advanced system protector hat sich eingenistet

wwweib · 04.02.2014, 08:43

Hallo Gemeinde,

ich brauche Hilfe, denn seit heute früh hat sich Advanced System Protector auf meinem Laptop eingenistet. Gestern war er noch nicht da. Habe vorgestern die 60Tage-Testversion von Office 2013 runtergeladen. Denke, daran liegts nicht. Aber vorgestern hat mein Junior (wiedermal) Minecraft heruntergeladen. Mir fällt grad auf, dass ein my_downloader_installer.exe mit auf der Download-Liste geführt wird. Das war am gleichen Tag zur gleichen Urzeit. Also Junior muss ich mal wieder die Ohren lang ziehen.

Habe bereits Malewarebytes drüber laufen lassen, aber das Ding hängt immer noch in meinem System. Wird die Auswertung irgendwo gespeichert?

Danke schonmal für's unterstützen

Sabine

Bootsektor · 04.02.2014, 09:00

Mein Name ist Sandra und ich werde Dir bei Deinem Problem behilflich sein.

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem
Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
Bitte kein Crossposting ( posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software, ausser Du wurdest dazu aufgefordert.
Speichere alle unsere Toosl auf dem Desktop ab.
Poste die Logfiles direkt in deinen Thread in Code-Tags.
Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 2 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Bitte füge die Logs immer in Code-Tags ein. Wenn Du das nicht machst, erschwert es mir sehr das Auswerten. Danke.
Dazu:

Klicke über dem Antwortfenster auf die Raute #, dann steht dort in eckigen Klammern [] CODE /CODE.
Zwischen den beiden code-Bausteinen fügst Du dann deine Logfiles ein. Also CODE Logfile /CODE
Wenn die Logs zu lang sein sollten, dann teile sie bitte auf und poste sie dann hier in Deinem Thread, notfalls in mehreren Antworten.

Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Dies garantiert, dass Du Hilfe von einem ausgebildeten Helfer bekommst.

Ich bedanke mich für deine Geduld

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

wwweib · 04.02.2014, 09:25

Hallo Sandra,

danke für deine Unterstützung - ich mach mich erst später an die Arbeit, muss erst mal zum Anwalt.

Melde mich dann.

Gruß, Sabine

Bootsektor · 04.02.2014, 09:30

Ok.

wwweib · 04.02.2014, 12:31

Hallo Sandra, hier bitteschön:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2014
Ran by Alphatierchen (administrator) on SABINELAPPI on 04-02-2014 12:23:41
Running from C:\Users\Alphatierchen\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AdminService.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Akamai Technologies, Inc.) C:\Users\Alphatierchen\AppData\Local\Akamai\netsession_win.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
() C:\Users\Alphatierchen\.thinkbuzan\imindmap6\preload\iMindMap6_Preloader.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Akamai Technologies, Inc.) C:\Users\Alphatierchen\AppData\Local\Akamai\netsession_win.exe
() C:\Windows\System32\rpcnsh32.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [VizorHtmlDialog.exe] - C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [1123664 2010-10-08] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [192520 2010-10-12] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [322384 2010-09-17] (Trend Micro Inc.)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2213992 2011-05-12] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe [613536 2010-11-26] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe [379040 2010-11-26] (Atheros Commnucations)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-31] (ELAN Microelectronics Corp.)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] ()
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] - C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-13] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS)
HKLM-x32\...\Run: [USBChargerPlusTray] - C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [496560 2011-04-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-03] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2010-11-12] (cyberlink)
HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Run: [Akamai NetSession Interface] - C:\Users\Alphatierchen\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [RestrictRun] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\MountPoints2: {f6db59c9-50e8-11e3-8bc2-14dae9a0c891} - F:\HTC_Sync_Manager_PC.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2011-04-28] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [193128 2011-04-28] (NVIDIA Corporation)
Startup: C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iMindMap6 Preloader.lnk
ShortcutTarget: iMindMap6 Preloader.lnk -> C:\Users\Alphatierchen\.thinkbuzan\imindmap6\preload\iMindMap6_Preloader.exe ()
Startup: C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)

==================== Internet (Whitelisted) ====================

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default
FF NewTab: hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p23_serp_ff_de_display?ie=UTF8&tagbase=bds-p23&tbrId=v1_abb-channel-23_97457b2f702a4db2a42e2149ca4c3610_39_1006_20140203_DE_ff_nt_dsnr
FF DefaultSearchEngine: Amazon 
FF SearchEngineOrder.1: Amazon 
FF SelectedSearchEngine: Amazon 
FF Homepage: hxxp://www.astro.com/horoskope
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\searchplugins\google-language-de.xml
FF SearchPlugin: C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\searchplugins\google-ssl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\2020Player_IKEA@2020Technologies.com [2012-01-21]
FF Extension: Amazon 1Button App for Firefox - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\abb@amazon.com.xpi [2013-09-04]
FF Extension: Ghostery - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\firefox@ghostery.com.xpi [2014-01-14]
FF Extension: Adblock Plus - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-08-17]
FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\
FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ []

==================== Services (Whitelisted) =================

S4 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe [151552 2010-05-24] (Atheros)
R2 AtherosSvc; C:\Program Files (x86)\Atheros\Bluetooth Suite\adminservice.exe [52896 2010-11-26] (Atheros Commnucations)
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36392 2014-01-27] (Just Develop It)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2010-11-12] (CyberLink)
R2 getmac32; C:\Windows\system32\rpcnsh32.exe [117760 2013-07-08] ()
R2 TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [241488 2010-09-17] (Trend Micro Inc.)
S3 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [X]

==================== Drivers (Whitelisted) ====================

R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-08-15] (GFI Software)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [90704 2010-09-17] (Trend Micro Inc.)
R2 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [144464 2010-09-17] (Trend Micro Inc.)
R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [67664 2010-09-17] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105552 2010-09-17] (Trend Micro Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-12-31 18:58 - 2013-07-09 20:51 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\_
2014-12-31 18:15 - 2014-12-31 18:15 - 00003311 _____ () C:\Users\Alphatierchen\Desktop\Gästeverwaltung 2010.lnk
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Gästeverwaltung Vorlagen
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gästeverwaltung 2010
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Program Files (x86)\Gästeverwaltung 2010
2014-12-31 18:07 - 2014-12-31 18:07 - 00121856 _____ () C:\Windows\system32\GFilterSvc0.exe
2014-12-31 18:07 - 2014-12-31 18:07 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Opera
2014-12-31 18:07 - 2013-07-08 12:15 - 00117760 _____ () C:\Windows\system32\rpcnsh32.exe
2014-12-31 18:07 - 2011-05-13 14:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-12-31 18:07 - 2011-03-25 22:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-12-31 18:06 - 2014-12-31 18:06 - 00618048 _____ (www.download-sponsor.de) C:\Users\Alphatierchen\Downloads\GV2010Setup-Downloader.exe
2014-02-04 12:23 - 2014-02-04 12:23 - 00018439 _____ () C:\Users\Alphatierchen\Desktop\FRST.txt
2014-02-04 12:23 - 2014-02-04 12:23 - 00000000 ____D () C:\FRST
2014-02-04 12:20 - 2014-02-04 12:21 - 02080256 _____ (Farbar) C:\Users\Alphatierchen\Desktop\FRST64.exe
2014-02-04 12:17 - 2014-02-04 12:17 - 00000056 _____ () C:\Windows\setupact.log
2014-02-04 12:17 - 2014-02-04 12:17 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-04 08:11 - 2014-02-04 08:11 - 00010954 _____ () C:\Users\Alphatierchen\Desktop\cc_20140204_081129.reg
2014-02-03 17:06 - 2014-02-04 08:00 - 00000000 ____D () C:\ProgramData\Systweak
2014-02-03 17:06 - 2014-02-04 07:47 - 00003120 _____ () C:\Windows\System32\Tasks\Advanced System Protector_startup
2014-02-03 17:06 - 2014-02-03 17:06 - 00001207 _____ () C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-02-03 17:06 - 2012-07-25 12:03 - 00016896 _____ () C:\Windows\system32\sasnative64.exe
2014-02-03 17:05 - 2014-02-03 17:05 - 00003358 _____ () C:\Windows\System32\Tasks\Advanced System Protector
2014-02-03 17:05 - 2014-02-03 17:05 - 00001975 _____ () C:\Users\Alphatierchen\Desktop\Sync Folder.lnk
2014-02-03 17:05 - 2014-02-03 17:05 - 00001093 _____ () C:\Users\Alphatierchen\Desktop\MyPC Backup.lnk
2014-02-03 17:05 - 2014-02-03 17:05 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-02-03 17:05 - 2014-02-03 17:05 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-02-03 17:04 - 2014-02-04 08:00 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\systweak
2014-02-03 17:04 - 2014-02-03 17:04 - 00003108 _____ () C:\Windows\System32\Tasks\RegClean Pro
2014-02-03 17:04 - 2014-02-03 17:04 - 00001056 _____ () C:\Users\Public\Desktop\RegClean Pro.lnk
2014-02-03 17:04 - 2014-01-21 17:28 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2014-01-31 20:08 - 2014-01-31 20:08 - 00000708 _____ () C:\Users\Alphatierchen\Downloads\vCard.vcf
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-01-31 18:02 - 2014-01-31 18:02 - 00000000 __RHD () C:\MSOCache
2014-01-31 17:25 - 2014-01-31 17:33 - 712716288 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x86_de-de.img
2014-01-31 15:41 - 2014-01-31 15:51 - 820998144 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x64_de-de.img
2014-01-31 15:40 - 2014-01-31 15:40 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\Akamai
2014-01-31 15:38 - 2014-01-31 15:38 - 10025728 _____ (Akamai Technologies, Inc.) C:\Users\Alphatierchen\Downloads\my_downloader_installer.exe
2014-01-31 13:18 - 2014-01-31 13:18 - 00675988 _____ () C:\Users\Alphatierchen\Downloads\Minecraft(2).exe
2014-01-27 09:10 - 2014-01-27 09:10 - 00662780 _____ () C:\Users\Alphatierchen\Downloads\ordnerruecken-vorlage-zb.xlsx
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\Documents\DVDVideoSoft
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\DVDVideoSoft
2014-01-17 12:13 - 2014-01-17 12:13 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\{F7793FE0-24F8-4599-B53F-77011F4752CE}
2014-01-16 00:03 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-01-16 00:03 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-01-16 00:03 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-01-16 00:03 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-01-16 00:02 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-16 00:02 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-01-16 00:02 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-16 00:02 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-01-16 00:02 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-01-16 00:02 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-01-16 00:02 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-01-16 00:02 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-01-16 00:02 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-01-16 00:02 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-01-16 00:02 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-01-16 00:02 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-01-16 00:02 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-01-16 00:02 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-01-16 00:02 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-01-16 00:02 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-01-16 00:02 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-01-16 00:02 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-01-16 00:02 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-01-16 00:02 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-01-16 00:02 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-01-16 00:02 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-01-16 00:02 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-01-16 00:02 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-01-16 00:02 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-01-16 00:02 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-01-16 00:02 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-01-16 00:02 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-01-16 00:02 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-01-16 00:02 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-01-16 00:02 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-01-16 00:02 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-01-16 00:02 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-01-16 00:02 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-16 00:01 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-16 00:01 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-01-16 00:01 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-01-16 00:01 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-01-16 00:01 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-01-16 00:01 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-01-16 00:00 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-01-16 00:00 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-01-16 00:00 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-01-16 00:00 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-01-16 00:00 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-01-16 00:00 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-01-16 00:00 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-01-16 00:00 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-01-16 00:00 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-01-16 00:00 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-01-14 21:59 - 2014-01-14 22:00 - 00009906 _____ () C:\Users\Alphatierchen\Desktop\cc_20140114_215953.reg
2014-01-14 21:17 - 2014-01-14 21:18 - 01236282 _____ () C:\Users\Alphatierchen\Downloads\adwcleaner.exe
2014-01-14 18:28 - 2014-01-14 18:28 - 00819144 _____ (Google Inc.) C:\Users\Alphatierchen\Downloads\chrome_installer_31.0.1650.63.exe
2014-01-14 18:12 - 2014-01-14 18:12 - 00283096 _____ (Mozilla) C:\Users\Alphatierchen\Downloads\Firefox Setup Stub 26.0.exe
2014-01-14 16:44 - 2014-02-04 12:23 - 00000000 ____D () C:\ProgramData\ThinkBuzan
2014-01-14 16:44 - 2014-02-04 12:23 - 00000000 ____D () C:\ProgramData\JSoft
2014-01-14 16:44 - 2014-01-15 08:01 - 00000000 ____D () C:\Users\Alphatierchen\.thinkbuzan
2014-01-14 16:44 - 2014-01-14 16:44 - 00002058 _____ () C:\Users\Public\Desktop\iMindMap 6.lnk
2014-01-14 16:44 - 2014-01-14 16:44 - 00000000 ____D () C:\Program Files (x86)\ThinkBuzan
2014-01-14 16:42 - 2014-01-14 16:44 - 132117192 _____ (ThinkBuzan) C:\Users\Alphatierchen\Desktop\imindmap6_windows_6-0-1.exe

