PC läuft sehr langsam, ständige Verzögerung

schnüffel · 18.05.2014, 18:27

Hallo Zusammen

Ich wäre sehr froh um Hilfe. Mein PC läuft sehr langsam und es hat überall Werbung...
Vielen Dank im Voraus!

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Sabrina (administrator) on SABRINA-THINK on 18-05-2014 19:25:24
Running from C:\Users\Sabrina\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(UPEK Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Swisscom) C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe
(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe
(Swisscom) C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Avanquest Software ) C:\Program Files (x86)\Digital Line Detect\DLG.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Dropbox, Inc.) C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Swisscom) C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ZOOM\TpScrex.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\System Update\SUService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe
() C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2789160 2011-05-19] (Synaptics Incorporated)
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [380776 2010-12-09] (Lenovo.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2011-03-14] (Conexant systems, Inc.)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [40808 2011-05-31] (Lenovo Group Limited)
HKLM\...\Run: [ALCKRESI.EXE] => C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE [281960 2011-05-26] (Lenovo Group Limited)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-31] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [112152 2011-01-17] (Intel Corporation)
HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-14] (Lenovo, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Samsung PanelMgr] => C:\Windows\Samsung\PanelMgr\ssmmgr.exe [606208 2009-10-13] ()
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)
HKLM-x32\...\Run: [Swisscom Quick Help] => C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe [16668080 2013-10-02] (Swisscom)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (UPEK Inc.)
HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [LTT] => C:\Program Files\PC-Doctor\EnableToolbarW32.exe [23120 2011-06-27] (PC-Doctor, Inc.)
HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [AppSafe] => C:\Program Files (x86)\AppSafe\AppSafe.exe
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs: ,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: ,C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk
ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files (x86)\Digital Line Detect\DLG.exe (Avanquest Software )
Startup: C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

ProxyServer: proxy.lfrz.at:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
URLSearchHook: HKLM-x32 - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}
URLSearchHook: HKLM-x32 - SimilarWeb - {74198672-5F7D-4FE9-A611-4AC1D5A66A15} - C:\Program Files (x86)\SimilarWeb\SimilarWeb.dll (SimilarGroup)
URLSearchHook: HKCU - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}
URLSearchHook: HKCU - SimilarWeb - {74198672-5F7D-4FE9-A611-4AC1D5A66A15} - C:\Program Files (x86)\SimilarWeb\SimilarWeb.dll (SimilarGroup)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_deCH472
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_deCH472
BHO: YoutubeAdblocker - {159BC49F-2CD6-4CB7-932B-1027665E58BD} - C:\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll No File
BHO: CaheoapMee - {4006E1A8-DBC1-85C2-AB05-C358A67FAC60} - C:\ProgramData\CaheoapMee\NwfY2HOswh.x64.dll ()
BHO: greaotssaVer - {4F72390C-3192-91EF-ECD9-D90061D298A2} - C:\Program Files (x86)\greaotssaVer\2ZKW9c.x64.dll No File
BHO: SNT - {847493A0-9B57-E1D5-FE2C-CC1B12BC46CB} - C:\Program Files (x86)\SNT\p7T2DTlA.x64.dll No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)
BHO-x32: Octh Class - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
BHO-x32: CaheoapMee - {4006E1A8-DBC1-85C2-AB05-C358A67FAC60} - C:\ProgramData\CaheoapMee\NwfY2HOswh.dll ()
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - SimilarWeb - {74198672-5F7D-4FE9-A611-4AC1D5A66A15} - C:\Program Files (x86)\SimilarWeb\SimilarWeb.dll (SimilarGroup)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{D5A2C57D-7554-4054-AE53-57D7A4D0B831}: [NameServer]195.186.216.33 195.186.152.33

