (User: )
Description: Volume "(H:)" wurde aufgrund eines Fehlers nicht defragmentiert: Der Datenträger wurde vom System getrennt. (0x89000011)

Error: (09/19/2013 01:04:40 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/19/2013 00:31:27 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/18/2013 01:14:20 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.


System errors:
=============
Error: (09/25/2013 07:35:18 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (09/25/2013 07:35:00 AM) (Source: ipnathlp) (User: )
Description: 192.168.2.100192.168.137.0255.255.255.0

Error: (09/25/2013 07:33:51 AM) (Source: ipnathlp) (User: )
Description: 

Error: (09/25/2013 07:33:22 AM) (Source: ipnathlp) (User: )
Description: 

Error: (09/25/2013 00:44:15 AM) (Source: ipnathlp) (User: )
Description: 

Error: (09/25/2013 00:40:02 AM) (Source: ipnathlp) (User: )
Description: 

Error: (09/25/2013 00:37:08 AM) (Source: ipnathlp) (User: )
Description: 

Error: (09/25/2013 00:32:55 AM) (Source: ipnathlp) (User: )
Description: 

Error: (09/25/2013 00:30:01 AM) (Source: ipnathlp) (User: )
Description: 

Error: (09/25/2013 00:25:48 AM) (Source: ipnathlp) (User: )
Description: 


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 67%
Total physical RAM: 4084.57 MB
Available physical RAM: 1345.18 MB
Total Pagefile: 8167.32 MB
Available Pagefile: 3351.87 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:282.49 GB) (Free:9.32 GB) NTFS
Drive d: (DATA) (Fixed) (Total:298.09 GB) (Free:120.05 GB) NTFS
Drive e: (11020648_131112) (CDROM) (Total:0.1 GB) (Free:0 GB) CDFS
Drive f: (Nussknacker 4) (CDROM) (Total:0.23 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: C4D4829C)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Not Active) - (Size=4 GB) - (Type=12)
Partition 3: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=282 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 298 GB) (Disk ID: C4D482B7)
Partition 1: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

@schrauber
combofix hat 50min "gewerkelt".
System wirkt deutlich "entschlackt" und schneller !
Zugriff bei web.de klappt bisher (4x getestet) wieder einwandfrei!

Einzig die in der zweiten mail beschriebene Google Chrome Warnung beim Öffnen der
Beobachtungsliste bei ebay (Bild anbei) besteht nach wie vor. Das Komische ist, dass
es nicht beim Einloggen angezeigt wird, sondern nur beim Öffnen der Beobachtungsliste.

Mille grazie bis hierher erstmal !!!!!

ComboFix 13-09-24.02 - Roy 25.09.2013  22:07:00.1.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.4085.1135 [GMT 2:00]
ausgeführt von:: c:\uhrenbilder\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Spybot - Search and Destroy *Enabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Acer Bio Protection\PwdFilterV64.dll
c:\program files (x86)\Common Files\Acer GameZone online.ico
c:\programdata\ntuser.dat
c:\programdata\xmlE3F8.tmp
c:\programdata\xmlE502.tmp
c:\programdata\xmlE561.tmp
c:\users\Roy\8270.JPG
c:\users\Roy\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Roy\AppData\Roaming\.#
c:\users\Roy\AppData\Roaming\.#\MBX@10EC@2072770.###
c:\users\Roy\AppData\Roaming\.#\MBX@10EC@20727A0.###
c:\users\Roy\AppData\Roaming\ACD Systems\ACDSee\ImageDB.ddf
c:\users\Roy\Documents\~WRD3540.tmp
c:\users\Roy\Documents\~WRL0040.tmp
c:\users\Roy\Documents\~WRL0063.tmp
c:\users\Roy\Documents\~WRL0074.tmp
c:\users\Roy\Documents\~WRL0080.tmp
c:\users\Roy\Documents\~WRL0162.tmp
c:\users\Roy\Documents\~WRL0179.tmp
c:\users\Roy\Documents\~WRL0349.tmp
c:\users\Roy\Documents\~WRL0383.tmp
c:\users\Roy\Documents\~WRL0394.tmp
c:\users\Roy\Documents\~WRL0433.tmp
c:\users\Roy\Documents\~WRL0517.tmp
c:\users\Roy\Documents\~WRL0559.tmp
c:\users\Roy\Documents\~WRL0580.tmp
c:\users\Roy\Documents\~WRL0675.tmp
c:\users\Roy\Documents\~WRL0682.tmp
c:\users\Roy\Documents\~WRL0711.tmp
c:\users\Roy\Documents\~WRL0727.tmp
c:\users\Roy\Documents\~WRL0731.tmp
c:\users\Roy\Documents\~WRL0904.tmp
c:\users\Roy\Documents\~WRL0913.tmp
c:\users\Roy\Documents\~WRL0935.tmp
c:\users\Roy\Documents\~WRL0993.tmp
c:\users\Roy\Documents\~WRL0998.tmp
c:\users\Roy\Documents\~WRL1010.tmp
c:\users\Roy\Documents\~WRL1052.tmp
c:\users\Roy\Documents\~WRL1060.tmp
c:\users\Roy\Documents\~WRL1069.tmp
c:\users\Roy\Documents\~WRL1117.tmp
c:\users\Roy\Documents\~WRL1125.tmp
c:\users\Roy\Documents\~WRL1173.tmp
c:\users\Roy\Documents\~WRL1182.tmp
c:\users\Roy\Documents\~WRL1185.tmp
c:\users\Roy\Documents\~WRL1213.tmp
c:\users\Roy\Documents\~WRL1242.tmp
c:\users\Roy\Documents\~WRL1394.tmp
c:\users\Roy\Documents\~WRL1434.tmp
c:\users\Roy\Documents\~WRL1592.tmp
c:\users\Roy\Documents\~WRL1684.tmp
c:\users\Roy\Documents\~WRL1685.tmp
c:\users\Roy\Documents\~WRL1721.tmp
c:\users\Roy\Documents\~WRL1755.tmp
c:\users\Roy\Documents\~WRL1770.tmp
c:\users\Roy\Documents\~WRL1800.tmp
c:\users\Roy\Documents\~WRL1946.tmp
c:\users\Roy\Documents\~WRL1972.tmp
c:\users\Roy\Documents\~WRL2004.tmp
c:\users\Roy\Documents\~WRL2019.tmp
c:\users\Roy\Documents\~WRL2235.tmp
c:\users\Roy\Documents\~WRL2242.tmp
c:\users\Roy\Documents\~WRL2289.tmp
c:\users\Roy\Documents\~WRL2309.tmp
c:\users\Roy\Documents\~WRL2330.tmp
c:\users\Roy\Documents\~WRL2349.tmp
c:\users\Roy\Documents\~WRL2390.tmp
c:\users\Roy\Documents\~WRL2532.tmp
c:\users\Roy\Documents\~WRL2554.tmp
c:\users\Roy\Documents\~WRL2614.tmp
c:\users\Roy\Documents\~WRL2615.tmp
c:\users\Roy\Documents\~WRL2841.tmp
c:\users\Roy\Documents\~WRL2860.tmp
c:\users\Roy\Documents\~WRL2862.tmp
c:\users\Roy\Documents\~WRL2893.tmp
c:\users\Roy\Documents\~WRL2896.tmp
c:\users\Roy\Documents\~WRL2922.tmp
c:\users\Roy\Documents\~WRL2946.tmp
c:\users\Roy\Documents\~WRL3045.tmp
c:\users\Roy\Documents\~WRL3127.tmp
c:\users\Roy\Documents\~WRL3144.tmp
c:\users\Roy\Documents\~WRL3173.tmp
c:\users\Roy\Documents\~WRL3183.tmp
c:\users\Roy\Documents\~WRL3322.tmp
c:\users\Roy\Documents\~WRL3364.tmp
c:\users\Roy\Documents\~WRL3407.tmp
c:\users\Roy\Documents\~WRL3459.tmp
c:\users\Roy\Documents\~WRL3469.tmp
c:\users\Roy\Documents\~WRL3479.tmp
c:\users\Roy\Documents\~WRL3502.tmp
c:\users\Roy\Documents\~WRL3579.tmp
c:\users\Roy\Documents\~WRL3586.tmp
c:\users\Roy\Documents\~WRL3601.tmp
c:\users\Roy\Documents\~WRL3607.tmp
c:\users\Roy\Documents\~WRL3620.tmp
c:\users\Roy\Documents\~WRL3733.tmp
c:\users\Roy\Documents\~WRL3770.tmp
c:\users\Roy\Documents\~WRL3828.tmp
c:\users\Roy\Documents\~WRL3966.tmp
c:\users\Roy\Documents\~WRL3976.tmp
c:\users\Roy\Documents\~WRL3991.tmp
c:\users\Roy\Documents\~WRL4049.tmp
c:\users\Roy\Documents\~WRL4080.tmp
c:\users\Roy\Documents\~WRL4093.tmp
c:\users\Roy\g2mdlhlpx.exe
c:\users\Roy\googleupdatesetup.exe
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-08-25 bis 2013-09-25  ))))))))))))))))))))))))))))))
.
.
2013-09-25 10:37 . 2013-02-05 02:28	41984	----a-w-	c:\windows\system32\Spool\prtprocs\x64\spe__pc.dll
2013-09-25 10:36 . 2011-04-11 05:26	34304	----a-w-	c:\windows\system32\spe__l.dll
2013-09-25 10:35 . 2010-10-20 08:46	89600	----a-w-	c:\windows\system32\spe__ci.dll
2013-09-25 10:35 . 2013-05-10 09:48	162136	----a-w-	c:\windows\system32\spe__ci.exe
2013-09-25 05:54 . 2013-09-25 05:54	--------	d-----w-	C:\FRST
2013-09-19 07:23 . 2013-09-25 17:58	--------	d-----w-	C:\Uhrenbilder
2013-09-17 18:22 . 2013-09-19 07:59	--------	d-----w-	C:\Grieche
2013-09-17 18:21 . 2013-09-17 18:21	--------	d-----w-	C:\Neuer Ordner (2)
2013-09-12 06:33 . 2013-08-10 05:21	19246592	----a-w-	c:\windows\system32\mshtml.dll
2013-09-07 20:25 . 2011-06-22 16:14	36864	----a-w-	c:\windows\system32\Spool\prtprocs\x64\sst2cpc.dll
2013-09-07 20:25 . 2011-06-22 16:14	34304	----a-w-	c:\windows\system32\sst2cl6.dll
2013-09-07 20:25 . 2009-08-27 18:24	151552	----a-w-	c:\windows\system32\sst2cci.exe
2013-09-07 20:25 . 2009-08-27 18:24	89600	----a-w-	c:\windows\system32\sst2cci.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-12 06:26 . 2010-12-25 16:50	79143768	----a-w-	c:\windows\system32\MRT.exe
2013-09-11 05:40 . 2013-04-21 15:12	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-09-11 05:40 . 2013-04-21 15:12	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-08-30 07:48 . 2013-03-26 12:30	378944	----a-w-	c:\windows\system32\drivers\aswSP.sys
2013-08-30 07:48 . 2013-03-26 12:30	72016	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2013-08-30 07:48 . 2013-03-26 12:30	64288	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2013-08-30 07:48 . 2013-03-26 12:30	1030952	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2013-08-30 07:48 . 2013-03-26 12:30	204880	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2013-08-30 07:48 . 2013-03-26 12:30	65336	----a-w-	c:\windows\system32\drivers\aswRvrt.sys
2013-08-30 07:48 . 2013-03-26 12:30	33400	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2013-08-30 07:48 . 2013-03-26 12:30	80816	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2013-08-30 07:47 . 2013-03-26 12:29	41664	----a-w-	c:\windows\avastSS.scr
2013-08-30 07:47 . 2012-03-04 16:21	287840	----a-w-	c:\windows\system32\aswBoot.exe
2013-08-02 01:48 . 2013-09-11 12:29	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2013-07-25 09:25 . 2013-08-14 09:05	1888768	----a-w-	c:\windows\system32\WMVDECOD.DLL
2013-07-25 08:57 . 2013-08-14 09:05	1620992	----a-w-	c:\windows\SysWow64\WMVDECOD.DLL
2013-07-22 06:35 . 2013-07-22 06:31	90139696	----a-w-	c:\users\Roy\gimp-2.8.6-setup.exe
2013-07-19 01:58 . 2013-08-14 09:06	2048	----a-w-	c:\windows\system32\tzres.dll
2013-07-19 01:41 . 2013-08-14 09:06	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2013-07-09 05:52 . 2013-08-14 09:07	224256	----a-w-	c:\windows\system32\wintrust.dll
2013-07-09 05:51 . 2013-08-14 09:05	1217024	----a-w-	c:\windows\system32\rpcrt4.dll
2013-07-09 05:46 . 2013-08-14 09:07	1472512	----a-w-	c:\windows\system32\crypt32.dll
2013-07-09 05:46 . 2013-08-14 09:07	184320	----a-w-	c:\windows\system32\cryptsvc.dll
2013-07-09 05:46 . 2013-08-14 09:07	139776	----a-w-	c:\windows\system32\cryptnet.dll
2013-07-09 04:52 . 2013-08-14 09:05	663552	----a-w-	c:\windows\SysWow64\rpcrt4.dll
2013-07-09 04:52 . 2013-08-14 09:07	175104	----a-w-	c:\windows\SysWow64\wintrust.dll
2013-07-09 04:46 . 2013-08-14 09:07	1166848	----a-w-	c:\windows\SysWow64\crypt32.dll
2013-07-09 04:46 . 2013-08-14 09:07	140288	----a-w-	c:\windows\SysWow64\cryptsvc.dll
2013-07-09 04:46 . 2013-08-14 09:07	103936	----a-w-	c:\windows\SysWow64\cryptnet.dll
2013-07-06 06:03 . 2013-08-14 09:05	1910208	----a-w-	c:\windows\system32\drivers\tcpip.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-08-06 17:18	120104	----a-w-	c:\program files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-09-08 39408]
"GoogleChromeAutoLaunch_33D22A5565F5D10B364D87CB9F5A5723"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2013-09-17 829392]
"SystemExplorerAutoStart"="c:\program files (x86)\System Explorer\SystemExplorer.exe" [2012-12-02 2846168]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-04-19 18678376]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2013-09-06 1811368]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-09-22 261888]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-08-18 825864]
"VitaKeyPdtWzd"="c:\program files (x86)\Acer Bio Protection\PdtWzd.exe" [2009-08-28 3567616]
"ArcadeDeluxeAgent"="c:\program files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-10-06 419112]
"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\ssmmgr.exe" [2010-06-07 618496]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2012-12-11 3147384]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-08-30 4858968]
"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2012-11-13 3825176]
"TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" [2013-07-12 295512]
.
c:\users\Roy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MagicDisc.lnk - c:\program files (x86)\MagicDisc\MagicDisc.exe [2010-12-20 576000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Acer VCM.lnk - c:\program files (x86)\Acer\Acer VCM\AcerVCM.exe [2009-9-8 708608]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-17 1079584]
Start 3DxWare.lnk - c:\program files\3Dconnexion\3Dconnexion 3DxSoftware\3DxWare64\3dxsrv.exe [2012-10-11 134656]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"EgisTecLiveUpdate"="c:\program files (x86)\EgisTec Egis Software Update\EgisUpdate.exe"
"TkBellExe"="c:\program files (x86)\real\realplayer\update\realsched.exe"  -osboot
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [x]
R2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys;c:\windows\SYSNATIVE\drivers\btusbflt.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys;c:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [x]
R3 Samsung UPD Service;Samsung UPD Service;c:\windows\System32\SUPDSvc.exe;c:\windows\SYSNATIVE\SUPDSvc.exe [x]
R3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\programme\SiSoftware\SiSoftware Sandra Lite 2011a\RpcAgentSrv.exe;c:\programme\SiSoftware\SiSoftware Sandra Lite 2011a\RpcAgentSrv.exe [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 SystemExplorerHelpService;System Explorer Service;c:\program files (x86)\System Explorer\service\SystemExplorerService64.exe;c:\program files (x86)\System Explorer\service\SystemExplorerService64.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 johci;JMicron 1394 Filter Driver;c:\windows\system32\DRIVERS\johci.sys;c:\windows\SYSNATIVE\DRIVERS\johci.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};Power Control [2010/11/21 18:57];c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl;c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [x]
S2 FPSensor;EgisTec-Corp Fingerprint Reader Driver (FPSensor.sys);c:\windows\system32\Drivers\FPSensor.sys;c:\windows\SYSNATIVE\Drivers\FPSensor.sys [x]
S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe;c:\program files (x86)\Acer\Registration\GregHSRW.exe [x]
S2 IGBASVC;EgisTec Service;c:\program files (x86)\Acer Bio Protection\BASVC.exe;c:\program files (x86)\Acer Bio Protection\BASVC.exe [x]
S2 McNeelUpdate;McNeel Update Service 5.0;c:\program files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe;c:\program files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe [x]
S2 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [x]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
S2 RS_Service;Raw Socket Service;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe [x]
S2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]
S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [x]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]
S3 nuvotoncir;Nuvoton IR Transceiver;c:\windows\system32\DRIVERS\nuvotoncir.sys;c:\windows\SYSNATIVE\DRIVERS\nuvotoncir.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - JOHCI
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-09-20 19:37	1177552	----a-w-	c:\program files (x86)\Google\Chrome\Application\29.0.1547.76\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-21 05:40]
.
2013-09-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-28 14:18]
.
2013-09-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-28 14:18]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-08-30 07:47	133840	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-08-06 17:19	137512	----a-w-	c:\program files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-08-07 186904]
"mwlDaemon"="c:\program files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe" [2009-08-06 349480]
"Acer ePower Management"="c:\program files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe" [2009-08-19 496160]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-09-03 8098848]
"PLFSetI"="c:\windows\PLFSetI.exe" [2008-07-29 200704]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2010-10-28 1680976]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
uSearchAssistant = hxxp://www.google.com
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: Nach Microsoft &Excel exportieren - c:\progra~2\MICROS~1\Office10\EXCEL.EXE/3000
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{8DB15793-5F69-4426-A37E-B53620DD3525}: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Toolbar-!{82E1477C-B154-48D3-9891-33D83C26BCD3} - (no file)
Toolbar-!{F3FEE66E-E034-436a-86E4-9690573BEE8A} - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Notify-SDWinLogon - SDWinLogon.dll
SafeBoot-mcmscsvc
SafeBoot-MCODS
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-Ocs_SM - c:\users\Roy\AppData\Roaming\OCS\SM\SearchAnonymizer.exe
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-happylyrics@hpyproductions.net - c:\program files (x86)\HappyLyrics\uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]
"ImagePath"="\??\c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Acer Bio Protection\CompPtcVUI.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-09-25  22:50:40 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-09-25 20:50
.
Vor Suchlauf: 49 Verzeichnis(se), 11.836.948.480 Bytes frei
Nach Suchlauf: 57 Verzeichnis(se), 12.094.541.824 Bytes frei
.
- - End Of File - - 2BA1FF17EA3B1DA7ED2308FAFE57E3CB
9C51D3FD2697BD2AE931BE1D6F1E6FFA
         