==================== One Month Modified Files and Folders =======

2014-12-31 18:15 - 2014-12-31 18:15 - 00003311 _____ () C:\Users\Alphatierchen\Desktop\Gästeverwaltung 2010.lnk
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Gästeverwaltung Vorlagen
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gästeverwaltung 2010
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Program Files (x86)\Gästeverwaltung 2010
2014-12-31 18:07 - 2014-12-31 18:07 - 00121856 _____ () C:\Windows\system32\GFilterSvc0.exe
2014-12-31 18:07 - 2014-12-31 18:07 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Opera
2014-12-31 18:06 - 2014-12-31 18:06 - 00618048 _____ (www.download-sponsor.de) C:\Users\Alphatierchen\Downloads\GV2010Setup-Downloader.exe
2014-02-04 12:23 - 2014-02-04 12:23 - 00018439 _____ () C:\Users\Alphatierchen\Desktop\FRST.txt
2014-02-04 12:23 - 2014-02-04 12:23 - 00000000 ____D () C:\FRST
2014-02-04 12:23 - 2014-01-14 16:44 - 00000000 ____D () C:\ProgramData\ThinkBuzan
2014-02-04 12:23 - 2014-01-14 16:44 - 00000000 ____D () C:\ProgramData\JSoft
2014-02-04 12:21 - 2014-02-04 12:20 - 02080256 _____ (Farbar) C:\Users\Alphatierchen\Desktop\FRST64.exe
2014-02-04 12:21 - 2011-08-04 01:28 - 01990330 _____ () C:\Windows\WindowsUpdate.log
2014-02-04 12:18 - 2011-08-04 01:35 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-04 12:17 - 2014-02-04 12:17 - 00000056 _____ () C:\Windows\setupact.log
2014-02-04 12:17 - 2014-02-04 12:17 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-04 12:17 - 2011-08-17 08:21 - 00000000 ___HD () C:\ASUS.DAT
2014-02-04 12:17 - 2011-08-04 01:52 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-02-04 12:17 - 2011-08-04 01:45 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-02-04 12:17 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-04 09:22 - 2011-02-19 05:24 - 10063294 _____ () C:\Windows\system32\perfh007.dat
2014-02-04 09:22 - 2011-02-19 05:24 - 03171360 _____ () C:\Windows\system32\perfc007.dat
2014-02-04 09:22 - 2009-07-14 06:13 - 00006756 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-04 08:52 - 2013-02-24 13:58 - 00000000 ____D () C:\Users\Alphatierchen\Documents\WISO Mein Geld
2014-02-04 08:11 - 2014-02-04 08:11 - 00010954 _____ () C:\Users\Alphatierchen\Desktop\cc_20140204_081129.reg
2014-02-04 08:10 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-04 08:10 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-04 08:06 - 2011-08-20 11:14 - 00000072 _____ () C:\Users\Public\LMDebug.log
2014-02-04 08:00 - 2014-02-03 17:06 - 00000000 ____D () C:\ProgramData\Systweak
2014-02-04 08:00 - 2014-02-03 17:04 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\systweak
2014-02-04 07:47 - 2014-02-03 17:06 - 00003120 _____ () C:\Windows\System32\Tasks\Advanced System Protector_startup
2014-02-04 07:46 - 2011-08-04 01:51 - 00002690 _____ () C:\Windows\system32\AutoRunFilter.ini
2014-02-04 07:46 - 2011-08-04 01:51 - 00001571 _____ () C:\Windows\system32\ServiceFilter.ini
2014-02-03 22:31 - 2011-08-31 17:21 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\SoftGrid Client
2014-02-03 17:18 - 2013-02-15 13:57 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\.minecraft
2014-02-03 17:06 - 2014-02-03 17:06 - 00001207 _____ () C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-02-03 17:05 - 2014-02-03 17:05 - 00003358 _____ () C:\Windows\System32\Tasks\Advanced System Protector
2014-02-03 17:05 - 2014-02-03 17:05 - 00001975 _____ () C:\Users\Alphatierchen\Desktop\Sync Folder.lnk
2014-02-03 17:05 - 2014-02-03 17:05 - 00001093 _____ () C:\Users\Alphatierchen\Desktop\MyPC Backup.lnk
2014-02-03 17:05 - 2014-02-03 17:05 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-02-03 17:05 - 2014-02-03 17:05 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-02-03 17:05 - 2011-08-17 08:22 - 00000000 ___RD () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-03 17:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-02-03 17:04 - 2014-02-03 17:04 - 00003108 _____ () C:\Windows\System32\Tasks\RegClean Pro
2014-02-03 17:04 - 2014-02-03 17:04 - 00001056 _____ () C:\Users\Public\Desktop\RegClean Pro.lnk
2014-02-01 07:36 - 2011-08-28 02:58 - 00118984 _____ () C:\Users\Tabea und Leon\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-31 20:08 - 2014-01-31 20:08 - 00000708 _____ () C:\Users\Alphatierchen\Downloads\vCard.vcf
2014-01-31 20:01 - 2009-07-14 05:45 - 00449256 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-31 18:57 - 2011-08-17 08:21 - 00118984 _____ () C:\Users\Alphatierchen\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-31 18:07 - 2012-02-11 19:15 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-01-31 18:06 - 2011-08-17 22:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-31 18:06 - 2011-04-13 03:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-01-31 18:06 - 2009-07-14 08:45 - 00000000 ____D () C:\Windows\ShellNew
2014-01-31 18:05 - 2013-04-12 08:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-01-31 18:05 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2014-01-31 18:04 - 2011-08-31 17:21 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-01-31 18:02 - 2014-01-31 18:02 - 00000000 __RHD () C:\MSOCache
2014-01-31 17:33 - 2014-01-31 17:25 - 712716288 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x86_de-de.img
2014-01-31 15:51 - 2014-01-31 15:41 - 820998144 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x64_de-de.img
2014-01-31 15:40 - 2014-01-31 15:40 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\Akamai
2014-01-31 15:38 - 2014-01-31 15:38 - 10025728 _____ (Akamai Technologies, Inc.) C:\Users\Alphatierchen\Downloads\my_downloader_installer.exe
2014-01-31 13:20 - 2013-03-28 16:07 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\.minecraft
2014-01-31 13:18 - 2014-01-31 13:18 - 00675988 _____ () C:\Users\Alphatierchen\Downloads\Minecraft(2).exe
2014-01-27 17:28 - 2011-11-20 17:05 - 00000680 __RSH () C:\Users\Alphatierchen\ntuser.pol
2014-01-27 17:28 - 2011-08-17 08:21 - 00000000 ____D () C:\Users\Alphatierchen
2014-01-27 13:36 - 2011-11-20 17:05 - 00001346 __RSH () C:\Users\Tabea und Leon\ntuser.pol
2014-01-27 13:36 - 2011-08-28 02:57 - 00000000 ____D () C:\Users\Tabea und Leon
2014-01-27 09:10 - 2014-01-27 09:10 - 00662780 _____ () C:\Users\Alphatierchen\Downloads\ordnerruecken-vorlage-zb.xlsx
2014-01-27 09:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-01-27 09:02 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-01-22 18:07 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-21 17:28 - 2014-02-03 17:04 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2014-01-20 19:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\Documents\DVDVideoSoft
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\DVDVideoSoft
2014-01-17 12:17 - 2012-05-30 15:31 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\SoftGrid Client
2014-01-17 12:13 - 2014-01-17 12:13 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\{F7793FE0-24F8-4599-B53F-77011F4752CE}
2014-01-16 13:16 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-01-15 08:01 - 2014-01-14 16:44 - 00000000 ____D () C:\Users\Alphatierchen\.thinkbuzan
2014-01-14 22:09 - 2011-08-04 01:50 - 00003232 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-01-14 22:08 - 2012-06-25 18:26 - 00003216 _____ () C:\Windows\System32\Tasks\{D196C910-F9D8-46DA-B3CC-C68741B25405}
2014-01-14 22:02 - 2011-08-17 08:28 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\Google
2014-01-14 22:00 - 2014-01-14 21:59 - 00009906 _____ () C:\Users\Alphatierchen\Desktop\cc_20140114_215953.reg
2014-01-14 21:24 - 2013-10-18 17:33 - 00000000 ____D () C:\AdwCleaner
2014-01-14 21:18 - 2014-01-14 21:17 - 01236282 _____ () C:\Users\Alphatierchen\Downloads\adwcleaner.exe
2014-01-14 18:45 - 2011-04-13 03:33 - 00000000 ____D () C:\Program Files (x86)\Google
2014-01-14 18:28 - 2014-01-14 18:28 - 00819144 _____ (Google Inc.) C:\Users\Alphatierchen\Downloads\chrome_installer_31.0.1650.63.exe
2014-01-14 18:12 - 2014-01-14 18:12 - 00283096 _____ (Mozilla) C:\Users\Alphatierchen\Downloads\Firefox Setup Stub 26.0.exe
2014-01-14 16:44 - 2014-01-14 16:44 - 00002058 _____ () C:\Users\Public\Desktop\iMindMap 6.lnk
2014-01-14 16:44 - 2014-01-14 16:44 - 00000000 ____D () C:\Program Files (x86)\ThinkBuzan
2014-01-14 16:44 - 2014-01-14 16:42 - 132117192 _____ (ThinkBuzan) C:\Users\Alphatierchen\Desktop\imindmap6_windows_6-0-1.exe

Some content of TEMP:
====================
C:\Users\Alphatierchen\AppData\Local\Temp\BackupSetup.exe
C:\Users\Alphatierchen\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-20 19:35

==================== End Of Log ============================

--- --- ---

--- --- ---

Addition Editor

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2014
Ran by Alphatierchen at 2014-02-04 12:24:11
Running from C:\Users\Alphatierchen\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Trend Micro Titanium Internet Security (Disabled - Up to date) {68F968AC-2AA0-091D-848C-803E83E35902}
AS: Trend Micro Titanium Internet Security (Disabled - Up to date) {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
AAVUpdateManager (x32 Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Adobe Flash Player 10 ActiveX (x32 Version: 10.1.85.3 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.6.636 - Adobe Systems, Inc.)
Akamai NetSession Interface (HKCU Version:  - Akamai Technologies, Inc)
Astrocontact Astroplus (x32 Version:  - Astrocontact Software)
ASUS AI Recovery (x32 Version: 1.0.14 - ASUS)
ASUS FancyStart (x32 Version: 1.1.0 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (x32 Version: 3.0.22 - ASUS)
ASUS Power4Gear Hybrid (Version: 1.1.45 - ASUS)
ASUS SmartLogon (x32 Version: 1.0.0011 - ASUS)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0031 - ASUS)
ASUS USB Charger Plus (x32 Version: 2.0.0 - AsusTek Computer Inc.)
ASUS Virtual Camera (x32 Version: 1.0.21 - asus)
ASUS WebStorage (x32 Version: 3.0.84.161 - eCareme Technologies, Inc.)
ASUS_Screensaver (x32 Version:  - )
AsusVibe2.0 (x32 Version: 2.0.4.617 - ASUSTEK)
Atheros WLAN and Bluetooth Client Installation Program (x32 Version: 9.0 - Atheros)
ATK Package (x32 Version: 1.0.0010 - ASUS)
Bildschutz Pro (x32 Version: 2.0 - K-Lab Development)
Bluetooth Win7 Suite (64) (Version: 7.2.0.45 - Atheros Communications)
Bookworm Deluxe (x32 Version:  - Oberon Media Inc.)
Carambis Driver Updater (x32 Version: 2.0.0.6004 - MEDIA FOG LTD)
CCleaner (Version: 4.01 - Piriform)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Cooking Dash (x32 Version:  - Oberon Media Inc.)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.) Hidden
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (x32 Version: 10.0.2312.52 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.2312.52 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DHTML Editing Component (x32 Version: 6.02.0001 - Microsoft Corporation)
ETDWare PS/2-X64 8.0.5.1_WHQL (Version: 8.0.5.1 - ELAN Microelectronic Corp.)
Fast Boot (Version: 1.0.9 - ASUS)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Game Park Console (x32 Version: 6.2.1.1 - Oberon Media, Inc.)
Gästeverwaltung 2010 (x32 Version: 3.0.0 - Küchl Michael)
Gästeverwaltung 2011 (x32 Version: 3.1.0 - Küchl Michael)
ghsw.info Inventarverwaltung Free Edition 2.1.1 (x32 Version: 2.1.1.840 - Gert Heil)
Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Governor of Poker (x32 Version:  - Oberon Media Inc.)
Hausratverwaltung (x32 Version: 7.3.00 - VR-Software)
Hotel Dash Suite Success (x32 Version:  - Oberon Media Inc.)
iMindMap 6 (x32 Version: 6.0.288 - ThinkBuzan)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2345 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor 2.0 (Version: 2.1.23.0 - Intel)
IrfanView (remove only) (x32 Version: 4.32 - Irfan Skiljan)
Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (x32 Version: 2.1.1 - Oracle Corporation)
Jewel Quest 3 (x32 Version:  - Oberon Media Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kalucker (x32 Version:  - )
Klebezettel NG (Version 2.9.12) (x32 Version:  - )
Luxor 3 (x32 Version:  - Oberon Media Inc.)
Mahjongg dimensions (x32 Version:  - Oberon Media Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Access MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office 64-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Korrekturhilfen 2013 - Deutsch (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft OneNote MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Word MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MyPC Backup  (Version:  - JDi Backup Ltd) <==== ATTENTION
NebenkostenAbrechnung (x32 Version: 1.02 - Wolters Kluwer Deutschland GmbH)
Nuance PDF Reader (x32 Version: 6.00.0041 - Nuance Communications, Inc.)
Nur Entfernen der CopyTrans Suite möglich (HKCU Version: 2.37 - WindSolutions)
NVIDIA 3D Vision Driver 268.39 (Version: 268.39 - NVIDIA Corporation)
NVIDIA Control Panel 268.39 (Version: 268.39 - NVIDIA Corporation) Hidden
NVIDIA Graphics Driver 268.39 (Version: 268.39 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.2.22.1 (Version: 1.2.22.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.265.41.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.0.21 (Version: 1.0.21 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6839 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 1.0.21 - NVIDIA Corporation) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Paintball2 Alpha build 37 (x32 Version: Alpha build 37 - Digital Paint)
PDFCreator (x32 Version: 1.7.0 - pdfforge)
Plants vs Zombies (x32 Version:  - Oberon Media Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (x32 Version: 7.41.216.2011 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6370 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Reader Driver (x32 Version: 6.1.7600.10008 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
Scribus 1.4.3 (x32 Version: 1.4.3 - The Scribus Team)
Sonic Focus (x32 Version: 1.0.0.4 - Synopsys )
Steuer-Spar-Erklärung 2012 (x32 Version: 17.13 - Wolters Kluwer Deutschland GmbH)
Steuer-Spar-Erklärung 2013 (x32 Version: 18.09 - Wolters Kluwer Deutschland GmbH)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
syncables desktop SE (x32 Version: 5.5.746.11492 - syncables)
Trend Micro Titanium Internet Security (Version: 3.0 - Trend Micro Inc.)
Trend Micro Titanium Internet Security (Version: 3.00 - Trend Micro Inc.) Hidden
Turbo Lister 2 (x32 Version: 2.00.0000 - eBay Inc.)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinFlash (x32 Version: 2.31.1 - ASUS)
Wireless Console 3 (x32 Version: 3.0.21 - ASUS)
WISO Mein Geld 2013 Professional (x32 Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2013 Professional (x32 Version: 15.0.0.1 - Buhl Data Service GmbH) Hidden
World of Goo (x32 Version:  - Oberon Media Inc.)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2 - Microsoft Corporation)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (x32 Version: 15.4.5722.2 - Microsoft Corporation)
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (x32 Version: 15.4.5722.2 - Microsoft Corporation)
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (x32 Version: 15.4.5722.2 - Microsoft Corporation)

==================== Restore Points  =========================

05-12-2013 18:59:25 Geplanter Prüfpunkt
10-12-2013 16:03:48 Installed Java 7 Update 45
29-12-2013 17:52:29 Geplanter Prüfpunkt
15-01-2014 23:02:36 Windows Update
24-01-2014 14:51:07 Geplanter Prüfpunkt
31-01-2014 17:01:50 Installed Microsoft Office Professional Plus 2013
31-01-2014 17:02:25 PROPLUSR

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {02E15D0A-C5F8-4883-A66C-ECF35080ADBD} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2011-05-11] (ASUSTek Computer Inc.)
Task: {2527ADE0-5F51-45D4-9FE8-BDAE1C0DBE4D} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS)
Task: {46D62CD3-E339-4C66-92EE-2F0979CD777B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {525A767E-CA64-4178-B449-78A54DCC76FF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-04-23] (Piriform Ltd)
Task: {5DE250F1-E416-4A45-BD52-1437C231E215} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: {607D9C13-1DC6-4013-B2D3-846F0B89DEDE} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17] (ASUS)
Task: {6E57D55C-4057-43E2-BF4D-551FD0788942} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {925BDC9A-0958-4ECB-B4CF-44B71E84EF04} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS)
Task: {C4688EB0-C95E-41CA-9467-F1F311E639B2} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {E31C73B3-0080-4DFF-B8CB-DA5E827A63D8} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe <==== ATTENTION
Task: {E596C8CB-11F0-4F2F-97AC-A2C57EB337DF} - System32\Tasks\Advanced System Protector => C:\Program Files (x86)\RegClean Pro\SystweakASP.exe <==== ATTENTION
Task: {E8D94A81-439C-4E0D-9846-7B15A9A51B41} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2011-05-31] (ASUS)

==================== Loaded Modules (whitelisted) =============

2010-07-15 00:11 - 2010-07-15 00:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
2010-04-03 03:21 - 2008-10-01 07:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2011-06-20 15:01 - 2011-03-26 08:29 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-01-27 16:23 - 2014-01-27 16:23 - 00012288 _____ () C:\Program Files (x86)\MyPC Backup\GetText.dll
2014-01-27 16:05 - 2014-01-27 16:05 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
2009-11-02 22:20 - 2009-11-02 22:20 - 00619816 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 22:23 - 2009-11-02 22:23 - 00013096 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2011-06-10 18:49 - 2011-06-10 18:49 - 01163264 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll
2011-08-17 22:51 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2011-04-28 14:03 - 2011-04-28 14:03 - 00235112 _____ () C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
2011-05-11 01:20 - 2011-05-11 01:20 - 00043008 _____ () C:\Program Files (x86)\ASUS\AI Recovery\RecoveryDVDLang.dll
2013-08-14 13:38 - 2013-08-14 13:38 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9ab0e818cb3d1b6930eba54179f89300\IsdiInterop.ni.dll
2011-08-04 01:31 - 2011-01-13 01:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:D20FFA63
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\AW_Notarvertrag_v_12_04_2011-z_Hd_Herrn_Baldauf.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Danke_für_die_Information.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Grundbucheintrag.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Herzlichen_Dank.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Komplette_Räumung_des_Hauses_nach_aufgezeichneter_Liste.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Notarvertrag_v_12_04_2011-z_Hd_Herrn_Baldauf.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\WG_Zählerstände.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ksupmgr => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ksupmgr => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/04/2014 09:22:03 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (02/04/2014 09:22:03 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (02/04/2014 09:22:03 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (02/04/2014 08:12:43 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-1845154852-3688582821-2253681952-1001}/">.

Error: (02/03/2014 09:10:08 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (02/03/2014 09:10:08 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (02/03/2014 09:10:08 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (02/03/2014 07:05:45 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (02/03/2014 07:05:45 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (02/03/2014 07:05:45 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.


System errors:
=============
Error: (02/04/2014 00:18:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/04/2014 00:18:00 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (02/04/2014 00:17:28 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (02/04/2014 00:17:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UAC-Dateivirtualisierung" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (02/04/2014 00:17:21 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎04.‎02.‎2014 um 09:38:48 unerwartet heruntergefahren.