FireFox:
========
FF ProfilePath: C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default
FF Homepage: https://www.google.ch/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ExxsTiRaCooupon - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\ooeu24m3d@pkpojf.org [2014-05-16]
FF Extension: Swisscom Quick Help - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\{6A6114A5-EEF5-45F4-BCD1-B00A7B33E04B} [2014-01-13]
FF Extension: Firebug - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\firebug@software.joehewitt.com.xpi [2013-02-17]
FF HKLM-x32\...\Firefox\Extensions: [VIP@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client\
FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\ []
FF HKLM-x32\...\Firefox\Extensions: [{E4D8AFFF-DA7C-412F-A976-05ED142C7806}] - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\
FF Extension: Unlimited Data Manager - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Extension: (YTBBookMark) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\amabcieebhjofcnbdphdmfkfcdgfilgk [2014-01-04]
CHR Extension: (YouTube) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-02-25]
CHR Extension: (goreatsoAvver) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij [2014-01-04]
CHR Extension: (Google Search) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-02-25]
CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpicgdnjfnbkibnicdnnpkkpklkjkki [2013-04-12]
CHR Extension: (Speedy Shopper) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ganlifbpkcplnldliibcbegplfmcfigp [2014-01-04]
CHR Extension: (SNT) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcgmnfaeohlofnjigiimjlbjleaomlei [2014-01-04]
CHR Extension: (ExxsTiRaCooupon) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcjmphdcljedddkheginnckbjccchepe [2014-05-16]
CHR Extension: (YoutubeAdblocker) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba [2014-01-04]
CHR Extension: (Norton Identity Protection) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2012-02-25]
CHR Extension: (Gmail) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-02-25]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-01-15]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S2 1a34a8e0; C:\Program Files (x86)\GSSvc.dll [146768 2014-01-04] ()
S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [478056 2011-08-31] (Lenovo.)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2513752 2014-03-04] ()
R2 SesamService; C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe [1482240 2011-05-16] (Swisscom)
R2 SwiCardDetectSvc; C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe [307568 2010-09-22] (Sierra Wireless, Inc.)
R2 UDM Service; C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe [182128 2011-05-20] (Swisscom)
R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [82544 2011-06-30] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-25] (Samsung Electronics Co., Ltd.)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2011-02-18] (Huawei Technologies Co., Ltd.)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [301512 2014-03-04] (NVIDIA Corporation)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13840 2009-03-13] (UPEK Inc.)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [41536 2009-09-24] (Lenovo (United States) Inc.)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
R3 WtSmpAdap; C:\Windows\System32\DRIVERS\wtsmpadap.sys [56688 2011-04-11] (Swisscom)
R1 WtSmpFlt; C:\Windows\System32\DRIVERS\wtsmpflt.sys [409456 2011-04-11] (Swisscom)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 vpnva; system32\DRIVERS\vpnva64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-18 19:20 - 2014-05-18 19:25 - 00023637 _____ () C:\Users\Sabrina\Desktop\FRST.txt
2014-05-16 23:40 - 2014-05-16 23:41 - 00000000 ____D () C:\ProgramData\CaheoapMee
2014-05-16 23:17 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-16 23:17 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-16 23:17 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-16 23:17 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-16 23:17 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-16 23:17 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-13 21:16 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-13 21:16 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-13 21:16 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-13 21:16 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-13 21:15 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-13 21:15 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-13 21:15 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-13 21:15 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-13 21:15 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-13 21:15 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-13 21:15 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-13 21:15 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-13 21:15 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-13 21:15 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-13 21:15 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-13 21:15 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-13 21:15 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-13 21:15 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-13 21:15 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-13 21:15 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-07 20:02 - 2014-05-07 20:03 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe
2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd
2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe
2014-05-05 08:03 - 2014-05-05 08:03 - 00641568 _____ () C:\Users\Sabrina\Downloads\download-adobe-type-manager.exe
2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe
2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe
2014-05-05 07:40 - 2014-05-05 08:07 - 00000000 ____D () C:\Program Files (x86)\CrossFnt
2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe
2014-05-05 07:32 - 2014-05-05 07:32 - 00050473 ____R () C:\Users\Sabrina\Desktop\schriften.zipx
2014-05-04 22:15 - 2014-05-05 08:13 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit
2014-05-04 22:15 - 2014-05-04 22:15 - 00001066 _____ () C:\Users\Sabrina\Desktop\Orbit.lnk
2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense
2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Orbit
2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Program Files (x86)\Orbitdownloader
2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe
2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-04 21:41 - 2014-05-13 00:13 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job
2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe
2014-05-04 21:39 - 2014-05-18 18:40 - 00000300 _____ () C:\Windows\Tasks\AppCloudUpdater.job
2014-05-04 21:39 - 2014-05-04 21:39 - 00003254 _____ () C:\Windows\System32\Tasks\AppCloudUpdater
2014-05-04 21:39 - 2014-05-04 21:39 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\AppCloudUpdater
2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml