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

@Schrauber

Danke Dir vielmals!
Anbei die txt-Dateien von:
1. Malwarebytes
2. ADWCleaner
3. FRST

Die JRT habe ich leider nicht zum Laufen bekommen,
erhalte Fehlermeldung: " 7zip, internal error, code 105 "
Mache ich etwas falsch?

Hatte JRT deswegen wiederholt heruntergeladen, ohne Erfolg.
Der Warnhinweis seitens google, besteht immer noch.
Konkret:

___________________________________________________________________________
"Safe Browsing
Diagnoseseite für jobst-georg.de

Wie wird jobst-georg.de momentan eingestuft?
Diese Website ist momentan als verdächtig eingestuft und kann Ihren Computer beschädigen.

Ein Teil dieser Website wurde aufgrund verdächtiger Aktivitäten in den letzten 90 Tagen 2 mal auf die Liste gesetzt.

Was ist passiert, als Google diese Website aufgerufen hat?
In den letzen 90 Tagen haben wir 1 Seiten der Website überprüft. Dabei haben wir auf 1 Seite(n) festgestellt, dass Malware (schädliche Software) ohne Einwilligung des Nutzers heruntergeladen und installiert wurde. Der letzte Besuch von Google war am 2013-09-22. Verdächtiger Content wurde auf dieser Website zuletzt am 2013-09-22 gefunden.
Diese Website wurde über 1 Netzwerk(e) gehostet (z. B. AS20773 (HOSTEUROPE-AS)).

Hat diese Website als Überträger zur Weiterverbreitung von Malware fungiert?
jobst-georg.de hat in den letzten 90 Tagen scheinbar nicht als Überträger für die Infizierung von Websites fungiert.

Hat diese Website Malware gehostet?
Nein. Diese Website hat in den letzten 90 Tagen keine Malware gehostet.

Wie ist es zu dieser Einstufung gekommen?
Gelegentlich wird von Dritten bösartiger Code in legitime Websites eingefügt. In diesem Fall wird unsere Warnmeldung angezeigt."

_____________________________________________________________________________

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.09.26.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16686
Roy :: ROY-PC [Administrator]

26.09.2013 22:02:13
mbam-log-2013-09-26 (22-02-13).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 241522
Laufzeit: 26 Minute(n), 27 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 3
C:\Users\Roy\Downloads\iLividSetup.exe (PUP.Optional.Bandoo) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Roy\Downloads\iLividSetupV1.exe (PUP.Optional.Bandoo) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Roy\Downloads\MyPhoneExplorer_Setup_1.8.4.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

# AdwCleaner v3.005 - Bericht erstellt am 26/09/2013 um 22:31:36
# Updated 22/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Roy - ROY-PC
# Gestartet von : C:\Users\Roy\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files (x86)\jZip
Ordner Gelöscht : C:\Program Files (x86)\YTD Toolbar
Ordner Gelöscht : C:\Users\Roy\AppData\Roaming\Uniblue\DriverScanner
Datei Gelöscht : C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\\invalidprefs.js
Datei Gelöscht : C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\searchplugins\11-suche.xml
Datei Gelöscht : C:\Windows\System32\Tasks\EPUpdater

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [sparpilot@sparpilot.com]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_desmume_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_desmume_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fotomorph_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_fotomorph_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_gimp_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_gimp_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_ideas_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_ideas_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_jose-chess_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_jose-chess_RASMANCS
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\HappyLyrics
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\simplytech
Schlüssel Gelöscht : HKLM\Software\Uniblue\DriverScanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16686


-\\ Mozilla Firefox v23.0.1 (de)

[ Datei : C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\prefs.js ]


-\\ Google Chrome v29.0.1547.76

[ Datei : C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [3584 octets] - [26/09/2013 22:12:20]
AdwCleaner[S0].txt - [3389 octets] - [26/09/2013 22:31:36]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3449 octets] ##########
         

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-09-2013
Ran by Roy (administrator) on ROY-PC on 26-09-2013 23:24:12
Running from C:\Users\Roy\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Could not list processes ===============