Error: (02/04/2014 09:20:49 AM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (02/04/2014 08:02:51 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/04/2014 08:02:51 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (02/04/2014 08:02:13 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UAC-Dateivirtualisierung" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (02/04/2014 07:46:32 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office Sessions:
=========================
Error: (02/04/2014 09:22:03 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (02/04/2014 09:22:03 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (02/04/2014 09:22:03 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (02/04/2014 08:12:43 AM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-1845154852-3688582821-2253681952-1001}/

Error: (02/03/2014 09:10:08 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (02/03/2014 09:10:08 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (02/03/2014 09:10:08 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (02/03/2014 07:05:45 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (02/03/2014 07:05:45 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (02/03/2014 07:05:45 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000


CodeIntegrity Errors:
===================================
  Date: 2013-03-03 11:57:54.593
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-03-03 11:57:54.500
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 38%
Total physical RAM: 6052.97 MB
Available physical RAM: 3735.33 MB
Total Pagefile: 12104.13 MB
Available Pagefile: 9551.24 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:400.55 GB) (Free:321.37 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:505.96 GB) (Free:505.86 GB) NTFS
Drive f: () (Removable) (Total:1.84 GB) (Free:0.56 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 0CD9B3F5)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=401 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=506 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 2 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=2 GB) - (Type=06)

==================== End Of Log ============================

Bootsektor · 05.02.2014, 10:15

Hallo wwweib,

Schritt 1
Bitte deinstalliere folgendes Programm (falls vorhanden) :
MyPC Backup

Dazu gehe auf:
den Windowsbutton in der Taskleiste --> Systemsteuerung --> Programme (Unterpunkt Programme deinstallieren) --> Programm auswählen --> entfernen

Schritt 2
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

wwweib · 05.02.2014, 10:51

so, jetzt hier die files

Code:

ATTFilter

# AdwCleaner v3.018 - Bericht erstellt am 05/02/2014 um 10:29:12
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Alphatierchen - SABINELAPPI
# Gestartet von : C:\Users\Alphatierchen\Desktop\adwcleaner(1).exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Systweak
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup 
Ordner Gelöscht : C:\Users\Alphatierchen\AppData\Roaming\Systweak
Datei Gelöscht : C:\Users\Public\Desktop\Advanced System Protector.lnk
Datei Gelöscht : C:\Users\Public\Desktop\RegClean Pro.lnk
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Windows\System32\Tasks\Advanced System Protector
Datei Gelöscht : C:\Windows\System32\Tasks\Advanced System Protector_startup
Datei Gelöscht : C:\Windows\System32\Tasks\RegClean Pro

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\distromatic
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKLM\Software\systweak

***** [ Browser ] *****

-\\ Internet Explorer v0.0.0.0


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\prefs.js ]


[ Datei : C:\Users\Tabea und Leon\AppData\Roaming\Mozilla\Firefox\Profiles\hmyf129t.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [20144 octets] - [18/10/2013 17:33:35]
AdwCleaner[R10].txt - [3333 octets] - [05/02/2014 10:26:46]
AdwCleaner[R1].txt - [20264 octets] - [18/10/2013 17:38:31]
AdwCleaner[R2].txt - [4105 octets] - [18/10/2013 17:45:46]
AdwCleaner[R3].txt - [4227 octets] - [18/10/2013 17:56:04]
AdwCleaner[R4].txt - [4345 octets] - [18/10/2013 18:13:25]
AdwCleaner[R5].txt - [4465 octets] - [18/10/2013 18:16:54]
AdwCleaner[R6].txt - [1654 octets] - [10/11/2013 14:42:39]
AdwCleaner[R7].txt - [1774 octets] - [10/11/2013 14:50:36]
AdwCleaner[R8].txt - [1894 octets] - [10/11/2013 14:54:28]
AdwCleaner[R9].txt - [2676 octets] - [14/01/2014 21:19:11]
AdwCleaner[S0].txt - [330 octets] - [18/10/2013 17:36:29]
AdwCleaner[S10].txt - [2386 octets] - [05/02/2014 10:29:12]
AdwCleaner[S1].txt - [19398 octets] - [18/10/2013 17:39:17]
AdwCleaner[S2].txt - [4166 octets] - [18/10/2013 17:46:47]
AdwCleaner[S3].txt - [4288 octets] - [18/10/2013 18:01:27]
AdwCleaner[S4].txt - [4406 octets] - [18/10/2013 18:14:28]
AdwCleaner[S5].txt - [4526 octets] - [18/10/2013 18:22:16]
AdwCleaner[S6].txt - [1715 octets] - [10/11/2013 14:47:25]
AdwCleaner[S7].txt - [1835 octets] - [10/11/2013 14:51:15]
AdwCleaner[S8].txt - [1955 octets] - [10/11/2013 14:55:41]
AdwCleaner[S9].txt - [2636 octets] - [14/01/2014 21:24:06]

########## EOF - C:\AdwCleaner\AdwCleaner[S10].txt - [2988 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by Alphatierchen on 05.02.2014 at 10:34:04,64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1845154852-3688582821-2253681952-1001\Software\sweetim