2014-05-04 21:34 - 2012-05-15 07:13 - 00144896 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2014-05-04 21:34 - 2012-05-15 06:20 - 00104448 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\system32\NV
2014-05-04 21:28 - 2014-05-04 21:31 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe
2014-05-04 21:25 - 2014-03-04 20:35 - 02513752 _____ () C:\Windows\system32\nvwmi64.exe
2014-05-04 21:25 - 2014-03-04 20:35 - 00004084 _____ () C:\Windows\system32\nvPerfProvider.man
2014-05-04 21:25 - 2014-03-04 18:17 - 00595232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA
2014-05-04 21:23 - 2014-03-04 20:35 - 30389192 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 25257816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 22973896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 18312672 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 18225104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 15879264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 15232424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 12672288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-05-04 21:23 - 2014-03-04 20:35 - 11638736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 11587736 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 09731624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 09688888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 03131848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 03123544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 02936152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 02752856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 01883480 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433276.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433276.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 01249080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00888776 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00880984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00860104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00850888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00301512 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvkflt.sys
2014-05-04 21:23 - 2014-03-04 20:35 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00031576 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-05-04 21:18 - 2014-05-04 21:22 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe
2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf
2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)
2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)
2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)
2014-05-04 20:04 - 2014-05-04 20:05 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf
2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp
2014-05-04 19:45 - 2014-05-04 19:45 - 00323712 _____ (MiniApp) C:\Users\Sabrina\Downloads\Utopia Regular.exe
2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf
2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip
2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\WinZip
2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\Program Files\WinZip
2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi
2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx
2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor
2014-05-04 18:26 - 2014-05-04 21:08 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-05-04 18:26 - 2014-05-04 18:29 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI
2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe
2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe
2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files
2014-05-04 18:13 - 2014-05-04 18:14 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi
2014-05-04 18:08 - 2014-05-04 18:09 - 00000020 _____ () C:\Windows\ø÷Í
2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸
2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe
2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener
2014-05-04 17:02 - 2014-05-04 17:07 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe
2014-05-04 16:44 - 2014-05-17 00:24 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-04 16:44 - 2014-05-04 16:46 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe
2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster
2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe
2014-05-03 08:33 - 2012-09-18 15:27 - 00501760 _____ () C:\Windows\system32\ZSHP1020.EXE
2014-05-03 08:33 - 2012-09-18 15:27 - 00192512 _____ () C:\Windows\system32\ZLhp1020.DLL
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe
2014-04-22 03:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 03:00 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 03:00 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 03:00 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 03:00 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 03:00 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 03:00 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 03:00 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 03:00 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 03:00 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 03:00 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 03:00 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 03:00 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 03:00 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 03:00 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 03:00 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 03:00 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 03:00 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 03:00 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 03:00 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 03:00 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 03:00 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 03:00 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 03:00 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 03:00 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 03:00 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 03:00 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 03:00 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 03:00 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 03:00 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 03:00 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 03:00 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 03:00 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 03:00 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 03:00 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 03:00 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 03:00 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 03:00 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 03:00 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 03:00 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 03:00 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 03:00 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 03:00 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