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-08-07] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-08-06] (Egis Technology Inc.)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2009-08-19] (Acer Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8098848 2009-09-03] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1814312 2009-08-14] (Synaptics Incorporated)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2008-07-29] ()
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1680976 2010-10-29] (Logitech, Inc.)
HKLM\...\Run: [Ocs_SM] - C:\Users\Roy\AppData\Roaming\OCS\SM\SearchAnonymizer.exe
HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1612504 2013-09-24] (COMODO)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-09-08] (Google Inc.)
HKCU\...\Run: [GoogleChromeAutoLaunch_33D22A5565F5D10B364D87CB9F5A5723] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [829392 2013-09-17] (Google Inc.)
HKCU\...\Run: [SystemExplorerAutoStart] - C:\Program Files (x86)\System Explorer\SystemExplorer.exe [2846168 2012-12-02] (Mister Group)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18678376 2013-04-19] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1811368 2013-09-06] (Valve Corporation)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-09-22] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [825864 2009-08-18] (Dritek System Inc.)
HKLM-x32\...\Run: [VitaKeyPdtWzd] - C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe [3567616 2009-08-28] (Egis Technology Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] - C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [419112 2009-10-06] (CyberLink Corp.)
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-06-07] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2013\avgui.exe [3147384 2012-12-11] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-07-12] (RealNetworks, Inc.)
HKLM-x32\...\Run: [tvncontrol] - C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2013-09-17] (Comodo Security Solutions, Inc.)
HKLM-x32\...\Run: [ComodoFSChrome] - C:\Program Files (x86)\AdTrustMedia\PrivDog\FinalizeSetup.exe [4247208 2013-09-17] ()
Startup: C:\Users\Roy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
ShortcutTarget: MagicDisc.lnk -> C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {2329651E-CDE9-41DE-8D85-B9FC310889BF} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=a5c6ff79-a787-4634-9e04-2c9ae31f9357&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {431BFA64-D667-4CEC-855E-2622E316DD10} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=a5c6ff79-a787-4634-9e04-2c9ae31f9357&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {4CD3B922-6928-4751-A543-6F427BBDEF6E} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=a5c6ff79-a787-4634-9e04-2c9ae31f9357&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {5A3E0C78-4DBA-4B4B-B5E0-A609B5F4BB19} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=a5c6ff79-a787-4634-9e04-2c9ae31f9357&pid=freewarede&mode=bounce&k=0
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E676F6F676C652E636F6D2F7365617263683F736F7572636569643D69653726713D7B7365617263685465726D737D26726C733D636F6D2E6D6963726F736F66743A7B6C616E67756167657D3A7B72656665727265723A736F757263653F7D2669653D7B696E707574456E636F64696E677D266F653D7B6F7574707574456E636F64696E677D26726C7A3D31493741434157&st={searchTerms}&clid=a5c6ff79-a787-4634-9e04-2c9ae31f9357&pid=freewarede&k=0
SearchScopes: HKCU - {D7C27CBE-CF63-4336-9A83-21453664E791} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=a5c6ff79-a787-4634-9e04-2c9ae31f9357&pid=freewarede&mode=bounce&k=0
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO-x32: DivX HiQ - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 -  No Name - !{82E1477C-B154-48D3-9891-33D83C26BCD3} -  No File
Toolbar: HKLM-x32 -  No Name - !{F3FEE66E-E034-436a-86E4-9690573BEE8A} -  No File
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://javadl-esd.sun.com/update/1.6.0/jinstall-6u30-windows-i586.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.7.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Roy\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF SearchPlugin: C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\searchplugins\google-ssl.xml
FF SearchPlugin: C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: PrivDog - C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\Extensions\PrivDog@AdTrustMedia.com.xpi
FF Extension: toolbar - C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\8q27fv11.default\Extensions\toolbar@web.de.xpi
FF Extension: Skype extension - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video
FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF Extension: DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKCU\...\Firefox\Extensions: [finder@meingutscheincode.de] - C:\Program Files (x86)\Mein Gutscheincode Finder\Firefox