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\shoB579.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\datamngr"
Successfully deleted: [Folder] "C:\Users\Alphatierchen\AppData\Roaming\getrighttogo"
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{0B515B4F-3EB4-49B3-8F4D-57F35C1D358A}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{1177F4F5-4FEA-4111-9900-8046499694D4}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{121EE84D-9037-46D3-838D-5544035530CC}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{16802EBC-D5D8-4D40-B38C-4D9D15DDD056}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{1E293F1D-76CB-459E-A8F4-6F05400E0E3D}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{216D3C4E-CD8D-4032-ACA6-EB6FDEEF678B}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{29CCF4F9-3184-4881-BF3D-6020C4042E76}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{2AA190FB-2113-4D7E-B4C8-49B507E7D3C2}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{2CEAEF0F-6FD6-49F2-967A-5912B339D3FA}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{37D8800A-64C7-497E-BA2F-1B2F3DD2E0A7}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{38384299-6964-429A-9647-BC12E30281D9}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{39A02796-B5EE-4524-9491-91B943192E19}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{41DBE6EC-68F9-42C2-B9A1-CFBD95CEA458}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{469E7F0E-3C17-4C48-95AC-78437C1F288B}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{4C455615-0D88-4534-91B5-8CA86A0D9D62}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{4FBEAC1B-21D2-489E-9063-52C4EF9FBF98}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{56CCF47C-CFF4-49FF-8185-F234A540622D}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{5FCA7955-5922-433E-9BBA-B32AB39B7B75}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{6402FE70-A61C-4F52-9540-EBA468CAEB40}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{642980C8-31A9-4374-BB4A-D1B82B07174E}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{6430C4F3-B598-4597-AE5A-46456DCCD851}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{69FB4769-D40F-41FB-8011-26C03045889C}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{6B8B7119-F26C-453C-9712-4817AE3935EC}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{79C6DCDE-A355-4FBB-A86A-E32B8A5A7590}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{7A39CA42-BA34-4C14-AE80-B22B0EF03B64}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{7D510B5B-C437-49EB-9143-EF0C1D47BECD}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{7E678B1A-D8E4-4EED-8735-FA571C6D8B0C}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{862BB1F8-AC40-4D0A-A344-34104DB9215C}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{88EBE495-03B2-4B3B-8B10-29B0B5555165}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{8CC01396-51D0-43DB-A2E1-AD468D141C80}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{995C15D9-B637-4685-A32E-75D6B8E22016}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{9972242D-4C8F-4238-A037-2789FC55B019}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{99FDA41D-5C5C-44FE-85EE-775DCA1CFB18}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{9CEDE501-C395-474D-B6A6-DB8ADC449E7B}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{A112BC3A-5F5D-494F-8A1A-9ACB739219A2}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{B19F124F-ECFC-4B3E-9545-1D7B63A3F06E}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{B7D8F3D7-FF80-4520-B0B2-8FC9AF723A32}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{BCC78172-DB55-48C1-9CA2-F7BFCA6F5B2A}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{D0DE7D0B-8660-4722-9542-16D46138DC5E}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{D0EA46BA-9842-44F1-8462-D0F4D4A4EFB2}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{D2B3BCC1-957F-4189-A9CA-8B17D7ABB5BE}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{D70E77F4-0067-4CC7-8FB8-6F3C296569AA}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{DCEABEEA-FA76-4FBF-B5C5-084231D8667A}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{DECF9EA2-98D9-4322-A50D-A968D49877AC}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{E2ACB5FC-9E48-4E70-B19E-FFDF5C358EFF}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{EDDF77D3-399D-4D07-BF7D-5AF7032A6F59}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{EE9C06ED-9297-4D76-BD34-4D8C36825719}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{F7793FE0-24F8-4599-B53F-77011F4752CE}
Successfully deleted: [Empty Folder] C:\Users\Alphatierchen\appdata\local\{FACC7857-D6E6-4E17-B691-08061CD43358}



~~~ FireFox

Emptied folder: C:\Users\Alphatierchen\AppData\Roaming\mozilla\firefox\profiles\tykdm8np.default\minidumps [586 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 05.02.2014 at 10:42:33,89
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2014
Ran by Alphatierchen (administrator) on SABINELAPPI on 05-02-2014 10:48:08
Running from C:\Users\Alphatierchen\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AdminService.exe
() C:\Windows\System32\rpcnsh32.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Windows\AsScrPro.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Akamai Technologies, Inc.) C:\Users\Alphatierchen\AppData\Local\Akamai\netsession_win.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
() C:\Users\Alphatierchen\.thinkbuzan\imindmap6\preload\iMindMap6_Preloader.exe
(Akamai Technologies, Inc.) C:\Users\Alphatierchen\AppData\Local\Akamai\netsession_win.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Thisisu) C:\Users\Alphatierchen\Desktop\JRT.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [VizorHtmlDialog.exe] - C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [1123664 2010-10-08] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [192520 2010-10-12] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [322384 2010-09-17] (Trend Micro Inc.)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2213992 2011-05-12] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe [613536 2010-11-26] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe [379040 2010-11-26] (Atheros Commnucations)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-31] (ELAN Microelectronics Corp.)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] ()
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] - C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-13] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS)
HKLM-x32\...\Run: [USBChargerPlusTray] - C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [496560 2011-04-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-03] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2010-11-12] (cyberlink)
HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Run: [Akamai NetSession Interface] - C:\Users\Alphatierchen\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [RestrictRun] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\MountPoints2: {f6db59c9-50e8-11e3-8bc2-14dae9a0c891} - F:\HTC_Sync_Manager_PC.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2011-04-28] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [193128 2011-04-28] (NVIDIA Corporation)
Startup: C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iMindMap6 Preloader.lnk
ShortcutTarget: iMindMap6 Preloader.lnk -> C:\Users\Alphatierchen\.thinkbuzan\imindmap6\preload\iMindMap6_Preloader.exe ()

==================== Internet (Whitelisted) ====================

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default
FF NewTab: hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p23_serp_ff_de_display?ie=UTF8&tagbase=bds-p23&tbrId=v1_abb-channel-23_97457b2f702a4db2a42e2149ca4c3610_39_1006_20140203_DE_ff_nt_dsnr
FF DefaultSearchEngine: Amazon 
FF SearchEngineOrder.1: Amazon 
FF SelectedSearchEngine: Amazon 
FF Homepage: hxxp://www.astro.com/horoskope
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\searchplugins\google-language-de.xml
FF SearchPlugin: C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\searchplugins\google-ssl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\2020Player_IKEA@2020Technologies.com [2012-01-21]
FF Extension: Amazon 1Button App for Firefox - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\abb@amazon.com.xpi [2013-09-04]
FF Extension: Ghostery - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\firefox@ghostery.com.xpi [2014-01-14]
FF Extension: Adblock Plus - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-08-17]
FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\
FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ []

==================== Services (Whitelisted) =================

S4 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe [151552 2010-05-24] (Atheros)
R2 AtherosSvc; C:\Program Files (x86)\Atheros\Bluetooth Suite\adminservice.exe [52896 2010-11-26] (Atheros Commnucations)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2010-11-12] (CyberLink)
R2 getmac32; C:\Windows\system32\rpcnsh32.exe [117760 2013-07-08] ()
R2 TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [241488 2010-09-17] (Trend Micro Inc.)
S3 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [X]

==================== Drivers (Whitelisted) ====================

R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-08-15] (GFI Software)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [90704 2010-09-17] (Trend Micro Inc.)
R2 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [144464 2010-09-17] (Trend Micro Inc.)
R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [67664 2010-09-17] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105552 2010-09-17] (Trend Micro Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-12-31 18:58 - 2013-07-09 20:51 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\_
2014-12-31 18:15 - 2014-12-31 18:15 - 00003311 _____ () C:\Users\Alphatierchen\Desktop\Gästeverwaltung 2010.lnk
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Gästeverwaltung Vorlagen
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gästeverwaltung 2010
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Program Files (x86)\Gästeverwaltung 2010
2014-12-31 18:07 - 2014-12-31 18:07 - 00121856 _____ () C:\Windows\system32\GFilterSvc0.exe
2014-12-31 18:07 - 2014-12-31 18:07 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Opera
2014-12-31 18:07 - 2013-07-08 12:15 - 00117760 _____ () C:\Windows\system32\rpcnsh32.exe
2014-12-31 18:07 - 2011-05-13 14:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-12-31 18:07 - 2011-03-25 22:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-12-31 18:06 - 2014-12-31 18:06 - 00618048 _____ (www.download-sponsor.de) C:\Users\Alphatierchen\Downloads\GV2010Setup-Downloader.exe
2014-02-05 10:42 - 2014-02-05 10:42 - 00006894 _____ () C:\Users\Alphatierchen\Desktop\JRT.txt
2014-02-05 10:34 - 2014-02-05 10:34 - 00000000 ____D () C:\Windows\ERUNT
2014-02-05 10:32 - 2014-02-05 10:32 - 01037530 _____ (Thisisu) C:\Users\Alphatierchen\Desktop\JRT.exe
2014-02-05 10:24 - 2014-02-05 10:24 - 01166132 _____ () C:\Users\Alphatierchen\Desktop\adwcleaner(1).exe
2014-02-04 22:37 - 2014-02-04 22:37 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Benutzerdefinierte Office-Vorlagen
2014-02-04 13:13 - 2014-02-04 13:13 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\VR-IK
2014-02-04 13:12 - 2014-02-04 13:13 - 07537009 _____ () C:\Users\Alphatierchen\Downloads\VR-IK_setup.exe
2014-02-04 12:24 - 2014-02-04 12:25 - 00033771 _____ () C:\Users\Alphatierchen\Desktop\Addition.txt
2014-02-04 12:23 - 2014-02-05 10:48 - 00018124 _____ () C:\Users\Alphatierchen\Desktop\FRST.txt
2014-02-04 12:23 - 2014-02-05 10:48 - 00000000 ____D () C:\FRST
2014-02-04 12:20 - 2014-02-04 12:21 - 02080256 _____ (Farbar) C:\Users\Alphatierchen\Desktop\FRST64.exe
2014-02-04 12:17 - 2014-02-05 10:30 - 00000963 _____ () C:\Windows\setupact.log
2014-02-04 12:17 - 2014-02-04 12:17 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-04 08:11 - 2014-02-04 08:11 - 00010954 _____ () C:\Users\Alphatierchen\Desktop\cc_20140204_081129.reg
2014-02-03 17:06 - 2012-07-25 12:03 - 00016896 _____ () C:\Windows\system32\sasnative64.exe
2014-01-31 20:08 - 2014-01-31 20:08 - 00000708 _____ () C:\Users\Alphatierchen\Downloads\vCard.vcf
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-01-31 18:02 - 2014-01-31 18:02 - 00000000 __RHD () C:\MSOCache
2014-01-31 17:25 - 2014-01-31 17:33 - 712716288 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x86_de-de.img
2014-01-31 15:41 - 2014-01-31 15:51 - 820998144 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x64_de-de.img
2014-01-31 15:40 - 2014-01-31 15:40 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\Akamai
2014-01-31 15:38 - 2014-01-31 15:38 - 10025728 _____ (Akamai Technologies, Inc.) C:\Users\Alphatierchen\Downloads\my_downloader_installer.exe
2014-01-31 13:18 - 2014-01-31 13:18 - 00675988 _____ () C:\Users\Alphatierchen\Downloads\Minecraft(2).exe
2014-01-27 09:10 - 2014-01-27 09:10 - 00662780 _____ () C:\Users\Alphatierchen\Downloads\ordnerruecken-vorlage-zb.xlsx
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\Documents\DVDVideoSoft
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\DVDVideoSoft
2014-01-16 00:03 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-01-16 00:03 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-01-16 00:03 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-01-16 00:03 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-01-16 00:02 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-16 00:02 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-01-16 00:02 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-16 00:02 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-01-16 00:02 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-01-16 00:02 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-01-16 00:02 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-01-16 00:02 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-01-16 00:02 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-01-16 00:02 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-01-16 00:02 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-01-16 00:02 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-01-16 00:02 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-01-16 00:02 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-01-16 00:02 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-01-16 00:02 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-01-16 00:02 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-01-16 00:02 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-01-16 00:02 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-01-16 00:02 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-01-16 00:02 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-01-16 00:02 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-01-16 00:02 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-01-16 00:02 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-01-16 00:02 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-01-16 00:02 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-01-16 00:02 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-01-16 00:02 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-01-16 00:02 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-01-16 00:02 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-01-16 00:02 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-01-16 00:02 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-01-16 00:02 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-01-16 00:02 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-16 00:01 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-16 00:01 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-01-16 00:01 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-01-16 00:01 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-01-16 00:01 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-01-16 00:01 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-01-16 00:00 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-01-16 00:00 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-01-16 00:00 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-01-16 00:00 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-01-16 00:00 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-01-16 00:00 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-01-16 00:00 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-01-16 00:00 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-01-16 00:00 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-01-16 00:00 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-01-14 21:59 - 2014-01-14 22:00 - 00009906 _____ () C:\Users\Alphatierchen\Desktop\cc_20140114_215953.reg
2014-01-14 21:17 - 2014-01-14 21:18 - 01236282 _____ () C:\Users\Alphatierchen\Downloads\adwcleaner.exe
2014-01-14 18:28 - 2014-01-14 18:28 - 00819144 _____ (Google Inc.) C:\Users\Alphatierchen\Downloads\chrome_installer_31.0.1650.63.exe
2014-01-14 18:12 - 2014-01-14 18:12 - 00283096 _____ (Mozilla) C:\Users\Alphatierchen\Downloads\Firefox Setup Stub 26.0.exe
2014-01-14 16:44 - 2014-02-05 10:47 - 00000000 ____D () C:\ProgramData\ThinkBuzan
2014-01-14 16:44 - 2014-02-05 10:47 - 00000000 ____D () C:\ProgramData\JSoft
2014-01-14 16:44 - 2014-01-15 08:01 - 00000000 ____D () C:\Users\Alphatierchen\.thinkbuzan
2014-01-14 16:44 - 2014-01-14 16:44 - 00002058 _____ () C:\Users\Public\Desktop\iMindMap 6.lnk
2014-01-14 16:44 - 2014-01-14 16:44 - 00000000 ____D () C:\Program Files (x86)\ThinkBuzan
2014-01-14 16:42 - 2014-01-14 16:44 - 132117192 _____ (ThinkBuzan) C:\Users\Alphatierchen\Desktop\imindmap6_windows_6-0-1.exe

==================== One Month Modified Files and Folders =======

2014-12-31 18:15 - 2014-12-31 18:15 - 00003311 _____ () C:\Users\Alphatierchen\Desktop\Gästeverwaltung 2010.lnk
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Gästeverwaltung Vorlagen
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gästeverwaltung 2010
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Program Files (x86)\Gästeverwaltung 2010
2014-12-31 18:07 - 2014-12-31 18:07 - 00121856 _____ () C:\Windows\system32\GFilterSvc0.exe
2014-12-31 18:07 - 2014-12-31 18:07 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Opera
2014-12-31 18:06 - 2014-12-31 18:06 - 00618048 _____ (www.download-sponsor.de) C:\Users\Alphatierchen\Downloads\GV2010Setup-Downloader.exe
2014-02-05 10:48 - 2014-02-04 12:23 - 00018124 _____ () C:\Users\Alphatierchen\Desktop\FRST.txt
2014-02-05 10:48 - 2014-02-04 12:23 - 00000000 ____D () C:\FRST
2014-02-05 10:47 - 2014-01-14 16:44 - 00000000 ____D () C:\ProgramData\ThinkBuzan
2014-02-05 10:47 - 2014-01-14 16:44 - 00000000 ____D () C:\ProgramData\JSoft
2014-02-05 10:42 - 2014-02-05 10:42 - 00006894 _____ () C:\Users\Alphatierchen\Desktop\JRT.txt
2014-02-05 10:37 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-05 10:37 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-05 10:34 - 2014-02-05 10:34 - 00000000 ____D () C:\Windows\ERUNT
2014-02-05 10:33 - 2011-08-04 01:28 - 01998527 _____ () C:\Windows\WindowsUpdate.log
2014-02-05 10:32 - 2014-02-05 10:32 - 01037530 _____ (Thisisu) C:\Users\Alphatierchen\Desktop\JRT.exe
2014-02-05 10:30 - 2014-02-04 12:17 - 00000963 _____ () C:\Windows\setupact.log
2014-02-05 10:30 - 2011-08-17 08:21 - 00000000 ___HD () C:\ASUS.DAT
2014-02-05 10:30 - 2011-08-04 01:52 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-02-05 10:30 - 2011-08-04 01:45 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-02-05 10:30 - 2011-08-04 01:35 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-05 10:30 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-05 10:29 - 2013-10-18 17:33 - 00000000 ____D () C:\AdwCleaner
2014-02-05 10:26 - 2013-02-24 13:58 - 00000000 ____D () C:\Users\Alphatierchen\Documents\WISO Mein Geld
2014-02-05 10:24 - 2014-02-05 10:24 - 01166132 _____ () C:\Users\Alphatierchen\Desktop\adwcleaner(1).exe
2014-02-05 10:23 - 2011-08-17 08:22 - 00000000 ___RD () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-05 09:47 - 2011-02-19 05:24 - 10138154 _____ () C:\Windows\system32\perfh007.dat
2014-02-05 09:47 - 2011-02-19 05:24 - 03195940 _____ () C:\Windows\system32\perfc007.dat