==================== One Month Modified Files and Folders =======

2014-05-18 19:25 - 2014-05-18 19:20 - 00023637 _____ () C:\Users\Sabrina\Desktop\FRST.txt
2014-05-18 19:25 - 2013-10-17 22:06 - 00000000 ____D () C:\FRST
2014-05-18 19:19 - 2014-01-31 18:47 - 02067456 _____ (Farbar) C:\Users\Sabrina\Desktop\FRST64.exe
2014-05-18 19:19 - 2014-01-31 18:47 - 00000000 ____D () C:\Users\Sabrina\Desktop\FRST-OlderVersion
2014-05-18 19:17 - 2012-02-25 18:46 - 00000466 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job
2014-05-18 19:01 - 2012-04-06 14:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-18 18:50 - 2012-02-13 08:46 - 01514595 _____ () C:\Windows\WindowsUpdate.log
2014-05-18 18:42 - 2012-02-13 08:16 - 00705124 _____ () C:\Windows\system32\perfh007.dat
2014-05-18 18:42 - 2012-02-13 08:16 - 00151492 _____ () C:\Windows\system32\perfc007.dat
2014-05-18 18:42 - 2009-07-14 07:13 - 01629508 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-18 18:40 - 2014-05-04 21:39 - 00000300 _____ () C:\Windows\Tasks\AppCloudUpdater.job
2014-05-18 18:39 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\UDM
2014-05-18 18:39 - 2012-02-13 09:42 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-18 08:06 - 2012-02-13 09:42 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-17 21:59 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-17 21:59 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-17 21:53 - 2012-04-03 22:34 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Dropbox
2014-05-17 21:52 - 2012-04-03 22:35 - 00000000 ___RD () C:\Users\Sabrina\Dropbox
2014-05-17 21:50 - 2014-01-04 19:04 - 00000464 ____H () C:\Windows\Tasks\GS.Enabler-S-926685765.job
2014-05-17 21:50 - 2012-02-13 09:01 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-17 21:49 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-17 21:49 - 2009-07-14 06:51 - 00117307 _____ () C:\Windows\setupact.log
2014-05-17 08:06 - 2013-03-12 15:20 - 00000000 ___RD () C:\Users\Sabrina\Virtual Machines
2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-17 00:24 - 2014-05-04 16:44 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-17 00:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-16 23:41 - 2014-05-16 23:40 - 00000000 ____D () C:\ProgramData\CaheoapMee
2014-05-16 23:41 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\fc124d4af23c6577
2014-05-16 23:20 - 2012-02-25 18:46 - 00003506 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest
2014-05-16 23:20 - 2012-02-25 18:46 - 00003448 _____ () C:\Windows\System32\Tasks\PCDEventLauncher
2014-05-16 23:17 - 2012-02-25 11:19 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-16 23:16 - 2013-08-02 03:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-16 23:11 - 2012-08-29 07:47 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-16 23:11 - 2012-02-25 12:07 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Adobe
2014-05-16 23:04 - 2013-12-01 21:48 - 00001040 _____ () C:\Users\Sabrina\Desktop\Dropbox.lnk
2014-05-16 23:04 - 2013-12-01 21:47 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-14 21:01 - 2012-04-06 14:52 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 21:01 - 2012-04-06 14:52 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 21:01 - 2012-02-27 19:10 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-13 21:01 - 2012-02-25 11:40 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-13 00:13 - 2014-05-04 21:41 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job
2014-05-11 09:04 - 2012-05-22 17:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-11 01:34 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\WtDashboard
2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-10 15:18 - 2012-06-23 19:00 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Apple Computer
2014-05-10 00:23 - 2009-07-14 06:45 - 05256976 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-09 08:14 - 2014-05-13 21:16 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-13 21:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-08 23:30 - 2012-02-13 09:42 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-08 23:30 - 2012-02-13 09:42 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-08 18:32 - 2012-03-01 12:27 - 00011311 _____ () C:\Users\Sabrina\AppData\Roaming\SmarThruOptions.xml
2014-05-07 20:03 - 2014-05-07 20:02 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe
2014-05-06 06:40 - 2014-05-16 23:17 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-16 23:17 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-16 23:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-16 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-05 12:03 - 2012-02-25 18:47 - 00118016 _____ () C:\Users\Sabrina\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-05 11:59 - 2014-02-28 10:48 - 00000000 ____D () C:\Users\Sabrina\Documents\BVA
2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd
2014-05-05 08:13 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit
2014-05-05 08:07 - 2014-05-05 07:40 - 00000000 ____D () C:\Program Files (x86)\CrossFnt
2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe
2014-05-05 08:03 - 2014-05-05 08:03 - 00641568 _____ () C:\Users\Sabrina\Downloads\download-adobe-type-manager.exe
2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe
2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe
2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe
2014-05-05 07:32 - 2014-05-05 07:32 - 00050473 ____R () C:\Users\Sabrina\Desktop\schriften.zipx
2014-05-04 22:15 - 2014-05-04 22:15 - 00001066 _____ () C:\Users\Sabrina\Desktop\Orbit.lnk
2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense
2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Orbit
2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Program Files (x86)\Orbitdownloader
2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe
2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-04 21:45 - 2012-02-13 09:43 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-05-04 21:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-05-04 21:43 - 2012-02-13 09:43 - 00204593 _____ () C:\Windows\DirectX.log
2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe
2014-05-04 21:41 - 2012-04-15 11:40 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Windows Live
2014-05-04 21:39 - 2014-05-04 21:39 - 00003254 _____ () C:\Windows\System32\Tasks\AppCloudUpdater
2014-05-04 21:39 - 2014-05-04 21:39 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\AppCloudUpdater
2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml
2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\system32\NV
2014-05-04 21:34 - 2012-02-13 08:54 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\ProgramData\Intel
2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-05-04 21:31 - 2014-05-04 21:28 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe
2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA
2014-05-04 21:22 - 2014-05-04 21:18 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe
2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor
2014-05-04 21:10 - 2010-11-21 05:47 - 00921524 _____ () C:\Windows\PFRO.log
2014-05-04 21:08 - 2014-05-04 18:26 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf
2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)
2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)
2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)
2014-05-04 20:05 - 2014-05-04 20:04 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf
2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp
2014-05-04 19:46 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-04 19:45 - 2014-05-04 19:45 - 00323712 _____ (MiniApp) C:\Users\Sabrina\Downloads\Utopia Regular.exe
2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf
2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip
2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\ProgramData\WinZip
2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\Program Files\WinZip
2014-05-04 19:21 - 2012-02-25 18:45 - 00000000 ____D () C:\Users\Sabrina
2014-05-04 19:21 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi
2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx
2014-05-04 18:29 - 2014-05-04 18:26 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI
2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe
2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe
2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files
2014-05-04 18:14 - 2014-05-04 18:13 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi
2014-05-04 18:09 - 2014-05-04 18:08 - 00000020 _____ () C:\Windows\ø÷Í
2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸
2014-05-04 17:49 - 2012-03-06 07:54 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\CrashDumps
2014-05-04 17:37 - 2010-11-21 09:16 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe
2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener
2014-05-04 17:07 - 2014-05-04 17:02 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe
2014-05-04 16:46 - 2014-05-04 16:44 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe
2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster
2014-05-04 16:38 - 2012-02-25 18:46 - 00000528 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe
2014-04-29 09:42 - 2012-02-25 18:46 - 00004246 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2014-04-22 03:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