Chrome: 
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll ()
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U7) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Plugin: (Citrix Online Web Deployment Plugin 1.0.0.104) - C:\Users\Roy\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.70.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
CHR Extension: (Google Docs) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1
CHR Extension: (PrivDog) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja\1.5.0.14_2
CHR Extension: (Google Search) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1
CHR Extension: (DivX HiQ) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae\2.1.1.94_0
CHR Extension: (RealDownloader) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_1
CHR Extension: (WEB.DE MailCheck) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo\1.2_0
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_1
CHR Extension: (Chrome In-App Payments service) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_1
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.1.94_0
CHR Extension: (Gmail) - C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [cmaiofennmphjldldcpphcechfnnohja] - C:\Program Files (x86)\AdTrustMedia\PrivDog\PrivDog_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [ealchnonpofjocgofjpopjdoegbbkofj] - C:\Program Files (x86)\HappyLyrics\Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM-x32\...\Chrome\Extension: [jaogepninmlbinccpbiakcgiolijlllo] - C:\Program Files (x86)\1&1 Mail & Media\WEB.DE MailCheck\GC\webde_mailcheck.1.0.crx
CHR HKLM-x32\...\Chrome\Extension: [jgfpelakfkbbkkdchaaaknckhoadkcbo] - C:\Program Files (x86)\Mein Gutscheincode Finder\Chrome\chrome-extension.crx
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [5814904 2012-11-16] (AVG Technologies CZ, s.r.o.)
S2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [196664 2012-10-22] (AVG Technologies CZ, s.r.o.)
R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70352 2013-09-19] (Comodo Security Solutions, Inc.)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6253640 2013-09-24] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [164056 2013-09-24] (COMODO)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2095808 2013-08-01] ()
R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [796192 2009-08-19] (Acer Incorporated)
R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2013-09-17] (Comodo Security Solutions, Inc.)
R2 IGBASVC; C:\Program Files (x86)\Acer Bio Protection\BASVC.exe [3450368 2009-08-28] (Egis Technology Inc.)
S2 McNeelUpdate; C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe [67752 2012-09-28] (Robert McNeel & Associates)
R2 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [311592 2009-08-06] (Egis Technology Inc.)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [253952 2009-07-10] (Acer Incorporated)
S3 SandraAgentSrv; C:\Programme\SiSoftware\SiSoftware Sandra Lite 2011a\RpcAgentSrv.exe [93848 2009-08-10] (SiSoftware)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [821720 2012-11-25] (Mister Group)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [37976 2013-05-07] (Windows (R) Win 7 DDK provider)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2013-09-24] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [709144 2013-09-24] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48872 2013-09-24] (COMODO)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [96800 2013-09-24] (COMODO)
R0 johci; C:\Windows\System32\DRIVERS\johci.sys [22640 2009-08-24] (JMicron )
R3 nuvotoncir; C:\Windows\System32\DRIVERS\nuvotoncir.sys [48128 2009-06-24] (Nuvoton Technology Corporation)
S3 SANDRA; C:\Programme\SiSoftware\SiSoftware Sandra Lite 2011a\WNt500x64\Sandra.sys [23112 2009-08-08] (SiSoftware)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [146928 2009-09-02] (CyberLink Corp.)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [146928 2009-09-02] (CyberLink Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-26 23:23 - 2013-09-26 23:23 - 01956432 _____ (Farbar) C:\Users\Roy\Downloads\FRST64.exe
2013-09-26 23:14 - 2013-09-26 23:14 - 00000000 ____D C:\Program Files\7-Zip
2013-09-26 23:13 - 2013-09-26 23:13 - 01376768 _____ C:\Users\Roy\Downloads\7z920-x64 (4).msi
2013-09-26 23:12 - 2013-09-26 23:12 - 01376768 _____ C:\Users\Roy\Downloads\7z920-x64 (3).msi
2013-09-26 23:11 - 2013-09-26 23:11 - 01376768 _____ C:\Users\Roy\Downloads\7z920-x64 (2).msi
2013-09-26 23:09 - 2013-09-26 23:09 - 01376768 _____ C:\Users\Roy\Downloads\7z920-x64.msi
2013-09-26 23:09 - 2013-09-26 23:09 - 01376768 _____ C:\Users\Roy\Downloads\7z920-x64 (1).msi
2013-09-26 23:03 - 2013-09-22 09:35 - 00152206 _____ C:\Users\Roy\Desktop\firefox.bat
2013-09-26 23:03 - 2013-09-22 09:30 - 00028718 _____ C:\Users\Roy\Desktop\BHO_clsid.dat
2013-09-26 23:03 - 2013-09-22 09:30 - 00016804 _____ C:\Users\Roy\Desktop\badFOLDERS.cfg
2013-09-26 23:03 - 2013-09-22 09:30 - 00010838 _____ C:\Users\Roy\Desktop\CLSID_clsid.dat
2013-09-26 23:03 - 2013-09-22 09:30 - 00009761 _____ C:\Users\Roy\Desktop\FFextensions.dat
2013-09-26 23:03 - 2013-09-22 09:28 - 00005846 _____ C:\Users\Roy\Desktop\CHR_extensions.cfg
2013-09-26 23:03 - 2013-09-22 09:21 - 00002876 _____ C:\Users\Roy\Desktop\services.dat
2013-09-26 23:03 - 2013-09-22 09:21 - 00001188 _____ C:\Users\Roy\Desktop\BHO_name.dat
2013-09-26 23:03 - 2013-09-22 09:20 - 00001485 _____ C:\Users\Roy\Desktop\FFXML.dat
2013-09-26 23:03 - 2013-09-22 09:07 - 00146539 _____ C:\Users\Roy\Desktop\misc.bat
2013-09-26 23:03 - 2013-09-22 09:01 - 00016063 _____ C:\Users\Roy\Desktop\get.bat
2013-09-26 23:03 - 2013-09-22 09:01 - 00010261 _____ C:\Users\Roy\Desktop\JRT.bat
2013-09-26 23:03 - 2013-09-22 09:00 - 00000013 _____ C:\Users\Roy\Desktop\currentmd5.txt
2013-09-26 23:03 - 2013-09-22 09:00 - 00000000 ____D C:\Users\Roy\Desktop\erunt
2013-09-26 23:03 - 2013-09-15 08:20 - 00039471 _____ C:\Users\Roy\Desktop\prelim.bat
2013-09-26 23:03 - 2013-09-15 08:07 - 00004998 _____ C:\Users\Roy\Desktop\INTERFACE_clsid.dat
2013-09-26 23:03 - 2013-09-12 09:39 - 00001598 _____ C:\Users\Roy\Desktop\APPID_clsid.dat
2013-09-26 23:03 - 2013-09-12 09:38 - 00000878 _____ C:\Users\Roy\Desktop\PREAPPROVED_clsid.dat
2013-09-26 23:03 - 2013-09-12 09:37 - 00008130 _____ C:\Users\Roy\Desktop\REGhcr.cfg
2013-09-26 23:03 - 2013-09-12 09:36 - 00034016 _____ C:\Users\Roy\Desktop\REGhklm_software_classes.cfg
2013-09-26 23:03 - 2013-09-12 09:36 - 00000084 _____ C:\Users\Roy\Desktop\APPPATHS.dat
2013-09-26 23:03 - 2013-09-12 09:35 - 00003197 _____ C:\Users\Roy\Desktop\REGhkcu_and_hklm_software.cfg
2013-09-26 23:03 - 2013-09-08 04:43 - 00000382 _____ C:\Users\Roy\Desktop\modules.dat
2013-09-26 23:03 - 2013-09-08 04:37 - 00004398 _____ C:\Users\Roy\Desktop\badvalues.cfg
2013-09-26 23:03 - 2013-09-08 04:34 - 00000430 _____ C:\Users\Roy\Desktop\WOW6432NODE.dat
2013-09-26 23:03 - 2013-09-08 04:09 - 00003605 _____ C:\Users\Roy\Desktop\FFprefs.dat
2013-09-26 23:03 - 2013-09-08 04:09 - 00000873 _____ C:\Users\Roy\Desktop\FFXPI.dat
2013-09-26 23:03 - 2013-09-06 04:59 - 00002910 _____ C:\Users\Roy\Desktop\REGhkcu_software_appdatalow.cfg
2013-09-26 23:03 - 2013-09-02 02:55 - 00000059 _____ C:\Users\Roy\Desktop\REGISTRYUSERSID.cfg
2013-09-26 23:03 - 2013-09-02 02:52 - 00000028 _____ C:\Users\Roy\Desktop\serviceseventlog.cfg
2013-09-26 23:03 - 2013-09-02 02:20 - 00000144 _____ C:\Users\Roy\Desktop\appinit64_null.reg
2013-09-26 23:03 - 2013-09-02 02:16 - 00008398 _____ C:\Users\Roy\Desktop\runvalues.bat
2013-09-26 23:03 - 2013-09-02 02:15 - 00029648 _____ C:\Users\Roy\Desktop\ask.bat
2013-09-26 23:03 - 2013-08-31 05:34 - 00000848 _____ C:\Users\Roy\Desktop\badFOLDERSstart.cfg
2013-09-26 23:03 - 2013-08-29 05:15 - 00006957 _____ C:\Users\Roy\Desktop\FWCLSID.dat
2013-09-26 23:03 - 2013-08-29 04:58 - 00000188 _____ C:\Users\Roy\Desktop\FFpluginREG.dat
2013-09-26 23:03 - 2013-08-29 04:30 - 00000132 _____ C:\Users\Roy\Desktop\appinit_null.reg
2013-09-26 23:03 - 2013-08-27 23:14 - 00001589 _____ C:\Users\Roy\Desktop\REGhkcu_software_microsoft.cfg
2013-09-26 23:03 - 2013-08-22 05:53 - 00001555 _____ C:\Users\Roy\Desktop\APPID_files.dat
2013-09-26 23:03 - 2013-08-22 05:41 - 00000386 _____ C:\Users\Roy\Desktop\datamngr_del.reg
2013-09-26 23:03 - 2013-08-22 05:20 - 00003038 _____ C:\Users\Roy\Desktop\ELEVATIONPOLICY_clsid.dat
2013-09-26 23:03 - 2013-08-22 05:06 - 00000015 _____ C:\Users\Roy\Desktop\IFEO.dat
2013-09-26 23:03 - 2013-08-20 00:58 - 00000073 _____ C:\Users\Roy\Desktop\PRODUCTS.dat
2013-09-26 23:03 - 2013-08-19 01:07 - 00000134 _____ C:\Users\Roy\Desktop\badAPPINIT.dat
2013-09-26 23:03 - 2013-08-13 01:48 - 00000132 _____ C:\Users\Roy\Desktop\badFOLDERScom.cfg
2013-09-26 23:03 - 2013-08-12 21:07 - 00000675 _____ C:\Users\Roy\Desktop\merger.reg
2013-09-26 23:03 - 2013-08-08 11:52 - 00008117 _____ C:\Users\Roy\Desktop\modules.bat
2013-09-26 23:03 - 2013-08-04 22:22 - 00029932 _____ C:\Users\Roy\Desktop\iexplore.bat
2013-09-26 23:03 - 2013-08-03 00:31 - 00000032 _____ C:\Users\Roy\Desktop\S1518COMPONENTS.dat
2013-09-26 23:03 - 2013-08-03 00:26 - 00000078 _____ C:\Users\Roy\Desktop\APPROVEDEXTENSIONS_clsid.dat
2013-09-26 23:03 - 2013-08-02 17:41 - 00000182 _____ C:\Users\Roy\Desktop\MENUEXT.dat
2013-09-26 23:03 - 2013-08-02 17:39 - 00000016 _____ C:\Users\Roy\Desktop\EXT.dat
2013-09-26 23:03 - 2013-08-02 16:41 - 00000033 _____ C:\Users\Roy\Desktop\NOTIFY.dat
2013-09-26 23:03 - 2013-07-18 11:53 - 00014973 _____ C:\Users\Roy\Desktop\chrome.bat
2013-09-26 23:03 - 2013-07-11 22:29 - 00018668 _____ C:\Users\Roy\Desktop\medfos.bat
2013-09-26 23:03 - 2013-07-11 22:28 - 00003158 _____ C:\Users\Roy\Desktop\askCLSID.dat
2013-09-26 23:03 - 2013-07-11 09:03 - 00000178 _____ C:\Users\Roy\Desktop\badLNK.cfg
2013-09-26 23:03 - 2013-07-11 08:57 - 00012733 _____ C:\Users\Roy\Desktop\searchlnk.bat
2013-09-26 23:03 - 2013-07-10 02:21 - 00000085 _____ C:\Users\Roy\Desktop\delorphans.bat
2013-09-26 23:03 - 2013-07-09 12:17 - 00001239 _____ C:\Users\Roy\Desktop\FWPolicy.bat
2013-09-26 23:03 - 2013-07-09 11:14 - 00001820 _____ C:\Users\Roy\Desktop\delfolders.bat
2013-09-26 23:03 - 2013-07-09 09:37 - 00000048 _____ C:\Users\Roy\Desktop\REGhkcu_and_hklm_allow.cfg
2013-09-26 23:03 - 2013-07-08 22:10 - 00000030 _____ C:\Users\Roy\Desktop\askservices.dat
2013-09-26 23:03 - 2013-04-30 00:21 - 00000177 _____ C:\Users\Roy\Desktop\FFregkey_x64.dat
2013-09-26 23:03 - 2013-04-30 00:21 - 00000109 _____ C:\Users\Roy\Desktop\FFregkey_x86.dat
2013-09-26 23:03 - 2013-04-30 00:19 - 00000174 _____ C:\Users\Roy\Desktop\CHRregkey_x64.cfg
2013-09-26 23:03 - 2013-04-30 00:19 - 00000107 _____ C:\Users\Roy\Desktop\CHRregkey_x86.cfg
2013-09-26 23:03 - 2013-04-30 00:18 - 00000128 _____ C:\Users\Roy\Desktop\browsermngr_keys.cfg
2013-09-26 23:03 - 2013-04-30 00:16 - 00000424 _____ C:\Users\Roy\Desktop\askregvalue_x64.dat
2013-09-26 23:03 - 2013-04-30 00:16 - 00000345 _____ C:\Users\Roy\Desktop\askregvalue_x86.dat
2013-09-26 23:03 - 2013-04-30 00:14 - 00000260 _____ C:\Users\Roy\Desktop\askregkey_x86.dat
2013-09-26 23:03 - 2013-04-30 00:13 - 00000488 _____ C:\Users\Roy\Desktop\askregkey_x64.dat
2013-09-26 23:03 - 2013-04-23 16:41 - 00000086 _____ C:\Users\Roy\Desktop\IEwhtlst.cfg
2013-09-26 23:03 - 2013-04-22 01:19 - 00000211 _____ C:\Users\Roy\Desktop\runvalues_x64.cfg
2013-09-26 23:03 - 2013-04-22 01:15 - 00000129 _____ C:\Users\Roy\Desktop\runvalues_x86.cfg
2013-09-26 23:03 - 2013-04-22 00:24 - 00000038 _____ C:\Users\Roy\Desktop\defaultscope.cfg
2013-09-26 23:03 - 2013-04-05 16:41 - 00000159 _____ C:\Users\Roy\Desktop\FFwhtlist.cfg
2013-09-26 23:03 - 2013-02-03 14:34 - 00000370 _____ C:\Users\Roy\Desktop\clean_shortcut.vbs
2013-09-26 23:03 - 2013-01-24 15:19 - 00000178 _____ C:\Users\Roy\Desktop\moduleservices.dat
2013-09-26 23:03 - 2013-01-24 14:52 - 00000100 _____ C:\Users\Roy\Desktop\sednewline.txt
2013-09-26 23:03 - 2012-12-15 13:36 - 00043520 _____ (NirSoft) C:\Users\Roy\Desktop\NIRCMD.DAT
2013-09-26 23:03 - 2012-12-09 04:32 - 00000094 _____ C:\Users\Roy\Desktop\browsermngr_values.cfg
2013-09-26 23:03 - 2012-12-09 03:22 - 00000732 _____ C:\Users\Roy\Desktop\ev_clear.bat
2013-09-26 23:03 - 2012-12-08 09:27 - 00017920 _____ C:\Users\Roy\Desktop\CUT.DAT
2013-09-26 23:03 - 2012-12-08 09:27 - 00000119 _____ C:\Users\Roy\Desktop\FFbrowsermngr.dat
2013-09-26 23:03 - 2012-12-08 09:27 - 00000075 _____ C:\Users\Roy\Desktop\FFplugins.dat
2013-09-26 23:03 - 2010-10-22 03:15 - 00098816 _____ C:\Users\Roy\Desktop\SED.DAT
2013-09-26 23:03 - 2005-02-28 02:40 - 00045056 _____ C:\Users\Roy\Desktop\CHOICE.DAT
2013-09-26 23:01 - 2013-09-26 23:19 - 00000000 ____D C:\ComboFix
2013-09-26 23:01 - 2013-09-26 23:01 - 01030038 _____ (Thisisu) C:\Users\Roy\Desktop\JRT.exe
2013-09-26 23:01 - 2013-09-26 23:01 - 00000331 _____ C:\Start_.cmd
2013-09-26 22:59 - 2013-09-26 23:19 - 00000000 ___SD C:\32788R22FWJFW
2013-09-26 22:59 - 2013-09-26 22:59 - 05129766 ____R (Swearware) C:\Users\Roy\Downloads\ComboFix.exe
2013-09-26 22:11 - 2013-09-26 22:31 - 00000000 ____D C:\AdwCleaner
2013-09-26 14:13 - 2013-09-26 14:13 - 01042066 _____ C:\Users\Roy\Desktop\adwcleaner.exe
2013-09-26 14:12 - 2013-09-26 14:12 - 00712264 _____ C:\Windows\isRS-000.tmp
2013-09-26 12:25 - 2013-09-26 12:26 - 00000000 ____D C:\Users\Roy\AppData\Local\{C412ECBF-31A1-4889-BF5E-383D64C4B09D}
2013-09-26 09:10 - 2013-09-26 09:10 - 00000000 ____D C:\Windows\System32\Tasks\COMODO
2013-09-26 09:09 - 2013-09-26 23:25 - 01365872 _____ C:\Windows\system32\Drivers\sfi.dat
2013-09-26 09:09 - 2013-09-26 09:09 - 00001888 _____ C:\Users\Public\Desktop\COMODO Internet Security.lnk
2013-09-26 09:09 - 2013-09-26 09:09 - 00001863 _____ C:\Users\Public\Desktop\Virtuelle Comodo Dragon.lnk