2014-02-05 09:47 - 2009-07-14 06:13 - 00006756 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-05 08:26 - 2011-08-20 11:14 - 00000072 _____ () C:\Users\Public\LMDebug.log
2014-02-04 22:37 - 2014-02-04 22:37 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Benutzerdefinierte Office-Vorlagen
2014-02-04 13:13 - 2014-02-04 13:13 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\VR-IK
2014-02-04 13:13 - 2014-02-04 13:12 - 07537009 _____ () C:\Users\Alphatierchen\Downloads\VR-IK_setup.exe
2014-02-04 12:25 - 2014-02-04 12:24 - 00033771 _____ () C:\Users\Alphatierchen\Desktop\Addition.txt
2014-02-04 12:21 - 2014-02-04 12:20 - 02080256 _____ (Farbar) C:\Users\Alphatierchen\Desktop\FRST64.exe
2014-02-04 12:17 - 2014-02-04 12:17 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-04 08:11 - 2014-02-04 08:11 - 00010954 _____ () C:\Users\Alphatierchen\Desktop\cc_20140204_081129.reg
2014-02-04 07:46 - 2011-08-04 01:51 - 00002690 _____ () C:\Windows\system32\AutoRunFilter.ini
2014-02-04 07:46 - 2011-08-04 01:51 - 00001571 _____ () C:\Windows\system32\ServiceFilter.ini
2014-02-03 22:31 - 2011-08-31 17:21 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\SoftGrid Client
2014-02-03 17:18 - 2013-02-15 13:57 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\.minecraft
2014-02-03 17:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-02-01 07:36 - 2011-08-28 02:58 - 00118984 _____ () C:\Users\Tabea und Leon\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-31 20:08 - 2014-01-31 20:08 - 00000708 _____ () C:\Users\Alphatierchen\Downloads\vCard.vcf
2014-01-31 20:01 - 2009-07-14 05:45 - 00449256 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-31 18:57 - 2011-08-17 08:21 - 00118984 _____ () C:\Users\Alphatierchen\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-31 18:07 - 2012-02-11 19:15 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-01-31 18:06 - 2011-08-17 22:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-31 18:06 - 2011-04-13 03:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-01-31 18:06 - 2009-07-14 08:45 - 00000000 ____D () C:\Windows\ShellNew
2014-01-31 18:05 - 2013-04-12 08:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-01-31 18:05 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2014-01-31 18:04 - 2011-08-31 17:21 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-01-31 18:02 - 2014-01-31 18:02 - 00000000 __RHD () C:\MSOCache
2014-01-31 17:33 - 2014-01-31 17:25 - 712716288 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x86_de-de.img
2014-01-31 15:51 - 2014-01-31 15:41 - 820998144 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x64_de-de.img
2014-01-31 15:40 - 2014-01-31 15:40 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\Akamai
2014-01-31 15:38 - 2014-01-31 15:38 - 10025728 _____ (Akamai Technologies, Inc.) C:\Users\Alphatierchen\Downloads\my_downloader_installer.exe
2014-01-31 13:20 - 2013-03-28 16:07 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\.minecraft
2014-01-31 13:18 - 2014-01-31 13:18 - 00675988 _____ () C:\Users\Alphatierchen\Downloads\Minecraft(2).exe
2014-01-27 17:28 - 2011-11-20 17:05 - 00000680 __RSH () C:\Users\Alphatierchen\ntuser.pol
2014-01-27 17:28 - 2011-08-17 08:21 - 00000000 ____D () C:\Users\Alphatierchen
2014-01-27 13:36 - 2011-11-20 17:05 - 00001346 __RSH () C:\Users\Tabea und Leon\ntuser.pol
2014-01-27 13:36 - 2011-08-28 02:57 - 00000000 ____D () C:\Users\Tabea und Leon
2014-01-27 09:10 - 2014-01-27 09:10 - 00662780 _____ () C:\Users\Alphatierchen\Downloads\ordnerruecken-vorlage-zb.xlsx
2014-01-27 09:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-01-27 09:02 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-01-22 18:07 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-20 19:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\Documents\DVDVideoSoft
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\DVDVideoSoft
2014-01-17 12:17 - 2012-05-30 15:31 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\SoftGrid Client
2014-01-16 13:16 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-01-15 08:01 - 2014-01-14 16:44 - 00000000 ____D () C:\Users\Alphatierchen\.thinkbuzan
2014-01-14 22:09 - 2011-08-04 01:50 - 00003232 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-01-14 22:08 - 2012-06-25 18:26 - 00003216 _____ () C:\Windows\System32\Tasks\{D196C910-F9D8-46DA-B3CC-C68741B25405}
2014-01-14 22:02 - 2011-08-17 08:28 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\Google
2014-01-14 22:00 - 2014-01-14 21:59 - 00009906 _____ () C:\Users\Alphatierchen\Desktop\cc_20140114_215953.reg
2014-01-14 21:18 - 2014-01-14 21:17 - 01236282 _____ () C:\Users\Alphatierchen\Downloads\adwcleaner.exe
2014-01-14 18:45 - 2011-04-13 03:33 - 00000000 ____D () C:\Program Files (x86)\Google
2014-01-14 18:28 - 2014-01-14 18:28 - 00819144 _____ (Google Inc.) C:\Users\Alphatierchen\Downloads\chrome_installer_31.0.1650.63.exe
2014-01-14 18:12 - 2014-01-14 18:12 - 00283096 _____ (Mozilla) C:\Users\Alphatierchen\Downloads\Firefox Setup Stub 26.0.exe
2014-01-14 16:44 - 2014-01-14 16:44 - 00002058 _____ () C:\Users\Public\Desktop\iMindMap 6.lnk
2014-01-14 16:44 - 2014-01-14 16:44 - 00000000 ____D () C:\Program Files (x86)\ThinkBuzan
2014-01-14 16:44 - 2014-01-14 16:42 - 132117192 _____ (ThinkBuzan) C:\Users\Alphatierchen\Desktop\imindmap6_windows_6-0-1.exe

Some content of TEMP:
====================
C:\Users\Alphatierchen\AppData\Local\Temp\BackupSetup.exe
C:\Users\Alphatierchen\AppData\Local\Temp\Quarantine.exe
C:\Users\Alphatierchen\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-20 19:35

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2014
Ran by Alphatierchen at 2014-02-05 10:48:34
Running from C:\Users\Alphatierchen\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Trend Micro Titanium Internet Security (Disabled - Up to date) {68F968AC-2AA0-091D-848C-803E83E35902}
AS: Trend Micro Titanium Internet Security (Disabled - Up to date) {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
AAVUpdateManager (x32 Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Adobe Flash Player 10 ActiveX (x32 Version: 10.1.85.3 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.6.636 - Adobe Systems, Inc.)
Akamai NetSession Interface (HKCU Version:  - Akamai Technologies, Inc)
Astrocontact Astroplus (x32 Version:  - Astrocontact Software)
ASUS AI Recovery (x32 Version: 1.0.14 - ASUS)
ASUS FancyStart (x32 Version: 1.1.0 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (x32 Version: 3.0.22 - ASUS)
ASUS Power4Gear Hybrid (Version: 1.1.45 - ASUS)
ASUS SmartLogon (x32 Version: 1.0.0011 - ASUS)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0031 - ASUS)
ASUS USB Charger Plus (x32 Version: 2.0.0 - AsusTek Computer Inc.)
ASUS Virtual Camera (x32 Version: 1.0.21 - asus)
ASUS WebStorage (x32 Version: 3.0.84.161 - eCareme Technologies, Inc.)
ASUS_Screensaver (x32 Version:  - )
AsusVibe2.0 (x32 Version: 2.0.4.617 - ASUSTEK)
Atheros WLAN and Bluetooth Client Installation Program (x32 Version: 9.0 - Atheros)
ATK Package (x32 Version: 1.0.0010 - ASUS)
Bildschutz Pro (x32 Version: 2.0 - K-Lab Development)
Bluetooth Win7 Suite (64) (Version: 7.2.0.45 - Atheros Communications)
Bookworm Deluxe (x32 Version:  - Oberon Media Inc.)
Carambis Driver Updater (x32 Version: 2.0.0.6004 - MEDIA FOG LTD)
CCleaner (Version: 4.01 - Piriform)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Cooking Dash (x32 Version:  - Oberon Media Inc.)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.) Hidden
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (x32 Version: 10.0.2312.52 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.2312.52 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DHTML Editing Component (x32 Version: 6.02.0001 - Microsoft Corporation)
ETDWare PS/2-X64 8.0.5.1_WHQL (Version: 8.0.5.1 - ELAN Microelectronic Corp.)
Fast Boot (Version: 1.0.9 - ASUS)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Game Park Console (x32 Version: 6.2.1.1 - Oberon Media, Inc.)
Gästeverwaltung 2010 (x32 Version: 3.0.0 - Küchl Michael)
Gästeverwaltung 2011 (x32 Version: 3.1.0 - Küchl Michael)
ghsw.info Inventarverwaltung Free Edition 2.1.1 (x32 Version: 2.1.1.840 - Gert Heil)
Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Governor of Poker (x32 Version:  - Oberon Media Inc.)
Hausratverwaltung (x32 Version: 7.3.00 - VR-Software)
Hotel Dash Suite Success (x32 Version:  - Oberon Media Inc.)
iMindMap 6 (x32 Version: 6.0.288 - ThinkBuzan)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2345 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor 2.0 (Version: 2.1.23.0 - Intel)
IrfanView (remove only) (x32 Version: 4.32 - Irfan Skiljan)
Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (x32 Version: 2.1.1 - Oracle Corporation)
Jewel Quest 3 (x32 Version:  - Oberon Media Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kalucker (x32 Version:  - )
Klebezettel NG (Version 2.9.12) (x32 Version:  - )
Luxor 3 (x32 Version:  - Oberon Media Inc.)
Mahjongg dimensions (x32 Version:  - Oberon Media Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Access MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office 64-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Korrekturhilfen 2013 - Deutsch (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft OneNote MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Word MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
NebenkostenAbrechnung (x32 Version: 1.02 - Wolters Kluwer Deutschland GmbH)
Nuance PDF Reader (x32 Version: 6.00.0041 - Nuance Communications, Inc.)
Nur Entfernen der CopyTrans Suite möglich (HKCU Version: 2.37 - WindSolutions)
NVIDIA 3D Vision Driver 268.39 (Version: 268.39 - NVIDIA Corporation)
NVIDIA Control Panel 268.39 (Version: 268.39 - NVIDIA Corporation) Hidden
NVIDIA Graphics Driver 268.39 (Version: 268.39 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.2.22.1 (Version: 1.2.22.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.265.41.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.0.21 (Version: 1.0.21 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6839 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 1.0.21 - NVIDIA Corporation) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Paintball2 Alpha build 37 (x32 Version: Alpha build 37 - Digital Paint)
PDFCreator (x32 Version: 1.7.0 - pdfforge)
Plants vs Zombies (x32 Version:  - Oberon Media Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (x32 Version: 7.41.216.2011 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6370 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Reader Driver (x32 Version: 6.1.7600.10008 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
Scribus 1.4.3 (x32 Version: 1.4.3 - The Scribus Team)
Sonic Focus (x32 Version: 1.0.0.4 - Synopsys )
Steuer-Spar-Erklärung 2012 (x32 Version: 17.13 - Wolters Kluwer Deutschland GmbH)
Steuer-Spar-Erklärung 2013 (x32 Version: 18.09 - Wolters Kluwer Deutschland GmbH)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
syncables desktop SE (x32 Version: 5.5.746.11492 - syncables)
Trend Micro Titanium Internet Security (Version: 3.0 - Trend Micro Inc.)
Trend Micro Titanium Internet Security (Version: 3.00 - Trend Micro Inc.) Hidden
Turbo Lister 2 (x32 Version: 2.00.0000 - eBay Inc.)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinFlash (x32 Version: 2.31.1 - ASUS)
Wireless Console 3 (x32 Version: 3.0.21 - ASUS)
WISO Mein Geld 2013 Professional (x32 Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2013 Professional (x32 Version: 15.0.0.1 - Buhl Data Service GmbH) Hidden
World of Goo (x32 Version:  - Oberon Media Inc.)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2 - Microsoft Corporation)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (x32 Version: 15.4.5722.2 - Microsoft Corporation)
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (x32 Version: 15.4.5722.2 - Microsoft Corporation)
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (x32 Version: 15.4.5722.2 - Microsoft Corporation)

==================== Restore Points  =========================

05-12-2013 18:59:25 Geplanter Prüfpunkt
10-12-2013 16:03:48 Installed Java 7 Update 45
29-12-2013 17:52:29 Geplanter Prüfpunkt
15-01-2014 23:02:36 Windows Update
24-01-2014 14:51:07 Geplanter Prüfpunkt
31-01-2014 17:01:50 Installed Microsoft Office Professional Plus 2013
31-01-2014 17:02:25 PROPLUSR

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {02E15D0A-C5F8-4883-A66C-ECF35080ADBD} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2011-05-11] (ASUSTek Computer Inc.)
Task: {2527ADE0-5F51-45D4-9FE8-BDAE1C0DBE4D} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS)
Task: {46D62CD3-E339-4C66-92EE-2F0979CD777B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {525A767E-CA64-4178-B449-78A54DCC76FF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-04-23] (Piriform Ltd)
Task: {5DE250F1-E416-4A45-BD52-1437C231E215} - \RegClean Pro No Task File
Task: {607D9C13-1DC6-4013-B2D3-846F0B89DEDE} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17] (ASUS)
Task: {6E57D55C-4057-43E2-BF4D-551FD0788942} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {925BDC9A-0958-4ECB-B4CF-44B71E84EF04} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS)
Task: {C4688EB0-C95E-41CA-9467-F1F311E639B2} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {E31C73B3-0080-4DFF-B8CB-DA5E827A63D8} - \Advanced System Protector_startup No Task File
Task: {E596C8CB-11F0-4F2F-97AC-A2C57EB337DF} - \Advanced System Protector No Task File
Task: {E8D94A81-439C-4E0D-9846-7B15A9A51B41} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2011-05-31] (ASUS)

==================== Loaded Modules (whitelisted) =============

2011-08-04 01:34 - 2011-04-28 11:44 - 00004096 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2008-06-04 05:53 - 2008-06-04 05:53 - 00027648 _____ () C:\Windows\System32\sst3cl6.dll
2011-04-13 03:51 - 2010-09-17 09:52 - 00047104 _____ () C:\Program Files\Trend Micro\AMSP\boost_thread-vc80-mt-1_36.dll
2011-04-13 03:51 - 2010-09-17 09:52 - 00042496 _____ () C:\Program Files\Trend Micro\AMSP\boost_date_time-vc80-mt-1_36.dll
2010-07-15 00:11 - 2010-07-15 00:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
2010-04-03 03:21 - 2008-10-01 07:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2011-06-20 15:01 - 2011-03-26 08:29 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2009-11-02 22:20 - 2009-11-02 22:20 - 00619816 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 22:23 - 2009-11-02 22:23 - 00013096 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2011-06-10 18:49 - 2011-06-10 18:49 - 01163264 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll
2013-08-14 13:38 - 2013-08-14 13:38 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9ab0e818cb3d1b6930eba54179f89300\IsdiInterop.ni.dll
2011-08-04 01:31 - 2011-01-13 01:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2011-08-17 22:51 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2011-04-28 14:03 - 2011-04-28 14:03 - 00235112 _____ () C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:D20FFA63
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\AW_Notarvertrag_v_12_04_2011-z_Hd_Herrn_Baldauf.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Danke_für_die_Information.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Grundbucheintrag.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Herzlichen_Dank.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Komplette_Räumung_des_Hauses_nach_aufgezeichneter_Liste.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Notarvertrag_v_12_04_2011-z_Hd_Herrn_Baldauf.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\WG_Zählerstände.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ksupmgr => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ksupmgr => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-03-03 11:57:54.593
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-03-03 11:57:54.500
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 35%
Total physical RAM: 6052.97 MB
Available physical RAM: 3910 MB
Total Pagefile: 12104.13 MB
Available Pagefile: 9757.28 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:400.55 GB) (Free:321.25 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:505.96 GB) (Free:505.86 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 0CD9B3F5)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=401 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=506 GB) - (Type=OF Extended)

==================== End Of Log ============================

fertig

Bootsektor · 06.02.2014, 14:42

Hallo wwweib, das sieht sehr viel besser aus.

Wir müssen noch ein wenig fixen

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\Windows\system32\GFilterSvc0.exe
file: C:\Windows\system32\rpcnsh32.exe
Task: {5DE250F1-E416-4A45-BD52-1437C231E215} - \RegClean Pro No Task File
Task: {E31C73B3-0080-4DFF-B8CB-DA5E827A63D8} - \Advanced System Protector_startup No Task File
Task: {E596C8CB-11F0-4F2F-97AC-A2C57EB337DF} - \Advanced System Protector No Task File
AlternateDataStreams: C:\ProgramData\Temp:D20FFA63

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

wwweib · 06.02.2014, 18:59

Ok, Sandra hier die weiteren files

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-02-2014
Ran by Alphatierchen at 2014-02-06 18:53:18 Run:1
Running from C:\Users\Alphatierchen\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Windows\system32\GFilterSvc0.exe
file: C:\Windows\system32\rpcnsh32.exe
Task: {5DE250F1-E416-4A45-BD52-1437C231E215} - \RegClean Pro No Task File
Task: {E31C73B3-0080-4DFF-B8CB-DA5E827A63D8} - \Advanced System Protector_startup No Task File
Task: {E596C8CB-11F0-4F2F-97AC-A2C57EB337DF} - \Advanced System Protector No Task File
AlternateDataStreams: C:\ProgramData\Temp:D20FFA63
*****************

C:\Windows\system32\GFilterSvc0.exe => Moved successfully.

========================= file: C:\Windows\system32\rpcnsh32.exe ========================

MD5: D51FD0D97406B01AC5D89920D23C2DA5
Creation and modification date: 2014-12-31 18:07 - 2013-07-08 12:15
Size: 0117760
Attributes: ----A
Company Name: 
Internal Name: 
Original Name: 
Product Name: 
Description: 
File Version: 
Product Version: 
Copyright: 

====== End Of File: ======

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5DE250F1-E416-4A45-BD52-1437C231E215} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5DE250F1-E416-4A45-BD52-1437C231E215} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RegClean Pro => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E31C73B3-0080-4DFF-B8CB-DA5E827A63D8} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E31C73B3-0080-4DFF-B8CB-DA5E827A63D8} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Advanced System Protector_startup => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E596C8CB-11F0-4F2F-97AC-A2C57EB337DF} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E596C8CB-11F0-4F2F-97AC-A2C57EB337DF} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Advanced System Protector => Key deleted successfully.
C:\ProgramData\Temp => ":D20FFA63" ADS removed successfully.

==== End of Fixlog ====

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-02-2014
Ran by Alphatierchen (administrator) on SABINELAPPI on 06-02-2014 18:55:04
Running from C:\Users\Alphatierchen\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AdminService.exe
() C:\Windows\System32\rpcnsh32.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Windows\AsScrPro.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Akamai Technologies, Inc.) C:\Users\Alphatierchen\AppData\Local\Akamai\netsession_win.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Users\Alphatierchen\.thinkbuzan\imindmap6\preload\iMindMap6_Preloader.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Akamai Technologies, Inc.) C:\Users\Alphatierchen\AppData\Local\Akamai\netsession_win.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Wolters Kluwer Deutschland GmbH) C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\NebenkostenAbrechnung\SSE.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\WINWORD.EXE
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [VizorHtmlDialog.exe] - C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [1123664 2010-10-08] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [192520 2010-10-12] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [322384 2010-09-17] (Trend Micro Inc.)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2213992 2011-05-12] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe [613536 2010-11-26] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe [379040 2010-11-26] (Atheros Commnucations)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-31] (ELAN Microelectronics Corp.)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] ()
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] - C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-13] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS)
HKLM-x32\...\Run: [USBChargerPlusTray] - C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [496560 2011-04-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-03] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2010-11-12] (cyberlink)
HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Run: [Akamai NetSession Interface] - C:\Users\Alphatierchen\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [RestrictRun] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\MountPoints2: {f6db59c9-50e8-11e3-8bc2-14dae9a0c891} - F:\HTC_Sync_Manager_PC.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2011-04-28] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [193128 2011-04-28] (NVIDIA Corporation)
Startup: C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iMindMap6 Preloader.lnk
ShortcutTarget: iMindMap6 Preloader.lnk -> C:\Users\Alphatierchen\.thinkbuzan\imindmap6\preload\iMindMap6_Preloader.exe ()

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKLM - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default
FF user.js: detected! => C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\user.js
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de?hl=de&gl=de
FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=UTF-8&oe=UTF-8&meta=lr=lang_de&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\searchplugins\google-language-de.xml
FF SearchPlugin: C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\searchplugins\google-ssl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\2020Player_IKEA@2020Technologies.com [2012-01-21]
FF Extension: Amazon 1Button App for Firefox - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\abb@amazon.com.xpi [2013-09-04]
FF Extension: Ghostery - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\firefox@ghostery.com.xpi [2014-01-14]
FF Extension: Adblock Plus - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-08-17]
FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\
FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ []

==================== Services (Whitelisted) =================

S4 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe [151552 2010-05-24] (Atheros)
R2 AtherosSvc; C:\Program Files (x86)\Atheros\Bluetooth Suite\adminservice.exe [52896 2010-11-26] (Atheros Commnucations)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2010-11-12] (CyberLink)
R2 getmac32; C:\Windows\system32\rpcnsh32.exe [117760 2013-07-08] ()
R2 TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [241488 2010-09-17] (Trend Micro Inc.)
S3 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [X]

==================== Drivers (Whitelisted) ====================

R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-08-15] (GFI Software)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [90704 2010-09-17] (Trend Micro Inc.)
R2 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [144464 2010-09-17] (Trend Micro Inc.)
R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [67664 2010-09-17] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105552 2010-09-17] (Trend Micro Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-12-31 18:58 - 2013-07-09 20:51 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\_
2014-12-31 18:15 - 2014-12-31 18:15 - 00003311 _____ () C:\Users\Alphatierchen\Desktop\Gästeverwaltung 2010.lnk
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Gästeverwaltung Vorlagen
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gästeverwaltung 2010
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Program Files (x86)\Gästeverwaltung 2010
2014-12-31 18:07 - 2014-12-31 18:07 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Opera
2014-12-31 18:07 - 2013-07-08 12:15 - 00117760 _____ () C:\Windows\system32\rpcnsh32.exe
2014-12-31 18:07 - 2011-05-13 14:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-12-31 18:07 - 2011-03-25 22:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-12-31 18:06 - 2014-12-31 18:06 - 00618048 _____ (www.download-sponsor.de) C:\Users\Alphatierchen\Downloads\GV2010Setup-Downloader.exe
2014-02-06 18:53 - 2014-02-06 18:53 - 00000000 ____D () C:\Users\Alphatierchen\Desktop\FRST-OlderVersion
2014-02-05 10:42 - 2014-02-05 10:42 - 00006894 _____ () C:\Users\Alphatierchen\Desktop\JRT.txt
2014-02-05 10:34 - 2014-02-05 10:34 - 00000000 ____D () C:\Windows\ERUNT
2014-02-05 10:32 - 2014-02-05 10:32 - 01037530 _____ (Thisisu) C:\Users\Alphatierchen\Desktop\JRT.exe
2014-02-05 10:24 - 2014-02-05 10:24 - 01166132 _____ () C:\Users\Alphatierchen\Desktop\adwcleaner(1).exe
2014-02-04 22:37 - 2014-02-04 22:37 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Benutzerdefinierte Office-Vorlagen
2014-02-04 13:13 - 2014-02-04 13:13 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\VR-IK
2014-02-04 13:12 - 2014-02-04 13:13 - 07537009 _____ () C:\Users\Alphatierchen\Downloads\VR-IK_setup.exe
2014-02-04 12:24 - 2014-02-05 10:48 - 00025269 _____ () C:\Users\Alphatierchen\Desktop\Addition.txt
2014-02-04 12:23 - 2014-02-06 18:55 - 00018884 _____ () C:\Users\Alphatierchen\Desktop\FRST.txt
2014-02-04 12:23 - 2014-02-06 18:55 - 00000000 ____D () C:\FRST
2014-02-04 12:20 - 2014-02-06 18:53 - 02082304 _____ (Farbar) C:\Users\Alphatierchen\Desktop\FRST64.exe
2014-02-04 12:17 - 2014-02-06 14:35 - 00001075 _____ () C:\Windows\setupact.log
2014-02-04 12:17 - 2014-02-04 12:17 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-04 08:11 - 2014-02-04 08:11 - 00010954 _____ () C:\Users\Alphatierchen\Desktop\cc_20140204_081129.reg
2014-02-03 17:06 - 2012-07-25 12:03 - 00016896 _____ () C:\Windows\system32\sasnative64.exe
2014-01-31 20:08 - 2014-01-31 20:08 - 00000708 _____ () C:\Users\Alphatierchen\Downloads\vCard.vcf
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-01-31 18:02 - 2014-01-31 18:02 - 00000000 __RHD () C:\MSOCache
2014-01-31 17:25 - 2014-01-31 17:33 - 712716288 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x86_de-de.img
2014-01-31 15:41 - 2014-01-31 15:51 - 820998144 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x64_de-de.img
2014-01-31 15:40 - 2014-01-31 15:40 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\Akamai
2014-01-31 15:38 - 2014-01-31 15:38 - 10025728 _____ (Akamai Technologies, Inc.) C:\Users\Alphatierchen\Downloads\my_downloader_installer.exe
2014-01-31 13:18 - 2014-01-31 13:18 - 00675988 _____ () C:\Users\Alphatierchen\Downloads\Minecraft(2).exe
2014-01-27 09:10 - 2014-01-27 09:10 - 00662780 _____ () C:\Users\Alphatierchen\Downloads\ordnerruecken-vorlage-zb.xlsx
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\Documents\DVDVideoSoft
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\DVDVideoSoft
2014-01-16 00:03 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-01-16 00:03 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-01-16 00:03 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-01-16 00:03 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-01-16 00:02 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-16 00:02 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-01-16 00:02 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-16 00:02 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-01-16 00:02 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-01-16 00:02 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-01-16 00:02 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-01-16 00:02 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-01-16 00:02 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-01-16 00:02 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-01-16 00:02 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-01-16 00:02 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-01-16 00:02 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-01-16 00:02 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-01-16 00:02 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-01-16 00:02 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-01-16 00:02 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-01-16 00:02 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-01-16 00:02 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-01-16 00:02 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-01-16 00:02 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-01-16 00:02 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-01-16 00:02 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-01-16 00:02 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-01-16 00:02 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-01-16 00:02 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-01-16 00:02 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-01-16 00:02 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-01-16 00:02 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-01-16 00:02 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-01-16 00:02 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-01-16 00:02 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-01-16 00:02 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-01-16 00:02 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-16 00:01 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-16 00:01 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-01-16 00:01 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-01-16 00:01 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-01-16 00:01 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-01-16 00:01 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-01-16 00:00 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-01-16 00:00 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-01-16 00:00 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-01-16 00:00 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-01-16 00:00 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-01-16 00:00 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-01-16 00:00 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-01-16 00:00 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-01-16 00:00 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-01-16 00:00 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-01-14 21:59 - 2014-01-14 22:00 - 00009906 _____ () C:\Users\Alphatierchen\Desktop\cc_20140114_215953.reg
2014-01-14 21:17 - 2014-01-14 21:18 - 01236282 _____ () C:\Users\Alphatierchen\Downloads\adwcleaner.exe
2014-01-14 18:28 - 2014-01-14 18:28 - 00819144 _____ (Google Inc.) C:\Users\Alphatierchen\Downloads\chrome_installer_31.0.1650.63.exe
2014-01-14 18:12 - 2014-01-14 18:12 - 00283096 _____ (Mozilla) C:\Users\Alphatierchen\Downloads\Firefox Setup Stub 26.0.exe
2014-01-14 16:44 - 2014-02-06 18:54 - 00000000 ____D () C:\ProgramData\ThinkBuzan
2014-01-14 16:44 - 2014-02-06 18:54 - 00000000 ____D () C:\ProgramData\JSoft
2014-01-14 16:44 - 2014-01-15 08:01 - 00000000 ____D () C:\Users\Alphatierchen\.thinkbuzan
2014-01-14 16:44 - 2014-01-14 16:44 - 00002058 _____ () C:\Users\Public\Desktop\iMindMap 6.lnk
2014-01-14 16:44 - 2014-01-14 16:44 - 00000000 ____D () C:\Program Files (x86)\ThinkBuzan
2014-01-14 16:42 - 2014-01-14 16:44 - 132117192 _____ (ThinkBuzan) C:\Users\Alphatierchen\Desktop\imindmap6_windows_6-0-1.exe

==================== One Month Modified Files and Folders =======

2014-12-31 18:15 - 2014-12-31 18:15 - 00003311 _____ () C:\Users\Alphatierchen\Desktop\Gästeverwaltung 2010.lnk
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Gästeverwaltung Vorlagen
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gästeverwaltung 2010
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Program Files (x86)\Gästeverwaltung 2010
2014-12-31 18:07 - 2014-12-31 18:07 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Opera
2014-12-31 18:06 - 2014-12-31 18:06 - 00618048 _____ (www.download-sponsor.de) C:\Users\Alphatierchen\Downloads\GV2010Setup-Downloader.exe
2014-02-06 18:55 - 2014-02-04 12:23 - 00018884 _____ () C:\Users\Alphatierchen\Desktop\FRST.txt
2014-02-06 18:55 - 2014-02-04 12:23 - 00000000 ____D () C:\FRST
2014-02-06 18:54 - 2014-01-14 16:44 - 00000000 ____D () C:\ProgramData\ThinkBuzan
2014-02-06 18:54 - 2014-01-14 16:44 - 00000000 ____D () C:\ProgramData\JSoft
2014-02-06 18:53 - 2014-02-06 18:53 - 00000000 ____D () C:\Users\Alphatierchen\Desktop\FRST-OlderVersion
2014-02-06 18:53 - 2014-02-04 12:20 - 02082304 _____ (Farbar) C:\Users\Alphatierchen\Desktop\FRST64.exe
2014-02-06 18:48 - 2011-08-04 01:45 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-02-06 18:37 - 2011-02-19 05:24 - 10242958 _____ () C:\Windows\system32\perfh007.dat
2014-02-06 18:37 - 2011-02-19 05:24 - 03230352 _____ () C:\Windows\system32\perfc007.dat
2014-02-06 18:37 - 2009-07-14 06:13 - 00006756 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-06 18:36 - 2011-08-04 01:28 - 02004033 _____ () C:\Windows\WindowsUpdate.log
2014-02-06 18:04 - 2013-02-15 13:57 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\.minecraft
2014-02-06 14:35 - 2014-02-04 12:17 - 00001075 _____ () C:\Windows\setupact.log
2014-02-06 14:35 - 2011-08-17 08:21 - 00000000 ___HD () C:\ASUS.DAT
2014-02-06 12:49 - 2011-08-20 11:14 - 00000072 _____ () C:\Users\Public\LMDebug.log
2014-02-06 08:25 - 2012-09-09 23:50 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Abrechnungsfälle
2014-02-06 08:03 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-06 08:03 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-06 07:56 - 2011-08-04 01:35 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-06 07:56 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-05 21:30 - 2011-12-19 11:34 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Steuerfälle
2014-02-05 18:42 - 2011-12-19 11:29 - 00000000 ____D () C:\ProgramData\AAV
2014-02-05 10:48 - 2014-02-04 12:24 - 00025269 _____ () C:\Users\Alphatierchen\Desktop\Addition.txt
2014-02-05 10:42 - 2014-02-05 10:42 - 00006894 _____ () C:\Users\Alphatierchen\Desktop\JRT.txt
2014-02-05 10:34 - 2014-02-05 10:34 - 00000000 ____D () C:\Windows\ERUNT
2014-02-05 10:32 - 2014-02-05 10:32 - 01037530 _____ (Thisisu) C:\Users\Alphatierchen\Desktop\JRT.exe
2014-02-05 10:30 - 2011-08-04 01:52 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-02-05 10:29 - 2013-10-18 17:33 - 00000000 ____D () C:\AdwCleaner
2014-02-05 10:26 - 2013-02-24 13:58 - 00000000 ____D () C:\Users\Alphatierchen\Documents\WISO Mein Geld
2014-02-05 10:24 - 2014-02-05 10:24 - 01166132 _____ () C:\Users\Alphatierchen\Desktop\adwcleaner(1).exe
2014-02-05 10:23 - 2011-08-17 08:22 - 00000000 ___RD () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-04 22:37 - 2014-02-04 22:37 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Benutzerdefinierte Office-Vorlagen
2014-02-04 13:13 - 2014-02-04 13:13 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\VR-IK
2014-02-04 13:13 - 2014-02-04 13:12 - 07537009 _____ () C:\Users\Alphatierchen\Downloads\VR-IK_setup.exe
2014-02-04 12:17 - 2014-02-04 12:17 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-04 08:11 - 2014-02-04 08:11 - 00010954 _____ () C:\Users\Alphatierchen\Desktop\cc_20140204_081129.reg
2014-02-04 07:46 - 2011-08-04 01:51 - 00002690 _____ () C:\Windows\system32\AutoRunFilter.ini
2014-02-04 07:46 - 2011-08-04 01:51 - 00001571 _____ () C:\Windows\system32\ServiceFilter.ini
2014-02-03 22:31 - 2011-08-31 17:21 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\SoftGrid Client
2014-02-03 17:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-02-01 07:36 - 2011-08-28 02:58 - 00118984 _____ () C:\Users\Tabea und Leon\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-31 20:08 - 2014-01-31 20:08 - 00000708 _____ () C:\Users\Alphatierchen\Downloads\vCard.vcf
2014-01-31 20:01 - 2009-07-14 05:45 - 00449256 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-31 18:57 - 2011-08-17 08:21 - 00118984 _____ () C:\Users\Alphatierchen\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-31 18:07 - 2012-02-11 19:15 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-01-31 18:06 - 2011-08-17 22:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-31 18:06 - 2011-04-13 03:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-01-31 18:06 - 2009-07-14 08:45 - 00000000 ____D () C:\Windows\ShellNew
2014-01-31 18:05 - 2013-04-12 08:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-01-31 18:05 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2014-01-31 18:04 - 2011-08-31 17:21 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-01-31 18:02 - 2014-01-31 18:02 - 00000000 __RHD () C:\MSOCache
2014-01-31 17:33 - 2014-01-31 17:25 - 712716288 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x86_de-de.img
2014-01-31 15:51 - 2014-01-31 15:41 - 820998144 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x64_de-de.img
2014-01-31 15:40 - 2014-01-31 15:40 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\Akamai
2014-01-31 15:38 - 2014-01-31 15:38 - 10025728 _____ (Akamai Technologies, Inc.) C:\Users\Alphatierchen\Downloads\my_downloader_installer.exe
2014-01-31 13:20 - 2013-03-28 16:07 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\.minecraft
2014-01-31 13:18 - 2014-01-31 13:18 - 00675988 _____ () C:\Users\Alphatierchen\Downloads\Minecraft(2).exe
2014-01-27 17:28 - 2011-11-20 17:05 - 00000680 __RSH () C:\Users\Alphatierchen\ntuser.pol
2014-01-27 17:28 - 2011-08-17 08:21 - 00000000 ____D () C:\Users\Alphatierchen
2014-01-27 13:36 - 2011-11-20 17:05 - 00001346 __RSH () C:\Users\Tabea und Leon\ntuser.pol
2014-01-27 13:36 - 2011-08-28 02:57 - 00000000 ____D () C:\Users\Tabea und Leon
2014-01-27 09:10 - 2014-01-27 09:10 - 00662780 _____ () C:\Users\Alphatierchen\Downloads\ordnerruecken-vorlage-zb.xlsx
2014-01-27 09:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-01-27 09:02 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-01-22 18:07 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-20 19:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\Documents\DVDVideoSoft
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\DVDVideoSoft
2014-01-17 12:17 - 2012-05-30 15:31 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\SoftGrid Client
2014-01-16 13:16 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-01-15 08:01 - 2014-01-14 16:44 - 00000000 ____D () C:\Users\Alphatierchen\.thinkbuzan
2014-01-14 22:09 - 2011-08-04 01:50 - 00003232 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-01-14 22:08 - 2012-06-25 18:26 - 00003216 _____ () C:\Windows\System32\Tasks\{D196C910-F9D8-46DA-B3CC-C68741B25405}
2014-01-14 22:02 - 2011-08-17 08:28 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\Google
2014-01-14 22:00 - 2014-01-14 21:59 - 00009906 _____ () C:\Users\Alphatierchen\Desktop\cc_20140114_215953.reg
2014-01-14 21:18 - 2014-01-14 21:17 - 01236282 _____ () C:\Users\Alphatierchen\Downloads\adwcleaner.exe
2014-01-14 18:45 - 2011-04-13 03:33 - 00000000 ____D () C:\Program Files (x86)\Google
2014-01-14 18:28 - 2014-01-14 18:28 - 00819144 _____ (Google Inc.) C:\Users\Alphatierchen\Downloads\chrome_installer_31.0.1650.63.exe
2014-01-14 18:12 - 2014-01-14 18:12 - 00283096 _____ (Mozilla) C:\Users\Alphatierchen\Downloads\Firefox Setup Stub 26.0.exe
2014-01-14 16:44 - 2014-01-14 16:44 - 00002058 _____ () C:\Users\Public\Desktop\iMindMap 6.lnk
2014-01-14 16:44 - 2014-01-14 16:44 - 00000000 ____D () C:\Program Files (x86)\ThinkBuzan
2014-01-14 16:44 - 2014-01-14 16:42 - 132117192 _____ (ThinkBuzan) C:\Users\Alphatierchen\Desktop\imindmap6_windows_6-0-1.exe

Some content of TEMP:
====================
C:\Users\Alphatierchen\AppData\Local\Temp\BackupSetup.exe
C:\Users\Alphatierchen\AppData\Local\Temp\Quarantine.exe
C:\Users\Alphatierchen\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-05 15:56

==================== End Of Log ============================

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-02-2014
Ran by Alphatierchen at 2014-02-06 18:55:27