2013-09-26 09:09 - 2013-09-26 09:09 - 00000597 _____ C:\Users\Public\Desktop\Gemeinsamer Bereich.lnk
2013-09-26 09:07 - 2013-09-26 09:09 - 00000000 ___SD C:\ProgramData\Shared Space
2013-09-26 09:05 - 2013-09-26 09:09 - 00000000 ____D C:\ProgramData\COMODO
2013-09-26 09:05 - 2013-09-26 09:05 - 00002017 _____ C:\Users\Public\Desktop\GeekBuddy.lnk
2013-09-26 09:05 - 2013-09-26 09:05 - 00000000 ____D C:\ProgramData\Adtrustmedia
2013-09-26 09:05 - 2013-09-26 09:05 - 00000000 ____D C:\Program Files\COMODO
2013-09-26 09:05 - 2013-09-26 09:05 - 00000000 ____D C:\Program Files\AdTrustMedia
2013-09-26 09:05 - 2013-09-26 09:05 - 00000000 ____D C:\Program Files (x86)\AdTrustMedia
2013-09-26 09:04 - 2013-09-26 09:04 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2013-09-26 09:04 - 2013-09-26 09:04 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2013-09-26 09:04 - 2013-09-26 09:04 - 00001084 _____ C:\Users\Public\Desktop\Comodo Dragon.lnk
2013-09-26 09:04 - 2013-09-26 09:04 - 00000000 ____D C:\Users\Roy\AppData\Local\Comodo
2013-09-26 09:04 - 2013-09-26 09:04 - 00000000 ____D C:\Program Files (x86)\Comodo
2013-09-26 09:03 - 2013-09-26 09:03 - 00000000 ____D C:\ProgramData\Comodo Downloader
2013-09-26 08:05 - 2013-09-26 08:15 - 214262072 _____ (COMODO) C:\Users\Roy\Downloads\cispremium63_installer.exe
2013-09-25 23:26 - 2013-09-25 23:26 - 00000000 ____D C:\Users\Roy\AppData\Local\{4AF56351-57AA-4BE4-8A01-A752A2D17C4D}
2013-09-25 22:50 - 2013-09-25 22:50 - 00024774 _____ C:\ComboFix.txt
2013-09-25 22:01 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-25 22:01 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-25 22:01 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-25 22:01 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-25 22:01 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-25 22:01 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-25 22:01 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-25 22:01 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-25 21:43 - 2013-09-25 22:50 - 00000000 ____D C:\Qoobox
2013-09-25 21:41 - 2013-09-25 22:46 - 00000000 ____D C:\Windows\erdnt
2013-09-25 12:38 - 2013-09-25 12:38 - 00000040 _____ C:\Autoconfig.ini
2013-09-25 12:36 - 2011-04-11 07:26 - 00034304 _____ () C:\Windows\system32\spe__l.dll
2013-09-25 12:35 - 2013-05-10 11:48 - 00162136 _____ C:\Windows\system32\spe__ci.exe
2013-09-25 12:35 - 2012-11-17 10:28 - 00000357 _____ C:\Windows\system32\spe__l.smt
2013-09-25 12:35 - 2010-10-20 10:46 - 00089600 _____ (SS) C:\Windows\system32\spe__ci.dll
2013-09-25 11:25 - 2013-09-25 11:25 - 00000000 ____D C:\Users\Roy\AppData\Local\{E7B4C206-0421-473D-A7EA-2DF4684996AC}
2013-09-25 07:54 - 2013-09-25 07:54 - 00000000 ____D C:\FRST
2013-09-24 23:25 - 2013-09-24 23:25 - 00000000 ____D C:\Users\Roy\AppData\Local\{E68272D6-FD97-4804-B195-1C2F92544016}
2013-09-24 11:54 - 2013-09-24 11:54 - 00709144 _____ (COMODO) C:\Windows\system32\Drivers\cmdguard.sys
2013-09-24 11:54 - 2013-09-24 11:54 - 00096800 _____ (COMODO) C:\Windows\system32\Drivers\inspect.sys
2013-09-24 11:54 - 2013-09-24 11:54 - 00048872 _____ (COMODO) C:\Windows\system32\Drivers\cmdhlp.sys
2013-09-24 11:54 - 2013-09-24 11:54 - 00023168 _____ (COMODO) C:\Windows\system32\Drivers\cmderd.sys
2013-09-24 11:53 - 2013-09-24 11:53 - 00444392 _____ (COMODO) C:\Windows\system32\guard64.dll
2013-09-24 11:53 - 2013-09-24 11:53 - 00354240 _____ (COMODO) C:\Windows\SysWOW64\guard32.dll
2013-09-24 11:53 - 2013-09-24 11:53 - 00347864 _____ (COMODO) C:\Windows\system32\cmdvrt64.dll
2013-09-24 11:53 - 2013-09-24 11:53 - 00280792 _____ (COMODO) C:\Windows\SysWOW64\cmdvrt32.dll
2013-09-24 11:53 - 2013-09-24 11:53 - 00045784 _____ (COMODO) C:\Windows\system32\cmdkbd64.dll
2013-09-24 11:53 - 2013-09-24 11:53 - 00043216 _____ (COMODO) C:\Windows\system32\cmdcsr.dll
2013-09-24 11:53 - 2013-09-24 11:53 - 00040664 _____ (COMODO) C:\Windows\SysWOW64\cmdkbd32.dll
2013-09-24 11:24 - 2013-09-24 11:25 - 00000000 ____D C:\Users\Roy\AppData\Local\{F67DB33D-CF52-47A1-A862-3694CB865416}
2013-09-23 23:24 - 2013-09-23 23:24 - 00000000 ____D C:\Users\Roy\AppData\Local\{FDF9F093-94DA-4B80-80D6-9E4A96CA9261}
2013-09-23 11:23 - 2013-09-23 11:24 - 00000000 ____D C:\Users\Roy\AppData\Local\{F3D61760-FCDE-4497-BF38-5554270CBEF7}
2013-09-22 23:23 - 2013-09-22 23:23 - 00000000 ____D C:\Users\Roy\AppData\Local\{0BBE6448-75EF-4668-A68C-1AF787836574}
2013-09-22 11:23 - 2013-09-22 11:23 - 00000000 ____D C:\Users\Roy\AppData\Local\{2E35A3B6-B181-494C-BE84-0D2C3813A7C2}
2013-09-21 23:22 - 2013-09-21 23:23 - 00000000 ____D C:\Users\Roy\AppData\Local\{41DDBA39-5F76-4CE5-A805-8D0AC498612A}
2013-09-21 11:22 - 2013-09-21 11:22 - 00000000 ____D C:\Users\Roy\AppData\Local\{79827C39-9EE7-4D6B-AD94-643317824C85}
2013-09-21 08:20 - 2013-09-21 08:21 - 00291504 _____ C:\Windows\Minidump\092113-58047-01.dmp
2013-09-20 23:21 - 2013-09-20 23:22 - 00000000 ____D C:\Users\Roy\AppData\Local\{23B78F9F-B61F-4990-BA17-A99454489FFE}
2013-09-20 11:21 - 2013-09-20 11:21 - 00000000 ____D C:\Users\Roy\AppData\Local\{6881CC9A-F5B8-4780-A37E-919DBC1EAA4A}
2013-09-19 23:21 - 2013-09-19 23:21 - 00000000 ____D C:\Users\Roy\AppData\Local\{44CCCA98-DC33-4A81-9214-611730A1C14F}
2013-09-19 11:20 - 2013-09-19 11:21 - 00000000 ____D C:\Users\Roy\AppData\Local\{6192EC2C-3862-4203-9189-53DFDCD47502}
2013-09-19 09:23 - 2013-09-25 19:58 - 00000000 ____D C:\Uhrenbilder
2013-09-18 23:20 - 2013-09-18 23:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{91E7A245-F8EC-417B-80DE-1DE001076F71}
2013-09-18 20:21 - 2013-09-18 20:21 - 00013584 _____ C:\Users\Roy\AppData\Local\recently-used.xbel
2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{45E9094B-A28F-47F2-AE17-69E6559A5FEB}
2013-09-18 09:13 - 2013-09-18 12:08 - 00022528 _____ C:\Users\Roy\Documents\Bestellung praxis.xls
2013-09-17 23:20 - 2013-09-17 23:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{09D7E641-DAB7-4E0C-BD93-665877D2AE16}
2013-09-17 20:22 - 2013-09-19 09:59 - 00000000 ____D C:\Grieche
2013-09-17 20:21 - 2013-09-17 20:21 - 00000000 ____D C:\Neuer Ordner (2)
2013-09-17 11:20 - 2013-09-17 11:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{C107F7AE-5168-41FA-9674-FD5FCB9BF1AE}
2013-09-16 22:48 - 2013-09-16 22:48 - 00000000 ____D C:\Users\Roy\AppData\Local\{1B20179D-CC7A-4ED0-9EE0-BA2ECEF2BE8C}
2013-09-16 10:48 - 2013-09-16 10:48 - 00000000 ____D C:\Users\Roy\AppData\Local\{82CD7926-0CE0-4274-B800-3CF6EEE57DA7}
2013-09-15 22:47 - 2013-09-15 22:48 - 00000000 ____D C:\Users\Roy\AppData\Local\{A2FF1D7E-8FEB-40D8-9997-9BD2171ECDC0}
2013-09-15 10:47 - 2013-09-15 10:47 - 00000000 ____D C:\Users\Roy\AppData\Local\{426B37D3-4F8C-4E60-BB95-CBC135281039}
2013-09-14 20:06 - 2013-09-14 20:06 - 00000000 ____D C:\Users\Roy\AppData\Local\{C5CCD7F8-2C48-4F5E-9CE8-25C62AA3C29E}
2013-09-14 08:05 - 2013-09-14 08:06 - 00000000 ____D C:\Users\Roy\AppData\Local\{8840F9CE-03A3-4DD7-BA57-6AC419F334D0}
2013-09-13 20:05 - 2013-09-13 20:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{A5B85E7F-0FB3-4562-93A7-3331BD39515B}
2013-09-13 08:05 - 2013-09-13 08:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{046B52D8-B160-4C95-ACB4-E3A8A42D59CD}
2013-09-12 20:04 - 2013-09-12 20:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{FEDA9A97-3B45-43DD-8393-D13D9AAA4BF0}
2013-09-12 08:34 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-12 08:34 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-12 08:34 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-12 08:34 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-12 08:34 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-12 08:34 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-12 08:34 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-12 08:34 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-12 08:34 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-12 08:34 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-12 08:34 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-12 08:34 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-12 08:34 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-12 08:33 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-12 08:33 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-11 20:01 - 2013-09-11 20:01 - 00000000 ____D C:\Users\Roy\AppData\Local\{FC9E8CEA-513A-4032-AE81-F56F17B82FF7}
2013-09-11 14:29 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 14:29 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 14:29 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 14:29 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 14:29 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 14:29 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 14:29 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 14:29 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 14:29 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 14:29 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 14:29 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 14:29 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 14:29 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 14:29 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 14:29 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 14:29 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 14:29 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 14:29 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 14:29 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 14:29 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 14:29 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 14:29 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 14:29 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 14:29 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 14:29 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 14:29 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 14:29 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 20:00 - 2013-09-10 20:01 - 00000000 ____D C:\Users\Roy\AppData\Local\{341E286F-8D20-4861-8A6C-110C105F1D28}
2013-09-10 08:00 - 2013-09-10 08:00 - 00000000 ____D C:\Users\Roy\AppData\Local\{523F1115-BD37-45E8-A761-12D0E67F12DF}
2013-09-09 07:59 - 2013-09-12 08:04 - 00000000 ____D C:\Users\Roy\AppData\Local\{849D243E-F132-439A-A518-C313DBAD8C9F}
2013-09-08 19:27 - 2013-09-08 19:27 - 00000000 ____D C:\Users\Roy\AppData\Local\{CA3A1017-5743-4439-AAF7-354F4DC00EC8}
2013-09-08 07:27 - 2013-09-08 07:27 - 00000000 ____D C:\Users\Roy\AppData\Local\{4DDCE5CE-CA47-4092-96FE-874025FE1960}
2013-09-08 01:15 - 2013-09-25 12:17 - 00025083 _____ C:\Users\Roy\Documents\USB0001
2013-09-08 00:27 - 2013-09-08 00:28 - 00123581 _____ C:\Users\Roy\Documents\USB1
2013-09-08 00:17 - 2013-09-08 00:24 - 00123534 _____ C:\Users\Roy\Documents\USB002
2013-09-08 00:06 - 2013-09-08 00:06 - 00134893 _____ C:\Users\Roy\Documents\USB001
2013-09-08 00:04 - 2013-09-08 00:04 - 00123291 _____ C:\Users\Roy\Documents\usb
2013-09-07 23:44 - 2013-09-07 23:44 - 00029696 ____H C:\Users\Roy\Documents\~WRL1369.tmp
2013-09-07 22:25 - 2011-06-22 18:14 - 00034304 _____ () C:\Windows\system32\sst2cl6.dll
2013-09-07 22:25 - 2010-03-04 18:20 - 01909016 ____N C:\Windows\sst2cLTR.prn
2013-09-07 22:25 - 2010-03-04 18:20 - 01909016 ____N C:\Windows\sst2cA4.prn
2013-09-07 22:25 - 2009-08-27 20:25 - 00000357 _____ C:\Windows\system32\sst2cl6.smt
2013-09-07 22:25 - 2009-08-27 20:24 - 00151552 _____ (SS) C:\Windows\system32\sst2cci.exe
2013-09-07 22:25 - 2009-08-27 20:24 - 00089600 _____ (SS) C:\Windows\system32\sst2cci.dll
2013-09-07 13:55 - 2013-09-07 13:55 - 00000000 ____D C:\Users\Roy\AppData\Local\{5BDDCB18-646C-47F8-AC34-8B384379C663}
2013-09-06 23:52 - 2013-09-06 23:53 - 00000000 ____D C:\Users\Roy\AppData\Local\{BF8CB26D-EAA4-4B7F-ADAF-858E72D6BF40}
2013-09-06 15:31 - 2013-09-06 15:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-06 09:19 - 2013-09-06 09:19 - 00000000 ____D C:\Users\Roy\AppData\Local\{6A72D973-77EF-4644-AC45-78B57CE7F8A0}
2013-09-05 21:19 - 2013-09-05 21:19 - 00000000 ____D C:\Users\Roy\AppData\Local\{42E5B2EA-27A5-4098-A1C2-F676CEF26CF2}
2013-09-05 09:18 - 2013-09-05 09:19 - 00000000 ____D C:\Users\Roy\AppData\Local\{3E9CA061-DAE8-4FB3-8E72-781C39CFC53D}
2013-09-04 21:18 - 2013-09-04 21:18 - 00000000 ____D C:\Users\Roy\AppData\Local\{C32FBA2F-5FA2-4599-8E8C-59A55655826C}
2013-09-04 00:15 - 2013-09-04 00:15 - 00000000 ____D C:\Users\Roy\AppData\Local\{3A37E278-E484-4087-98E8-8A005DFCE557}
2013-09-03 12:14 - 2013-09-03 12:15 - 00000000 ____D C:\Users\Roy\AppData\Local\{7B1C7B9E-61C0-4FA4-A74A-CE9FE2E368CC}
2013-09-03 00:14 - 2013-09-03 00:14 - 00000000 ____D C:\Users\Roy\AppData\Local\{1FEBCB14-B989-47FD-A8AB-EB5D9139C29C}
2013-09-02 12:14 - 2013-09-02 12:14 - 00000000 ____D C:\Users\Roy\AppData\Local\{09F5B520-0816-4F7A-96C2-C5A9852E8E1C}
2013-09-02 00:13 - 2013-09-02 00:14 - 00000000 ____D C:\Users\Roy\AppData\Local\{20FDD8AD-6F1D-4761-AEF5-2728999D1EC3}
2013-09-01 12:13 - 2013-09-01 12:13 - 00000000 ____D C:\Users\Roy\AppData\Local\{A58ADCB2-841C-4AC9-B18F-E7DCC28207B7}
2013-09-01 00:12 - 2013-09-01 00:13 - 00000000 ____D C:\Users\Roy\AppData\Local\{108AF808-BE41-467C-B5C7-706CAE65FCA4}
2013-08-31 12:12 - 2013-08-31 12:12 - 00000000 ____D C:\Users\Roy\AppData\Local\{3FA4DBCF-3342-412E-8BF2-490E96FFC381}
2013-08-31 00:12 - 2013-08-31 00:12 - 00000000 ____D C:\Users\Roy\AppData\Local\{9C514648-A7FD-4AB3-8353-ACB016FEE4F5}
2013-08-30 08:05 - 2013-08-30 08:06 - 00000000 ____D C:\Users\Roy\AppData\Local\{7DD150D7-EF39-4875-A3E6-DE6771D734D7}
2013-08-29 17:17 - 2013-08-29 17:17 - 00000000 ____D C:\Users\Roy\AppData\Local\{274E3297-C680-44F5-9DC3-EDFEC90C9C43}