Running from C:\Users\Alphatierchen\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Trend Micro Titanium Internet Security (Disabled - Up to date) {68F968AC-2AA0-091D-848C-803E83E35902}
AS: Trend Micro Titanium Internet Security (Disabled - Up to date) {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
AAVUpdateManager (x32 Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Adobe Flash Player 10 ActiveX (x32 Version: 10.1.85.3 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.6.636 - Adobe Systems, Inc.)
Akamai NetSession Interface (HKCU Version:  - Akamai Technologies, Inc)
Astrocontact Astroplus (x32 Version:  - Astrocontact Software)
ASUS AI Recovery (x32 Version: 1.0.14 - ASUS)
ASUS FancyStart (x32 Version: 1.1.0 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (x32 Version: 3.0.22 - ASUS)
ASUS Power4Gear Hybrid (Version: 1.1.45 - ASUS)
ASUS SmartLogon (x32 Version: 1.0.0011 - ASUS)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0031 - ASUS)
ASUS USB Charger Plus (x32 Version: 2.0.0 - AsusTek Computer Inc.)
ASUS Virtual Camera (x32 Version: 1.0.21 - asus)
ASUS WebStorage (x32 Version: 3.0.84.161 - eCareme Technologies, Inc.)
ASUS_Screensaver (x32 Version:  - )
AsusVibe2.0 (x32 Version: 2.0.4.617 - ASUSTEK)
Atheros WLAN and Bluetooth Client Installation Program (x32 Version: 9.0 - Atheros)
ATK Package (x32 Version: 1.0.0010 - ASUS)
Bildschutz Pro (x32 Version: 2.0 - K-Lab Development)
Bluetooth Win7 Suite (64) (Version: 7.2.0.45 - Atheros Communications)
Bookworm Deluxe (x32 Version:  - Oberon Media Inc.)
Carambis Driver Updater (x32 Version: 2.0.0.6004 - MEDIA FOG LTD)
CCleaner (Version: 4.01 - Piriform)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Cooking Dash (x32 Version:  - Oberon Media Inc.)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.) Hidden
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (x32 Version: 10.0.2312.52 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.2312.52 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DHTML Editing Component (x32 Version: 6.02.0001 - Microsoft Corporation)
ETDWare PS/2-X64 8.0.5.1_WHQL (Version: 8.0.5.1 - ELAN Microelectronic Corp.)
Fast Boot (Version: 1.0.9 - ASUS)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Game Park Console (x32 Version: 6.2.1.1 - Oberon Media, Inc.)
Gästeverwaltung 2010 (x32 Version: 3.0.0 - Küchl Michael)
Gästeverwaltung 2011 (x32 Version: 3.1.0 - Küchl Michael)
ghsw.info Inventarverwaltung Free Edition 2.1.1 (x32 Version: 2.1.1.840 - Gert Heil)
Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Governor of Poker (x32 Version:  - Oberon Media Inc.)
Hausratverwaltung (x32 Version: 7.3.00 - VR-Software)
Hotel Dash Suite Success (x32 Version:  - Oberon Media Inc.)
iMindMap 6 (x32 Version: 6.0.288 - ThinkBuzan)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2345 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor 2.0 (Version: 2.1.23.0 - Intel)
IrfanView (remove only) (x32 Version: 4.32 - Irfan Skiljan)
Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (x32 Version: 2.1.1 - Oracle Corporation)
Jewel Quest 3 (x32 Version:  - Oberon Media Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kalucker (x32 Version:  - )
Klebezettel NG (Version 2.9.12) (x32 Version:  - )
Luxor 3 (x32 Version:  - Oberon Media Inc.)
Mahjongg dimensions (x32 Version:  - Oberon Media Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Access MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office 64-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Korrekturhilfen 2013 - Deutsch (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft OneNote MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319 - Microsoft Corporation)
Microsoft Word MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
NebenkostenAbrechnung (x32 Version: 1.02 - Wolters Kluwer Deutschland GmbH)
Nuance PDF Reader (x32 Version: 6.00.0041 - Nuance Communications, Inc.)
Nur Entfernen der CopyTrans Suite möglich (HKCU Version: 2.37 - WindSolutions)
NVIDIA 3D Vision Driver 268.39 (Version: 268.39 - NVIDIA Corporation)
NVIDIA Control Panel 268.39 (Version: 268.39 - NVIDIA Corporation) Hidden
NVIDIA Graphics Driver 268.39 (Version: 268.39 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.2.22.1 (Version: 1.2.22.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.265.41.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.0.21 (Version: 1.0.21 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6839 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 1.0.21 - NVIDIA Corporation) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Paintball2 Alpha build 37 (x32 Version: Alpha build 37 - Digital Paint)
PDFCreator (x32 Version: 1.7.0 - pdfforge)
Plants vs Zombies (x32 Version:  - Oberon Media Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (x32 Version: 7.41.216.2011 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6370 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Reader Driver (x32 Version: 6.1.7600.10008 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
Scribus 1.4.3 (x32 Version: 1.4.3 - The Scribus Team)
Sonic Focus (x32 Version: 1.0.0.4 - Synopsys )
Steuer-Spar-Erklärung 2012 (x32 Version: 17.13 - Wolters Kluwer Deutschland GmbH)
Steuer-Spar-Erklärung 2013 (x32 Version: 18.09 - Wolters Kluwer Deutschland GmbH)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
syncables desktop SE (x32 Version: 5.5.746.11492 - syncables)
Trend Micro Titanium Internet Security (Version: 3.0 - Trend Micro Inc.)
Trend Micro Titanium Internet Security (Version: 3.00 - Trend Micro Inc.) Hidden
Turbo Lister 2 (x32 Version: 2.00.0000 - eBay Inc.)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinFlash (x32 Version: 2.31.1 - ASUS)
Wireless Console 3 (x32 Version: 3.0.21 - ASUS)
WISO Mein Geld 2013 Professional (x32 Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2013 Professional (x32 Version: 15.0.0.1 - Buhl Data Service GmbH) Hidden
World of Goo (x32 Version:  - Oberon Media Inc.)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2 - Microsoft Corporation)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (x32 Version: 15.4.5722.2 - Microsoft Corporation)
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (x32 Version: 15.4.5722.2 - Microsoft Corporation)
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (x32 Version: 15.4.5722.2 - Microsoft Corporation)

==================== Restore Points  =========================

05-12-2013 18:59:25 Geplanter Prüfpunkt
10-12-2013 16:03:48 Installed Java 7 Update 45
29-12-2013 17:52:29 Geplanter Prüfpunkt
15-01-2014 23:02:36 Windows Update
24-01-2014 14:51:07 Geplanter Prüfpunkt
31-01-2014 17:01:50 Installed Microsoft Office Professional Plus 2013
31-01-2014 17:02:25 PROPLUSR

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {02E15D0A-C5F8-4883-A66C-ECF35080ADBD} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2011-05-11] (ASUSTek Computer Inc.)
Task: {2527ADE0-5F51-45D4-9FE8-BDAE1C0DBE4D} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS)
Task: {46D62CD3-E339-4C66-92EE-2F0979CD777B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {525A767E-CA64-4178-B449-78A54DCC76FF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-04-23] (Piriform Ltd)
Task: {607D9C13-1DC6-4013-B2D3-846F0B89DEDE} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17] (ASUS)
Task: {6E57D55C-4057-43E2-BF4D-551FD0788942} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {925BDC9A-0958-4ECB-B4CF-44B71E84EF04} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS)
Task: {C4688EB0-C95E-41CA-9467-F1F311E639B2} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {E8D94A81-439C-4E0D-9846-7B15A9A51B41} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2011-05-31] (ASUS)

==================== Loaded Modules (whitelisted) =============

2008-06-04 05:53 - 2008-06-04 05:53 - 00027648 _____ () C:\Windows\System32\sst3cl6.dll
2010-03-10 05:15 - 2010-03-10 05:15 - 00757760 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\sst3cdu.dll
2011-04-13 03:51 - 2010-09-17 09:52 - 00047104 _____ () C:\Program Files\Trend Micro\AMSP\boost_thread-vc80-mt-1_36.dll
2011-04-13 03:51 - 2010-09-17 09:52 - 00042496 _____ () C:\Program Files\Trend Micro\AMSP\boost_date_time-vc80-mt-1_36.dll
2010-07-15 00:11 - 2010-07-15 00:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
2010-04-03 03:21 - 2008-10-01 07:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2011-06-20 15:01 - 2011-03-26 08:29 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2009-11-02 22:20 - 2009-11-02 22:20 - 00619816 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 22:23 - 2009-11-02 22:23 - 00013096 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2011-06-10 18:49 - 2011-06-10 18:49 - 01163264 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll
2013-08-14 13:38 - 2013-08-14 13:38 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9ab0e818cb3d1b6930eba54179f89300\IsdiInterop.ni.dll
2011-08-04 01:31 - 2011-01-13 01:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2011-08-17 22:51 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2011-04-28 14:03 - 2011-04-28 14:03 - 00235112 _____ () C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
2011-08-16 17:38 - 2011-08-16 17:38 - 08451072 _____ () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\NebenkostenAbrechnung\QtGui4.dll
2011-08-16 17:32 - 2011-08-16 17:32 - 02349056 _____ () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\NebenkostenAbrechnung\QtCore4.dll
2011-08-16 17:42 - 2011-08-16 17:42 - 00280576 _____ () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\NebenkostenAbrechnung\QtSvg4.dll
2011-08-16 18:11 - 2011-08-16 18:11 - 11160576 _____ () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\NebenkostenAbrechnung\QtWebKit4.dll
2011-08-16 17:42 - 2011-08-16 17:42 - 00270336 _____ () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\NebenkostenAbrechnung\phonon4.dll
2011-08-16 17:33 - 2011-08-16 17:33 - 01004544 _____ () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\NebenkostenAbrechnung\QtNetwork4.dll
2011-08-16 17:32 - 2011-08-16 17:32 - 00358400 _____ () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\NebenkostenAbrechnung\QtXml4.dll
2010-06-02 05:35 - 2010-06-02 05:35 - 00233472 _____ () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\NebenkostenAbrechnung\plugins\imageformats\qmng4.dll
2013-09-15 07:49 - 2013-09-15 07:49 - 16177544 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Alphatierchen\Downloads\AW_Notarvertrag_v_12_04_2011-z_Hd_Herrn_Baldauf.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Danke_für_die_Information.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Grundbucheintrag.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Herzlichen_Dank.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Komplette_Räumung_des_Hauses_nach_aufgezeichneter_Liste.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\Notarvertrag_v_12_04_2011-z_Hd_Herrn_Baldauf.eml:OECustomProperty
AlternateDataStreams: C:\Users\Alphatierchen\Downloads\WG_Zählerstände.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ksupmgr => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ksupmgr => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/06/2014 06:37:37 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (02/06/2014 06:37:37 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (02/06/2014 06:37:37 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (02/06/2014 02:39:09 PM) (Source: Application Hang) (User: )
Description: Programm javaw.exe, Version 7.0.450.18 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 27fc

Startzeit: 01cf23406a301bbb

Endzeit: 60

Anwendungspfad: C:\Program Files\Java\jre7\bin\javaw.exe

Berichts-ID: 0cc83a13-8f34-11e3-923d-14dae9a0c891

Error: (02/06/2014 02:38:07 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (02/06/2014 02:38:07 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (02/06/2014 02:38:07 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (02/06/2014 00:40:47 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (02/06/2014 00:40:47 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (02/06/2014 00:40:47 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.


System errors:
=============
Error: (02/06/2014 06:36:34 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (02/06/2014 02:35:51 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (02/06/2014 00:39:40 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (02/06/2014 07:56:15 AM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (02/06/2014 07:56:08 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UAC-Dateivirtualisierung" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (02/05/2014 11:05:55 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (02/05/2014 07:25:33 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (02/05/2014 01:04:57 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (02/05/2014 00:36:21 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (02/05/2014 00:36:05 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================
Error: (02/06/2014 06:37:37 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (02/06/2014 06:37:37 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (02/06/2014 06:37:37 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (02/06/2014 02:39:09 PM) (Source: Application Hang)(User: )
Description: javaw.exe7.0.450.1827fc01cf23406a301bbb60C:\Program Files\Java\jre7\bin\javaw.exe0cc83a13-8f34-11e3-923d-14dae9a0c891

Error: (02/06/2014 02:38:07 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (02/06/2014 02:38:07 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (02/06/2014 02:38:07 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (02/06/2014 00:40:47 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (02/06/2014 00:40:47 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (02/06/2014 00:40:47 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000


CodeIntegrity Errors:
===================================
  Date: 2013-03-03 11:57:54.593
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-03-03 11:57:54.500
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 46%
Total physical RAM: 6052.97 MB
Available physical RAM: 3226.69 MB
Total Pagefile: 12104.13 MB
Available Pagefile: 8991.73 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:400.55 GB) (Free:319.49 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:505.96 GB) (Free:505.86 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 0CD9B3F5)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=401 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=506 GB) - (Type=OF Extended)

==================== End Of Log ============================

Bootsektor · 07.02.2014, 10:37

Hallo wwweib,

wie läuft dein Rechner jetzt?

Noch ein letzter kleiner Fix:

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

R2 getmac32; C:\Windows\system32\rpcnsh32.exe [117760 2013-07-08] 
C:\Windows\system32\rpcnsh32.exe

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3
Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 4
Starte noch einmal FRST.

Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

wwweib · 07.02.2014, 11:34

Moin Sandra,

Rechner läuft einwandfrei.

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-02-2014
Ran by Alphatierchen at 2014-02-07 11:04:39 Run:2
Running from C:\Users\Alphatierchen\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
R2 getmac32; C:\Windows\system32\rpcnsh32.exe [117760 2013-07-08] 
C:\Windows\system32\rpcnsh32.exe
*****************

getmac32 => Service deleted successfully.
C:\Windows\system32\rpcnsh32.exe => Moved successfully.


The system needs a manual reboot. 

==== End of Fixlog ====

Gleich poste ich das file von malewarbytes. Muss erst mal rebooten.

Hups!

Nach dem reboot hat firefox meine Startseite in die von google geändert.

Ich ändere sie mal wieder.

Code:

ATTFilter

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.07.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16721
Alphatierchen :: SABINELAPPI [Administrator]

07.02.2014 11:21:51
mbam-log-2014-02-07 (11-21-51).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 235636
Laufzeit: 4 Minute(n), 31 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

Zitat:

Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern

Dann mach ich das heut abend.

Danke!

wwweib · 07.02.2014, 11:51

Könntest du mir bitte noch sagen, was von diesen add-ons weg kann? Und vor allem, WIE? Ich hab mich da teilweise schon dran versucht.

wwweib · 10.02.2014, 08:01

Hallo Sandra,

hier das die log.txt von eset

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=df45728b6638b6489cbc92583502a6cc
# engine=17003
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-09 04:58:26
# local_time=2014-02-09 05:58:26 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 2275032 143594956 0 0
# scanned=217930
# found=4
# cleaned=0
# scan_time=13682
sh=C1917FAD828A3FE06FDFC4A079659A0D319AD762 ft=1 fh=843bc8e399b526fd vn="a variant of Win64/Agent.BR trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\GFilterSvc.exe.vir"
sh=C1917FAD828A3FE06FDFC4A079659A0D319AD762 ft=1 fh=843bc8e399b526fd vn="a variant of Win64/Agent.BR trojan" ac=I fn="C:\FRST\Quarantine\GFilterSvc0.exe06-02-2014_18-53-18"
sh=19E8E9026C8E9BA6DD63C8005FF563BA42258FC1 ft=1 fh=280332acdbfd44cf vn="a variant of Win64/Agent.BR trojan" ac=I fn="C:\FRST\Quarantine\rpcnsh32.exe07-02-2014_11-04-39"
sh=EBF4F58E044276783B3793EFD4A1143052AB32DA ft=0 fh=0000000000000000 vn="Java/Exploit.CVE-2012-1723.C trojan" ac=I fn="C:\Users\Alphatierchen\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\77a774dc-498747f2"

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-02-2014 02
Ran by Alphatierchen (administrator) on SABINELAPPI on 09-02-2014 18:45:21
Running from C:\Users\Alphatierchen\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool 
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums

==================== Processes (Whitelisted) =================

(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Akamai Technologies, Inc.) C:\Users\Alphatierchen\AppData\Local\Akamai\netsession_win.exe
() C:\Users\Alphatierchen\.thinkbuzan\imindmap6\preload\iMindMap6_Preloader.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Windows\AsScrPro.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Akamai Technologies, Inc.) C:\Users\Alphatierchen\AppData\Local\Akamai\netsession_win.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [VizorHtmlDialog.exe] - C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [1123664 2010-10-08] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [192520 2010-10-12] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [322384 2010-09-17] (Trend Micro Inc.)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2213992 2011-05-12] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe [613536 2010-11-26] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe [379040 2010-11-26] (Atheros Commnucations)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-31] (ELAN Microelectronics Corp.)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] ()
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] - C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-13] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS)
HKLM-x32\...\Run: [USBChargerPlusTray] - C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [496560 2011-04-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-03] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2010-11-12] (cyberlink)
HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Run: [Akamai NetSession Interface] - C:\Users\Alphatierchen\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\Policies\Explorer: [RestrictRun] 0
HKU\S-1-5-21-1845154852-3688582821-2253681952-1001\...\MountPoints2: {f6db59c9-50e8-11e3-8bc2-14dae9a0c891} - F:\HTC_Sync_Manager_PC.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2011-04-28] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [193128 2011-04-28] (NVIDIA Corporation)
Startup: C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iMindMap6 Preloader.lnk
ShortcutTarget: iMindMap6 Preloader.lnk -> C:\Users\Alphatierchen\.thinkbuzan\imindmap6\preload\iMindMap6_Preloader.exe ()

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKLM - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default