==================== One Month Modified Files and Folders =======

2013-09-26 23:25 - 2013-09-26 09:09 - 01365872 _____ C:\Windows\system32\Drivers\sfi.dat
2013-09-26 23:23 - 2013-09-26 23:23 - 01956432 _____ (Farbar) C:\Users\Roy\Downloads\FRST64.exe
2013-09-26 23:22 - 2012-01-27 00:50 - 00000434 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-09-26 23:19 - 2013-09-26 23:01 - 00000000 ____D C:\ComboFix
2013-09-26 23:19 - 2013-09-26 22:59 - 00000000 ___SD C:\32788R22FWJFW
2013-09-26 23:14 - 2013-09-26 23:14 - 00000000 ____D C:\Program Files\7-Zip
2013-09-26 23:13 - 2013-09-26 23:13 - 01376768 _____ C:\Users\Roy\Downloads\7z920-x64 (4).msi
2013-09-26 23:12 - 2013-09-26 23:12 - 01376768 _____ C:\Users\Roy\Downloads\7z920-x64 (3).msi
2013-09-26 23:11 - 2013-09-26 23:11 - 01376768 _____ C:\Users\Roy\Downloads\7z920-x64 (2).msi
2013-09-26 23:09 - 2013-09-26 23:09 - 01376768 _____ C:\Users\Roy\Downloads\7z920-x64.msi
2013-09-26 23:09 - 2013-09-26 23:09 - 01376768 _____ C:\Users\Roy\Downloads\7z920-x64 (1).msi
2013-09-26 23:06 - 2013-04-21 17:12 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-26 23:01 - 2013-09-26 23:01 - 01030038 _____ (Thisisu) C:\Users\Roy\Desktop\JRT.exe
2013-09-26 23:01 - 2013-09-26 23:01 - 00000331 _____ C:\Start_.cmd
2013-09-26 22:59 - 2013-09-26 22:59 - 05129766 ____R (Swearware) C:\Users\Roy\Downloads\ComboFix.exe
2013-09-26 22:51 - 2011-01-23 18:07 - 00000000 ____D C:\Users\Roy\AppData\Roaming\Skype
2013-09-26 22:47 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-26 22:47 - 2009-07-14 06:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-26 22:40 - 2013-06-03 16:54 - 00000000 ____D C:\Program Files (x86)\Steam
2013-09-26 22:40 - 2012-10-20 09:45 - 00000000 ____D C:\abacus
2013-09-26 22:37 - 2010-11-28 16:18 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-26 22:35 - 2013-07-13 18:55 - 00017070 _____ C:\Windows\PFRO.log
2013-09-26 22:35 - 2013-06-09 00:22 - 00004179 _____ C:\Windows\setupact.log
2013-09-26 22:35 - 2011-06-18 14:23 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-26 22:35 - 2010-11-28 16:18 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-26 22:35 - 2010-11-21 19:33 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-26 22:35 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-26 22:33 - 2010-11-21 19:22 - 01683907 _____ C:\Windows\WindowsUpdate.log
2013-09-26 22:31 - 2013-09-26 22:11 - 00000000 ____D C:\AdwCleaner
2013-09-26 21:59 - 2012-01-19 12:57 - 00000099 _____ C:\Users\Public\LMDebug.log
2013-09-26 19:18 - 2010-11-23 02:48 - 00000000 ____D C:\Users\Roy\AppData\Local\Google
2013-09-26 14:13 - 2013-09-26 14:13 - 01042066 _____ C:\Users\Roy\Desktop\adwcleaner.exe
2013-09-26 14:12 - 2013-09-26 14:12 - 00712264 _____ C:\Windows\isRS-000.tmp
2013-09-26 14:12 - 2012-05-28 08:53 - 00001077 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-26 12:26 - 2013-09-26 12:25 - 00000000 ____D C:\Users\Roy\AppData\Local\{C412ECBF-31A1-4889-BF5E-383D64C4B09D}
2013-09-26 09:10 - 2013-09-26 09:10 - 00000000 ____D C:\Windows\System32\Tasks\COMODO
2013-09-26 09:09 - 2013-09-26 09:09 - 00001888 _____ C:\Users\Public\Desktop\COMODO Internet Security.lnk
2013-09-26 09:09 - 2013-09-26 09:09 - 00001863 _____ C:\Users\Public\Desktop\Virtuelle Comodo Dragon.lnk
2013-09-26 09:09 - 2013-09-26 09:09 - 00000597 _____ C:\Users\Public\Desktop\Gemeinsamer Bereich.lnk
2013-09-26 09:09 - 2013-09-26 09:07 - 00000000 ___SD C:\ProgramData\Shared Space
2013-09-26 09:09 - 2013-09-26 09:05 - 00000000 ____D C:\ProgramData\COMODO
2013-09-26 09:05 - 2013-09-26 09:05 - 00002017 _____ C:\Users\Public\Desktop\GeekBuddy.lnk
2013-09-26 09:05 - 2013-09-26 09:05 - 00000000 ____D C:\ProgramData\Adtrustmedia
2013-09-26 09:05 - 2013-09-26 09:05 - 00000000 ____D C:\Program Files\COMODO
2013-09-26 09:05 - 2013-09-26 09:05 - 00000000 ____D C:\Program Files\AdTrustMedia
2013-09-26 09:05 - 2013-09-26 09:05 - 00000000 ____D C:\Program Files (x86)\AdTrustMedia
2013-09-26 09:04 - 2013-09-26 09:04 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2013-09-26 09:04 - 2013-09-26 09:04 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2013-09-26 09:04 - 2013-09-26 09:04 - 00001084 _____ C:\Users\Public\Desktop\Comodo Dragon.lnk
2013-09-26 09:04 - 2013-09-26 09:04 - 00000000 ____D C:\Users\Roy\AppData\Local\Comodo
2013-09-26 09:04 - 2013-09-26 09:04 - 00000000 ____D C:\Program Files (x86)\Comodo
2013-09-26 09:03 - 2013-09-26 09:03 - 00000000 ____D C:\ProgramData\Comodo Downloader
2013-09-26 08:15 - 2013-09-26 08:05 - 214262072 _____ (COMODO) C:\Users\Roy\Downloads\cispremium63_installer.exe
2013-09-26 07:41 - 2011-10-23 23:18 - 00000000 ____D C:\DTA
2013-09-25 23:26 - 2013-09-25 23:26 - 00000000 ____D C:\Users\Roy\AppData\Local\{4AF56351-57AA-4BE4-8A01-A752A2D17C4D}
2013-09-25 22:50 - 2013-09-25 22:50 - 00024774 _____ C:\ComboFix.txt
2013-09-25 22:50 - 2013-09-25 21:43 - 00000000 ____D C:\Qoobox
2013-09-25 22:50 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-09-25 22:46 - 2013-09-25 21:41 - 00000000 ____D C:\Windows\erdnt
2013-09-25 22:41 - 2009-07-14 04:34 - 00000248 _____ C:\Windows\system.ini
2013-09-25 22:34 - 2009-07-14 04:34 - 91488256 _____ C:\Windows\system32\config\SOFTWARE.bak
2013-09-25 22:34 - 2009-07-14 04:34 - 32505856 _____ C:\Windows\system32\config\SYSTEM.bak
2013-09-25 22:34 - 2009-07-14 04:34 - 01048576 _____ C:\Windows\system32\config\DEFAULT.bak
2013-09-25 22:34 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2013-09-25 22:34 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2013-09-25 22:27 - 2010-11-21 19:54 - 00000000 ____D C:\Program Files (x86)\Acer Bio Protection
2013-09-25 22:27 - 2010-11-21 19:30 - 00000000 ____D C:\Users\Roy
2013-09-25 21:55 - 2012-01-19 12:57 - 00000276 _____ C:\Users\Public\Desktop\SAMSUNG Dr.Printer.url
2013-09-25 21:51 - 2011-01-27 09:49 - 00001912 _____ C:\Windows\epplauncher.mif
2013-09-25 19:58 - 2013-09-19 09:23 - 00000000 ____D C:\Uhrenbilder
2013-09-25 12:38 - 2013-09-25 12:38 - 00000040 _____ C:\Autoconfig.ini
2013-09-25 12:37 - 2012-01-19 12:52 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-09-25 12:26 - 2012-01-19 12:54 - 00000000 ____D C:\ProgramData\Samsung
2013-09-25 12:17 - 2013-09-08 01:15 - 00025083 _____ C:\Users\Roy\Documents\USB0001
2013-09-25 11:25 - 2013-09-25 11:25 - 00000000 ____D C:\Users\Roy\AppData\Local\{E7B4C206-0421-473D-A7EA-2DF4684996AC}
2013-09-25 09:24 - 2012-06-29 10:13 - 00000000 ____D C:\Users\Roy\AppData\Roaming\vlc
2013-09-25 07:54 - 2013-09-25 07:54 - 00000000 ____D C:\FRST
2013-09-24 23:25 - 2013-09-24 23:25 - 00000000 ____D C:\Users\Roy\AppData\Local\{E68272D6-FD97-4804-B195-1C2F92544016}
2013-09-24 14:08 - 2012-11-28 10:35 - 00000000 ____D C:\AUDI A2
2013-09-24 11:54 - 2013-09-24 11:54 - 00709144 _____ (COMODO) C:\Windows\system32\Drivers\cmdguard.sys
2013-09-24 11:54 - 2013-09-24 11:54 - 00096800 _____ (COMODO) C:\Windows\system32\Drivers\inspect.sys
2013-09-24 11:54 - 2013-09-24 11:54 - 00048872 _____ (COMODO) C:\Windows\system32\Drivers\cmdhlp.sys
2013-09-24 11:54 - 2013-09-24 11:54 - 00023168 _____ (COMODO) C:\Windows\system32\Drivers\cmderd.sys
2013-09-24 11:53 - 2013-09-24 11:53 - 00444392 _____ (COMODO) C:\Windows\system32\guard64.dll
2013-09-24 11:53 - 2013-09-24 11:53 - 00354240 _____ (COMODO) C:\Windows\SysWOW64\guard32.dll
2013-09-24 11:53 - 2013-09-24 11:53 - 00347864 _____ (COMODO) C:\Windows\system32\cmdvrt64.dll
2013-09-24 11:53 - 2013-09-24 11:53 - 00280792 _____ (COMODO) C:\Windows\SysWOW64\cmdvrt32.dll
2013-09-24 11:53 - 2013-09-24 11:53 - 00045784 _____ (COMODO) C:\Windows\system32\cmdkbd64.dll
2013-09-24 11:53 - 2013-09-24 11:53 - 00043216 _____ (COMODO) C:\Windows\system32\cmdcsr.dll
2013-09-24 11:53 - 2013-09-24 11:53 - 00040664 _____ (COMODO) C:\Windows\SysWOW64\cmdkbd32.dll
2013-09-24 11:25 - 2013-09-24 11:24 - 00000000 ____D C:\Users\Roy\AppData\Local\{F67DB33D-CF52-47A1-A862-3694CB865416}
2013-09-23 23:24 - 2013-09-23 23:24 - 00000000 ____D C:\Users\Roy\AppData\Local\{FDF9F093-94DA-4B80-80D6-9E4A96CA9261}
2013-09-23 11:24 - 2013-09-23 11:23 - 00000000 ____D C:\Users\Roy\AppData\Local\{F3D61760-FCDE-4497-BF38-5554270CBEF7}
2013-09-23 08:39 - 2012-02-04 13:02 - 00000000 ____D C:\ACO
2013-09-22 23:23 - 2013-09-22 23:23 - 00000000 ____D C:\Users\Roy\AppData\Local\{0BBE6448-75EF-4668-A68C-1AF787836574}
2013-09-22 11:23 - 2013-09-22 11:23 - 00000000 ____D C:\Users\Roy\AppData\Local\{2E35A3B6-B181-494C-BE84-0D2C3813A7C2}
2013-09-22 09:35 - 2013-09-26 23:03 - 00152206 _____ C:\Users\Roy\Desktop\firefox.bat
2013-09-22 09:30 - 2013-09-26 23:03 - 00028718 _____ C:\Users\Roy\Desktop\BHO_clsid.dat
2013-09-22 09:30 - 2013-09-26 23:03 - 00016804 _____ C:\Users\Roy\Desktop\badFOLDERS.cfg
2013-09-22 09:30 - 2013-09-26 23:03 - 00010838 _____ C:\Users\Roy\Desktop\CLSID_clsid.dat
2013-09-22 09:30 - 2013-09-26 23:03 - 00009761 _____ C:\Users\Roy\Desktop\FFextensions.dat
2013-09-22 09:28 - 2013-09-26 23:03 - 00005846 _____ C:\Users\Roy\Desktop\CHR_extensions.cfg
2013-09-22 09:21 - 2013-09-26 23:03 - 00002876 _____ C:\Users\Roy\Desktop\services.dat
2013-09-22 09:21 - 2013-09-26 23:03 - 00001188 _____ C:\Users\Roy\Desktop\BHO_name.dat
2013-09-22 09:20 - 2013-09-26 23:03 - 00001485 _____ C:\Users\Roy\Desktop\FFXML.dat
2013-09-22 09:07 - 2013-09-26 23:03 - 00146539 _____ C:\Users\Roy\Desktop\misc.bat
2013-09-22 09:01 - 2013-09-26 23:03 - 00016063 _____ C:\Users\Roy\Desktop\get.bat
2013-09-22 09:01 - 2013-09-26 23:03 - 00010261 _____ C:\Users\Roy\Desktop\JRT.bat
2013-09-22 09:00 - 2013-09-26 23:03 - 00000013 _____ C:\Users\Roy\Desktop\currentmd5.txt
2013-09-22 09:00 - 2013-09-26 23:03 - 00000000 ____D C:\Users\Roy\Desktop\erunt
2013-09-21 23:23 - 2013-09-21 23:22 - 00000000 ____D C:\Users\Roy\AppData\Local\{41DDBA39-5F76-4CE5-A805-8D0AC498612A}
2013-09-21 11:22 - 2013-09-21 11:22 - 00000000 ____D C:\Users\Roy\AppData\Local\{79827C39-9EE7-4D6B-AD94-643317824C85}
2013-09-21 08:24 - 2013-03-26 14:30 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-21 08:21 - 2013-09-21 08:20 - 00291504 _____ C:\Windows\Minidump\092113-58047-01.dmp
2013-09-21 08:20 - 2011-02-03 20:37 - 00000000 ____D C:\Windows\Minidump
2013-09-20 23:22 - 2013-09-20 23:21 - 00000000 ____D C:\Users\Roy\AppData\Local\{23B78F9F-B61F-4990-BA17-A99454489FFE}
2013-09-20 21:45 - 2011-02-03 20:25 - 00002147 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-20 11:21 - 2013-09-20 11:21 - 00000000 ____D C:\Users\Roy\AppData\Local\{6881CC9A-F5B8-4780-A37E-919DBC1EAA4A}
2013-09-19 23:21 - 2013-09-19 23:21 - 00000000 ____D C:\Users\Roy\AppData\Local\{44CCCA98-DC33-4A81-9214-611730A1C14F}
2013-09-19 11:21 - 2013-09-19 11:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{6192EC2C-3862-4203-9189-53DFDCD47502}
2013-09-19 09:59 - 2013-09-17 20:22 - 00000000 ____D C:\Grieche
2013-09-19 09:27 - 2010-12-01 20:56 - 00000000 ____D C:\alles von samsung
2013-09-18 23:20 - 2013-09-18 23:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{91E7A245-F8EC-417B-80DE-1DE001076F71}
2013-09-18 20:21 - 2013-09-18 20:21 - 00013584 _____ C:\Users\Roy\AppData\Local\recently-used.xbel
2013-09-18 20:21 - 2013-08-04 19:17 - 00000000 ____D C:\Users\Roy\AppData\Local\gtk-2.0
2013-09-18 20:03 - 2013-07-22 17:14 - 00000000 ____D C:\Users\Roy\.gimp-2.8
2013-09-18 12:08 - 2013-09-18 09:13 - 00022528 _____ C:\Users\Roy\Documents\Bestellung praxis.xls
2013-09-18 11:20 - 2013-09-18 11:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{45E9094B-A28F-47F2-AE17-69E6559A5FEB}
2013-09-17 23:20 - 2013-09-17 23:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{09D7E641-DAB7-4E0C-BD93-665877D2AE16}
2013-09-17 20:21 - 2013-09-17 20:21 - 00000000 ____D C:\Neuer Ordner (2)
2013-09-17 11:20 - 2013-09-17 11:20 - 00000000 ____D C:\Users\Roy\AppData\Local\{C107F7AE-5168-41FA-9674-FD5FCB9BF1AE}
2013-09-16 22:48 - 2013-09-16 22:48 - 00000000 ____D C:\Users\Roy\AppData\Local\{1B20179D-CC7A-4ED0-9EE0-BA2ECEF2BE8C}
2013-09-16 10:48 - 2013-09-16 10:48 - 00000000 ____D C:\Users\Roy\AppData\Local\{82CD7926-0CE0-4274-B800-3CF6EEE57DA7}
2013-09-15 22:48 - 2013-09-15 22:47 - 00000000 ____D C:\Users\Roy\AppData\Local\{A2FF1D7E-8FEB-40D8-9997-9BD2171ECDC0}
2013-09-15 10:47 - 2013-09-15 10:47 - 00000000 ____D C:\Users\Roy\AppData\Local\{426B37D3-4F8C-4E60-BB95-CBC135281039}
2013-09-15 08:20 - 2013-09-26 23:03 - 00039471 _____ C:\Users\Roy\Desktop\prelim.bat
2013-09-15 08:07 - 2013-09-26 23:03 - 00004998 _____ C:\Users\Roy\Desktop\INTERFACE_clsid.dat
2013-09-14 20:06 - 2013-09-14 20:06 - 00000000 ____D C:\Users\Roy\AppData\Local\{C5CCD7F8-2C48-4F5E-9CE8-25C62AA3C29E}
2013-09-14 08:06 - 2013-09-14 08:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{8840F9CE-03A3-4DD7-BA57-6AC419F334D0}
2013-09-13 20:05 - 2013-09-13 20:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{A5B85E7F-0FB3-4562-93A7-3331BD39515B}
2013-09-13 08:05 - 2013-09-13 08:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{046B52D8-B160-4C95-ACB4-E3A8A42D59CD}
2013-09-13 07:05 - 2009-09-08 05:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-12 20:05 - 2013-09-12 20:04 - 00000000 ____D C:\Users\Roy\AppData\Local\{FEDA9A97-3B45-43DD-8393-D13D9AAA4BF0}
2013-09-12 10:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-12 09:39 - 2013-09-26 23:03 - 00001598 _____ C:\Users\Roy\Desktop\APPID_clsid.dat
2013-09-12 09:38 - 2013-09-26 23:03 - 00000878 _____ C:\Users\Roy\Desktop\PREAPPROVED_clsid.dat
2013-09-12 09:37 - 2013-09-26 23:03 - 00008130 _____ C:\Users\Roy\Desktop\REGhcr.cfg
2013-09-12 09:36 - 2013-09-26 23:03 - 00034016 _____ C:\Users\Roy\Desktop\REGhklm_software_classes.cfg
2013-09-12 09:36 - 2013-09-26 23:03 - 00000084 _____ C:\Users\Roy\Desktop\APPPATHS.dat
2013-09-12 09:35 - 2013-09-26 23:03 - 00003197 _____ C:\Users\Roy\Desktop\REGhkcu_and_hklm_software.cfg
2013-09-12 09:06 - 2010-11-22 04:14 - 00697098 _____ C:\Windows\system32\perfh007.dat
2013-09-12 09:06 - 2010-11-22 04:14 - 00148362 _____ C:\Windows\system32\perfc007.dat
2013-09-12 09:06 - 2009-07-14 07:13 - 01613412 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-12 09:02 - 2010-11-21 19:33 - 00000000 ___RD C:\Users\Roy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-12 09:02 - 2010-11-21 19:33 - 00000000 ___RD C:\Users\Roy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-12 08:58 - 2009-07-14 06:45 - 00438568 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-12 08:33 - 2013-07-19 07:39 - 00000000 ____D C:\Windows\system32\MRT
2013-09-12 08:26 - 2010-12-25 18:50 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-12 08:04 - 2013-09-09 07:59 - 00000000 ____D C:\Users\Roy\AppData\Local\{849D243E-F132-439A-A518-C313DBAD8C9F}
2013-09-12 01:43 - 2012-11-08 19:39 - 00000000 ____D C:\ba
2013-09-11 23:50 - 2011-02-17 10:45 - 00000000 ____D C:\bilder neu
2013-09-11 20:01 - 2013-09-11 20:01 - 00000000 ____D C:\Users\Roy\AppData\Local\{FC9E8CEA-513A-4032-AE81-F56F17B82FF7}
2013-09-11 07:40 - 2013-04-21 17:12 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-11 07:40 - 2013-04-21 17:12 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-11 07:40 - 2013-04-21 17:12 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-10 20:01 - 2013-09-10 20:00 - 00000000 ____D C:\Users\Roy\AppData\Local\{341E286F-8D20-4861-8A6C-110C105F1D28}
2013-09-10 08:00 - 2013-09-10 08:00 - 00000000 ____D C:\Users\Roy\AppData\Local\{523F1115-BD37-45E8-A761-12D0E67F12DF}
2013-09-10 07:42 - 2013-06-28 16:39 - 00000000 ____D C:\j
2013-09-09 10:57 - 2010-11-21 19:32 - 00000000 ____D C:\Users\Roy\AppData\Local\VirtualStore
2013-09-08 21:05 - 2013-07-21 19:13 - 00000000 ____D C:\roy-doc
2013-09-08 19:27 - 2013-09-08 19:27 - 00000000 ____D C:\Users\Roy\AppData\Local\{CA3A1017-5743-4439-AAF7-354F4DC00EC8}
2013-09-08 07:27 - 2013-09-08 07:27 - 00000000 ____D C:\Users\Roy\AppData\Local\{4DDCE5CE-CA47-4092-96FE-874025FE1960}
2013-09-08 04:43 - 2013-09-26 23:03 - 00000382 _____ C:\Users\Roy\Desktop\modules.dat
2013-09-08 04:37 - 2013-09-26 23:03 - 00004398 _____ C:\Users\Roy\Desktop\badvalues.cfg
2013-09-08 04:34 - 2013-09-26 23:03 - 00000430 _____ C:\Users\Roy\Desktop\WOW6432NODE.dat
2013-09-08 04:09 - 2013-09-26 23:03 - 00003605 _____ C:\Users\Roy\Desktop\FFprefs.dat
2013-09-08 04:09 - 2013-09-26 23:03 - 00000873 _____ C:\Users\Roy\Desktop\FFXPI.dat
2013-09-08 00:28 - 2013-09-08 00:27 - 00123581 _____ C:\Users\Roy\Documents\USB1
2013-09-08 00:24 - 2013-09-08 00:17 - 00123534 _____ C:\Users\Roy\Documents\USB002
2013-09-08 00:06 - 2013-09-08 00:06 - 00134893 _____ C:\Users\Roy\Documents\USB001
2013-09-08 00:04 - 2013-09-08 00:04 - 00123291 _____ C:\Users\Roy\Documents\usb
2013-09-07 23:47 - 2013-04-06 12:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-07 23:44 - 2013-09-07 23:44 - 00029696 ____H C:\Users\Roy\Documents\~WRL1369.tmp
2013-09-07 23:44 - 2013-03-09 12:46 - 00000000 ____D C:\BMW
2013-09-07 23:29 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-07 22:03 - 2012-03-04 18:21 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-07 21:28 - 2013-07-09 08:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak
2013-09-07 13:55 - 2013-09-07 13:55 - 00000000 ____D C:\Users\Roy\AppData\Local\{5BDDCB18-646C-47F8-AC34-8B384379C663}
2013-09-06 23:53 - 2013-09-06 23:52 - 00000000 ____D C:\Users\Roy\AppData\Local\{BF8CB26D-EAA4-4B7F-ADAF-858E72D6BF40}
2013-09-06 15:32 - 2013-09-06 15:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-06 15:09 - 2012-03-15 16:57 - 01421824 ___SH C:\Users\Roy\Thumbs.db
2013-09-06 13:20 - 2013-07-03 16:34 - 00000000 ____D C:\mopar alles muss wech
2013-09-06 09:19 - 2013-09-06 09:19 - 00000000 ____D C:\Users\Roy\AppData\Local\{6A72D973-77EF-4644-AC45-78B57CE7F8A0}
2013-09-06 04:59 - 2013-09-26 23:03 - 00002910 _____ C:\Users\Roy\Desktop\REGhkcu_software_appdatalow.cfg
2013-09-05 21:19 - 2013-09-05 21:19 - 00000000 ____D C:\Users\Roy\AppData\Local\{42E5B2EA-27A5-4098-A1C2-F676CEF26CF2}
2013-09-05 09:19 - 2013-09-05 09:18 - 00000000 ____D C:\Users\Roy\AppData\Local\{3E9CA061-DAE8-4FB3-8E72-781C39CFC53D}
2013-09-04 21:18 - 2013-09-04 21:18 - 00000000 ____D C:\Users\Roy\AppData\Local\{C32FBA2F-5FA2-4599-8E8C-59A55655826C}
2013-09-04 00:15 - 2013-09-04 00:15 - 00000000 ____D C:\Users\Roy\AppData\Local\{3A37E278-E484-4087-98E8-8A005DFCE557}
2013-09-03 12:15 - 2013-09-03 12:14 - 00000000 ____D C:\Users\Roy\AppData\Local\{7B1C7B9E-61C0-4FA4-A74A-CE9FE2E368CC}
2013-09-03 00:14 - 2013-09-03 00:14 - 00000000 ____D C:\Users\Roy\AppData\Local\{1FEBCB14-B989-47FD-A8AB-EB5D9139C29C}
2013-09-02 12:14 - 2013-09-02 12:14 - 00000000 ____D C:\Users\Roy\AppData\Local\{09F5B520-0816-4F7A-96C2-C5A9852E8E1C}
2013-09-02 02:55 - 2013-09-26 23:03 - 00000059 _____ C:\Users\Roy\Desktop\REGISTRYUSERSID.cfg
2013-09-02 02:52 - 2013-09-26 23:03 - 00000028 _____ C:\Users\Roy\Desktop\serviceseventlog.cfg
2013-09-02 02:20 - 2013-09-26 23:03 - 00000144 _____ C:\Users\Roy\Desktop\appinit64_null.reg
2013-09-02 02:16 - 2013-09-26 23:03 - 00008398 _____ C:\Users\Roy\Desktop\runvalues.bat
2013-09-02 02:15 - 2013-09-26 23:03 - 00029648 _____ C:\Users\Roy\Desktop\ask.bat
2013-09-02 00:14 - 2013-09-02 00:13 - 00000000 ____D C:\Users\Roy\AppData\Local\{20FDD8AD-6F1D-4761-AEF5-2728999D1EC3}
2013-09-01 12:13 - 2013-09-01 12:13 - 00000000 ____D C:\Users\Roy\AppData\Local\{A58ADCB2-841C-4AC9-B18F-E7DCC28207B7}
2013-09-01 00:13 - 2013-09-01 00:12 - 00000000 ____D C:\Users\Roy\AppData\Local\{108AF808-BE41-467C-B5C7-706CAE65FCA4}
2013-08-31 12:12 - 2013-08-31 12:12 - 00000000 ____D C:\Users\Roy\AppData\Local\{3FA4DBCF-3342-412E-8BF2-490E96FFC381}
2013-08-31 05:34 - 2013-09-26 23:03 - 00000848 _____ C:\Users\Roy\Desktop\badFOLDERSstart.cfg
2013-08-31 00:12 - 2013-08-31 00:12 - 00000000 ____D C:\Users\Roy\AppData\Local\{9C514648-A7FD-4AB3-8353-ACB016FEE4F5}
2013-08-30 09:48 - 2013-03-26 14:30 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00204880 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-08-30 09:48 - 2013-03-26 14:30 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-30 09:47 - 2013-03-26 14:29 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-08-30 09:47 - 2012-03-04 18:21 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-08-30 08:06 - 2013-08-30 08:05 - 00000000 ____D C:\Users\Roy\AppData\Local\{7DD150D7-EF39-4875-A3E6-DE6771D734D7}
2013-08-29 17:17 - 2013-08-29 17:17 - 00000000 ____D C:\Users\Roy\AppData\Local\{274E3297-C680-44F5-9DC3-EDFEC90C9C43}
2013-08-29 05:15 - 2013-09-26 23:03 - 00006957 _____ C:\Users\Roy\Desktop\FWCLSID.dat
2013-08-29 04:58 - 2013-09-26 23:03 - 00000188 _____ C:\Users\Roy\Desktop\FFpluginREG.dat
2013-08-29 04:30 - 2013-09-26 23:03 - 00000132 _____ C:\Users\Roy\Desktop\appinit_null.reg
2013-08-28 18:59 - 2013-04-28 10:47 - 00000000 ____D C:\Users\Roy\AppData\Local\Citrix
2013-08-27 23:14 - 2013-09-26 23:03 - 00001589 _____ C:\Users\Roy\Desktop\REGhkcu_software_microsoft.cfg