FF user.js: detected! => C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\user.js
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de?hl=de&gl=de
FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=UTF-8&oe=UTF-8&meta=lr=lang_de&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\searchplugins\google-language-de.xml
FF SearchPlugin: C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\searchplugins\google-ssl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\2020Player_IKEA@2020Technologies.com [2012-01-21]
FF Extension: Ghostery - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\firefox@ghostery.com.xpi [2014-01-14]
FF Extension: Adblock Plus - C:\Users\Alphatierchen\AppData\Roaming\Mozilla\Firefox\Profiles\tykdm8np.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-08-17]
FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\
FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ []

==================== Services (Whitelisted) =================

S4 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe [151552 2010-05-24] (Atheros)
R2 AtherosSvc; C:\Program Files (x86)\Atheros\Bluetooth Suite\adminservice.exe [52896 2010-11-26] (Atheros Commnucations)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2010-11-12] (CyberLink)
R2 TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [241488 2010-09-17] (Trend Micro Inc.)
S3 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [X]

==================== Drivers (Whitelisted) ====================

R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-08-15] (GFI Software)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [90704 2010-09-17] (Trend Micro Inc.)
R2 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [144464 2010-09-17] (Trend Micro Inc.)
R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [67664 2010-09-17] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105552 2010-09-17] (Trend Micro Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-12-31 18:58 - 2013-07-09 20:51 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\_
2014-12-31 18:15 - 2014-12-31 18:15 - 00003311 _____ () C:\Users\Alphatierchen\Desktop\Gästeverwaltung 2010.lnk
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Gästeverwaltung Vorlagen
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gästeverwaltung 2010
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Program Files (x86)\Gästeverwaltung 2010
2014-12-31 18:07 - 2014-12-31 18:07 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Opera
2014-12-31 18:07 - 2011-05-13 14:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-12-31 18:07 - 2011-03-25 22:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-12-31 18:06 - 2014-12-31 18:06 - 00618048 _____ (Download-Sponsor.de - Verdienen Sie mehr Geld mit Ihrer Software!) C:\Users\Alphatierchen\Downloads\GV2010Setup-Downloader.exe
2014-02-09 14:07 - 2014-02-09 14:07 - 02347384 _____ (ESET) C:\Users\Alphatierchen\Desktop\esetsmartinstaller_enu.exe
2014-02-09 14:06 - 2014-02-09 14:06 - 02347384 _____ (ESET) C:\Users\Alphatierchen\Downloads\esetsmartinstaller_enu.exe
2014-02-06 18:53 - 2014-02-09 18:45 - 00000000 ____D () C:\Users\Alphatierchen\Desktop\FRST-OlderVersion
2014-02-05 10:42 - 2014-02-05 10:42 - 00006894 _____ () C:\Users\Alphatierchen\Desktop\JRT.txt
2014-02-05 10:34 - 2014-02-05 10:34 - 00000000 ____D () C:\Windows\ERUNT
2014-02-05 10:32 - 2014-02-05 10:32 - 01037530 _____ (Thisisu) C:\Users\Alphatierchen\Desktop\JRT.exe
2014-02-05 10:24 - 2014-02-05 10:24 - 01166132 _____ () C:\Users\Alphatierchen\Desktop\adwcleaner(1).exe
2014-02-04 22:37 - 2014-02-04 22:37 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Benutzerdefinierte Office-Vorlagen
2014-02-04 13:13 - 2014-02-04 13:13 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\VR-IK
2014-02-04 13:12 - 2014-02-04 13:13 - 07537009 _____ () C:\Users\Alphatierchen\Downloads\VR-IK_setup.exe
2014-02-04 12:24 - 2014-02-06 18:55 - 00034149 _____ () C:\Users\Alphatierchen\Desktop\Addition.txt
2014-02-04 12:23 - 2014-02-09 18:45 - 00011675 _____ () C:\Users\Alphatierchen\Desktop\FRST.txt
2014-02-04 12:23 - 2014-02-09 18:45 - 00000000 ____D () C:\FRST
2014-02-04 12:20 - 2014-02-09 18:45 - 02170880 _____ (Farbar) C:\Users\Alphatierchen\Desktop\FRST64.exe
2014-02-04 12:17 - 2014-02-09 09:02 - 00001579 _____ () C:\Windows\setupact.log
2014-02-04 12:17 - 2014-02-04 12:17 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-04 08:11 - 2014-02-04 08:11 - 00010954 _____ () C:\Users\Alphatierchen\Desktop\cc_20140204_081129.reg
2014-02-03 17:06 - 2012-07-25 12:03 - 00016896 _____ () C:\Windows\system32\sasnative64.exe
2014-01-31 20:08 - 2014-01-31 20:08 - 00000708 _____ () C:\Users\Alphatierchen\Downloads\vCard.vcf
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-01-31 18:02 - 2014-01-31 18:02 - 00000000 __RHD () C:\MSOCache
2014-01-31 17:25 - 2014-01-31 17:33 - 712716288 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x86_de-de.img
2014-01-31 15:41 - 2014-01-31 15:51 - 820998144 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x64_de-de.img
2014-01-31 15:40 - 2014-01-31 15:40 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\Akamai
2014-01-31 15:38 - 2014-01-31 15:38 - 10025728 _____ (Akamai Technologies, Inc.) C:\Users\Alphatierchen\Downloads\my_downloader_installer.exe
2014-01-31 13:18 - 2014-01-31 13:18 - 00675988 _____ () C:\Users\Alphatierchen\Downloads\Minecraft(2).exe
2014-01-27 09:10 - 2014-01-27 09:10 - 00662780 _____ () C:\Users\Alphatierchen\Downloads\ordnerruecken-vorlage-zb.xlsx
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\Documents\DVDVideoSoft
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\DVDVideoSoft
2014-01-16 00:03 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-01-16 00:03 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-01-16 00:03 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-01-16 00:03 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-01-16 00:02 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-16 00:02 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-01-16 00:02 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-16 00:02 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-01-16 00:02 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-01-16 00:02 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-01-16 00:02 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-01-16 00:02 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-01-16 00:02 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-01-16 00:02 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-01-16 00:02 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-01-16 00:02 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-01-16 00:02 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-01-16 00:02 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-01-16 00:02 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-01-16 00:02 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-01-16 00:02 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-01-16 00:02 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-01-16 00:02 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-01-16 00:02 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-01-16 00:02 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-01-16 00:02 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-01-16 00:02 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-01-16 00:02 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-01-16 00:02 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-01-16 00:02 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-01-16 00:02 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-01-16 00:02 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-01-16 00:02 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-01-16 00:02 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-01-16 00:02 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-01-16 00:02 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-01-16 00:02 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-01-16 00:02 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-16 00:01 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-16 00:01 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-16 00:01 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-01-16 00:01 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-01-16 00:01 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-01-16 00:01 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-01-16 00:01 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-01-16 00:00 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-01-16 00:00 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-01-16 00:00 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-01-16 00:00 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-01-16 00:00 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-01-16 00:00 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-01-16 00:00 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-01-16 00:00 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-01-16 00:00 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-01-16 00:00 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-01-14 21:59 - 2014-01-14 22:00 - 00009906 _____ () C:\Users\Alphatierchen\Desktop\cc_20140114_215953.reg
2014-01-14 21:17 - 2014-01-14 21:18 - 01236282 _____ () C:\Users\Alphatierchen\Downloads\adwcleaner.exe
2014-01-14 18:28 - 2014-01-14 18:28 - 00819144 _____ (Google Inc.) C:\Users\Alphatierchen\Downloads\chrome_installer_31.0.1650.63.exe
2014-01-14 18:12 - 2014-01-14 18:12 - 00283096 _____ (Mozilla) C:\Users\Alphatierchen\Downloads\Firefox Setup Stub 26.0.exe
2014-01-14 16:44 - 2014-02-09 18:45 - 00000000 ____D () C:\ProgramData\ThinkBuzan
2014-01-14 16:44 - 2014-02-09 18:45 - 00000000 ____D () C:\ProgramData\JSoft
2014-01-14 16:44 - 2014-01-15 08:01 - 00000000 ____D () C:\Users\Alphatierchen\.thinkbuzan
2014-01-14 16:44 - 2014-01-14 16:44 - 00002058 _____ () C:\Users\Public\Desktop\iMindMap 6.lnk
2014-01-14 16:44 - 2014-01-14 16:44 - 00000000 ____D () C:\Program Files (x86)\ThinkBuzan
2014-01-14 16:42 - 2014-01-14 16:44 - 132117192 _____ (ThinkBuzan) C:\Users\Alphatierchen\Desktop\imindmap6_windows_6-0-1.exe

==================== One Month Modified Files and Folders =======

2014-12-31 18:15 - 2014-12-31 18:15 - 00003311 _____ () C:\Users\Alphatierchen\Desktop\Gästeverwaltung 2010.lnk
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Gästeverwaltung Vorlagen
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gästeverwaltung 2010
2014-12-31 18:15 - 2014-12-31 18:15 - 00000000 ____D () C:\Program Files (x86)\Gästeverwaltung 2010
2014-12-31 18:07 - 2014-12-31 18:07 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\Opera
2014-12-31 18:06 - 2014-12-31 18:06 - 00618048 _____ (Download-Sponsor.de - Verdienen Sie mehr Geld mit Ihrer Software!) C:\Users\Alphatierchen\Downloads\GV2010Setup-Downloader.exe
2014-02-09 18:45 - 2014-02-06 18:53 - 00000000 ____D () C:\Users\Alphatierchen\Desktop\FRST-OlderVersion
2014-02-09 18:45 - 2014-02-04 12:23 - 00011675 _____ () C:\Users\Alphatierchen\Desktop\FRST.txt
2014-02-09 18:45 - 2014-02-04 12:23 - 00000000 ____D () C:\FRST
2014-02-09 18:45 - 2014-02-04 12:20 - 02170880 _____ (Farbar) C:\Users\Alphatierchen\Desktop\FRST64.exe
2014-02-09 18:45 - 2014-01-14 16:44 - 00000000 ____D () C:\ProgramData\ThinkBuzan
2014-02-09 18:45 - 2014-01-14 16:44 - 00000000 ____D () C:\ProgramData\JSoft
2014-02-09 18:41 - 2011-08-04 01:45 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-02-09 17:13 - 2011-02-19 05:24 - 10407650 _____ () C:\Windows\system32\perfh007.dat
2014-02-09 17:13 - 2011-02-19 05:24 - 03284428 _____ () C:\Windows\system32\perfc007.dat
2014-02-09 17:13 - 2009-07-14 06:13 - 00006756 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-09 17:09 - 2011-08-04 01:28 - 02031430 _____ () C:\Windows\WindowsUpdate.log
2014-02-09 16:51 - 2013-02-15 13:57 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\.minecraft
2014-02-09 16:49 - 2011-08-17 08:21 - 00000000 ___HD () C:\ASUS.DAT
2014-02-09 14:07 - 2014-02-09 14:07 - 02347384 _____ (ESET) C:\Users\Alphatierchen\Desktop\esetsmartinstaller_enu.exe
2014-02-09 14:06 - 2014-02-09 14:06 - 02347384 _____ (ESET) C:\Users\Alphatierchen\Downloads\esetsmartinstaller_enu.exe
2014-02-09 09:10 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-09 09:10 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-09 09:02 - 2014-02-04 12:17 - 00001579 _____ () C:\Windows\setupact.log
2014-02-09 09:02 - 2011-08-04 01:35 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-09 09:02 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-08 07:27 - 2011-08-20 11:14 - 00000072 _____ () C:\Users\Public\LMDebug.log
2014-02-07 11:12 - 2011-08-04 01:52 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-02-06 19:58 - 2013-02-24 13:58 - 00000000 ____D () C:\Users\Alphatierchen\Documents\WISO Mein Geld
2014-02-06 18:55 - 2014-02-04 12:24 - 00034149 _____ () C:\Users\Alphatierchen\Desktop\Addition.txt
2014-02-06 08:25 - 2012-09-09 23:50 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Abrechnungsfälle
2014-02-05 21:30 - 2011-12-19 11:34 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Steuerfälle
2014-02-05 18:42 - 2011-12-19 11:29 - 00000000 ____D () C:\ProgramData\AAV
2014-02-05 10:42 - 2014-02-05 10:42 - 00006894 _____ () C:\Users\Alphatierchen\Desktop\JRT.txt
2014-02-05 10:34 - 2014-02-05 10:34 - 00000000 ____D () C:\Windows\ERUNT
2014-02-05 10:32 - 2014-02-05 10:32 - 01037530 _____ (Thisisu) C:\Users\Alphatierchen\Desktop\JRT.exe
2014-02-05 10:29 - 2013-10-18 17:33 - 00000000 ____D () C:\AdwCleaner
2014-02-05 10:24 - 2014-02-05 10:24 - 01166132 _____ () C:\Users\Alphatierchen\Desktop\adwcleaner(1).exe
2014-02-05 10:23 - 2011-08-17 08:22 - 00000000 ___RD () C:\Users\Alphatierchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-04 22:37 - 2014-02-04 22:37 - 00000000 ____D () C:\Users\Alphatierchen\Documents\Benutzerdefinierte Office-Vorlagen
2014-02-04 13:13 - 2014-02-04 13:13 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\VR-IK
2014-02-04 13:13 - 2014-02-04 13:12 - 07537009 _____ () C:\Users\Alphatierchen\Downloads\VR-IK_setup.exe
2014-02-04 12:17 - 2014-02-04 12:17 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-04 08:11 - 2014-02-04 08:11 - 00010954 _____ () C:\Users\Alphatierchen\Desktop\cc_20140204_081129.reg
2014-02-04 07:46 - 2011-08-04 01:51 - 00002690 _____ () C:\Windows\system32\AutoRunFilter.ini
2014-02-04 07:46 - 2011-08-04 01:51 - 00001571 _____ () C:\Windows\system32\ServiceFilter.ini
2014-02-03 22:31 - 2011-08-31 17:21 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\SoftGrid Client
2014-02-03 17:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-02-01 07:36 - 2011-08-28 02:58 - 00118984 _____ () C:\Users\Tabea und Leon\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-31 20:08 - 2014-01-31 20:08 - 00000708 _____ () C:\Users\Alphatierchen\Downloads\vCard.vcf
2014-01-31 20:01 - 2009-07-14 05:45 - 00449256 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-31 18:57 - 2011-08-17 08:21 - 00118984 _____ () C:\Users\Alphatierchen\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-31 18:07 - 2012-02-11 19:15 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-01-31 18:06 - 2011-08-17 22:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-31 18:06 - 2011-04-13 03:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-01-31 18:06 - 2009-07-14 08:45 - 00000000 ____D () C:\Windows\ShellNew
2014-01-31 18:05 - 2013-04-12 08:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-01-31 18:05 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2014-01-31 18:04 - 2011-08-31 17:21 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-01-31 18:02 - 2014-01-31 18:02 - 00000000 __RHD () C:\MSOCache
2014-01-31 17:33 - 2014-01-31 17:25 - 712716288 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x86_de-de.img
2014-01-31 15:51 - 2014-01-31 15:41 - 820998144 _____ () C:\Users\Alphatierchen\Desktop\OfficeProfessionalPlus_x64_de-de.img
2014-01-31 15:40 - 2014-01-31 15:40 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\Akamai
2014-01-31 15:38 - 2014-01-31 15:38 - 10025728 _____ (Akamai Technologies, Inc.) C:\Users\Alphatierchen\Downloads\my_downloader_installer.exe
2014-01-31 13:20 - 2013-03-28 16:07 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Roaming\.minecraft
2014-01-31 13:18 - 2014-01-31 13:18 - 00675988 _____ () C:\Users\Alphatierchen\Downloads\Minecraft(2).exe
2014-01-27 17:28 - 2011-11-20 17:05 - 00000680 __RSH () C:\Users\Alphatierchen\ntuser.pol
2014-01-27 17:28 - 2011-08-17 08:21 - 00000000 ____D () C:\Users\Alphatierchen
2014-01-27 13:36 - 2011-11-20 17:05 - 00001346 __RSH () C:\Users\Tabea und Leon\ntuser.pol
2014-01-27 13:36 - 2011-08-28 02:57 - 00000000 ____D () C:\Users\Tabea und Leon
2014-01-27 09:10 - 2014-01-27 09:10 - 00662780 _____ () C:\Users\Alphatierchen\Downloads\ordnerruecken-vorlage-zb.xlsx
2014-01-27 09:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-01-27 09:02 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-01-22 18:07 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-20 19:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\Documents\DVDVideoSoft
2014-01-18 07:52 - 2014-01-18 07:52 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\DVDVideoSoft
2014-01-17 12:17 - 2012-05-30 15:31 - 00000000 ____D () C:\Users\Tabea und Leon\AppData\Roaming\SoftGrid Client
2014-01-16 13:16 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-01-15 08:01 - 2014-01-14 16:44 - 00000000 ____D () C:\Users\Alphatierchen\.thinkbuzan
2014-01-14 22:09 - 2011-08-04 01:50 - 00003232 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-01-14 22:08 - 2012-06-25 18:26 - 00003216 _____ () C:\Windows\System32\Tasks\{D196C910-F9D8-46DA-B3CC-C68741B25405}
2014-01-14 22:02 - 2011-08-17 08:28 - 00000000 ____D () C:\Users\Alphatierchen\AppData\Local\Google
2014-01-14 22:00 - 2014-01-14 21:59 - 00009906 _____ () C:\Users\Alphatierchen\Desktop\cc_20140114_215953.reg
2014-01-14 21:18 - 2014-01-14 21:17 - 01236282 _____ () C:\Users\Alphatierchen\Downloads\adwcleaner.exe
2014-01-14 18:45 - 2011-04-13 03:33 - 00000000 ____D () C:\Program Files (x86)\Google
2014-01-14 18:28 - 2014-01-14 18:28 - 00819144 _____ (Google Inc.) C:\Users\Alphatierchen\Downloads\chrome_installer_31.0.1650.63.exe
2014-01-14 18:12 - 2014-01-14 18:12 - 00283096 _____ (Mozilla) C:\Users\Alphatierchen\Downloads\Firefox Setup Stub 26.0.exe
2014-01-14 16:44 - 2014-01-14 16:44 - 00002058 _____ () C:\Users\Public\Desktop\iMindMap 6.lnk
2014-01-14 16:44 - 2014-01-14 16:44 - 00000000 ____D () C:\Program Files (x86)\ThinkBuzan
2014-01-14 16:44 - 2014-01-14 16:42 - 132117192 _____ (ThinkBuzan) C:\Users\Alphatierchen\Desktop\imindmap6_windows_6-0-1.exe

Some content of TEMP:
====================
C:\Users\Alphatierchen\AppData\Local\Temp\BackupSetup.exe
C:\Users\Alphatierchen\AppData\Local\Temp\Quarantine.exe
C:\Users\Alphatierchen\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-05 15:56

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Ich habe jetzt das Problem, dass sich google als Startseite aufmacht.

Ich geh's mal ändern.

Guten Morgen,

hab gestern Startseite geändert und heute wieder: g o o g l e

Finde den Fehler nicht... woran kann das liegen?

Bootsektor · 10.02.2014, 10:29

In welchem Browser passiert das?

wwweib · 10.02.2014, 14:52

Firefox

Hatte es vorhin über Firefox Einstellungen geändert. Nun ist's wieder google. Ich hatte es auch schon über den Befehl 'about:config' geändert. Seltsam... nach jedem Herunterfahren hab ich google als Startseite.

Hast du eine Idee?

04.02.2014, 09:30	#4
Bootsektor Ruhe in Frieden † 2019	advanced system protector hat sich eingenistet Ok. __________________ Grüße stolzes Mitglied von UNITE Du hast Lob oder Verbesserungsvorschläge? Du findest unsere Arbeit gut und möchtest uns finanziell unterstützen? -> Spende

10.02.2014, 10:29	#14
Bootsektor Ruhe in Frieden † 2019	advanced system protector hat sich eingenistet In welchem Browser passiert das? __________________ Grüße stolzes Mitglied von UNITE Du hast Lob oder Verbesserungsvorschläge? Du findest unsere Arbeit gut und möchtest uns finanziell unterstützen? -> Spende

advanced system protector hat sich eingenistet

Plagegeister aller Art und deren Bekämpfung: advanced system protector hat sich eingenistet