Files to move or delete:
====================
C:\Users\Roy\csbgame.dat
C:\Users\Roy\csbgame2.dat
C:\Users\Roy\CSBwin12_100.exe
C:\Users\Roy\dungeon.dat
C:\Users\Roy\gimp-2.8.6-setup.exe
C:\Users\Roy\graphics.dat


Some content of TEMP:
====================
C:\Users\Roy\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-21 10:03

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Was willst Du mir mit dem Zitat über die Seite sagen? Ich denke es geht um Web.de?


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte.

@schrauber

Zu Anfang hatte ich einen zweiten thread eröffnet: Thema ebay - malware-Meldung durch Chrome. Du meintest, das erledigen wir zusammen in einem Aufwasch und hast den zweiten thread gelöscht.
Das web.de Thema ist Danke Deiner Hilfe bereinigt.
Nur das ebay - Problem besteht nach wie vor: Die Details der Meldung von Chrome hatte ich Dir
als Zitat in der letzten Antwort übermittelt.

Gruss
lostintroja

ok jetzt check ich auch den Zusammenhang

Wann genau kommt das bei Ebay?

Also:
Ich bin vollkommen korrekt in meinen ebay account eingeloggt.
Absolut keine Probleme beim Einloggen und beim klicken durch alle Untermenues.
Nur beim Untermenue "Beobachtungsliste" erscheint ein Warnhinweis von Chrome,
dass eine Seite versucht Malware zu verbreiten. Klicke ich in diesem Warnhinweis
auf "erweitert", erscheint der Text, den ich Dir übersandt habe.
Ich kann zwar durch zwei klicks dennoch in die Beobachtungsliste, aber ganz wohl ist
einem nicht dabei. Es kann zwar sein, dass Chrome einfach nur Panik macht, muss aber nicht zwingend sein...

Danke + Gruss
lostintroja

Ich denke eher dass eine Seite auf deiner Beobachtungsliste als Malware eingestuft wird. Lösch doch mal eins nach dem Anderen aus der Liste (speicher den Link von mir aus extern in Notepad) und kontrolliere nochmal.

Deine Antwort macht Sinn...
Wie ist das mit dem Spenden ...
Unterstützt meine Spende einen (armen) Studenten (war selber mal einer und weiss noch wie
das war) oder geht die Spende in einen groooßen Topf des Boardes???

Gruss
lostintroja

Irgendwie beides

Serverkosten und Co werden bezahlt, aber Spenden werden primär aufgeteilt


Noch PRobleme?