Some content of TEMP:
====================
C:\Users\Sabrina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpu67gov.dll
C:\Users\Sabrina\AppData\Local\Temp\IrsoDLL.dll
C:\Users\Sabrina\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Sabrina\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Sabrina\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Sabrina\AppData\Local\Temp\nvStInst.exe
C:\Users\Sabrina\AppData\Local\Temp\Quarantine.exe
C:\Users\Sabrina\AppData\Local\Temp\Risweb32.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-05-13 21:15] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-10 17:39

==================== End Of Log ============================

Machiavelli · 18.05.2014, 18:29

Hallo und willkommen an Board, schnüffel

Mein Name ist Machiavelli und werde bei Deinem Malware Problemen behilflich sein. Falls Du Dich im abgesicherten Modus befindest, würde ich Dir raten, alle Anweisungen von mir auszudrucken, um besseren Überblick auf die Gesamtsituation zu bekommen. Ich bin hier im Malwareteam und daher ist es mir möglich, Dir zu helfen.

Damit eine Bereinigung ermöglicht werden kann, musst Du ein paar Regeln/Tipps beachten:

Malware zu entfernen ist normalerweise recht schwierig
Heutige Malware kann sich sehr gut verstecken, so kann es sein, dass es bestimmte Tools nicht sehen. Eine Neuinstallation ist daher oft das klügere.
Bitte folge meinen Anweisung bis in das kleinste Detail
Falls Du was falsches machst, wie z.B. irgendwas fixt, was nicht durch mich genehmigt wurde, kann der PC dadurch beschädigt werden. Daher folge meinen Anweisungen ganz genau
Bleibe mit mir in Kontakt, bis Deine Probleme vollständig gelöst sind
Themen, in welchen innerhalb von 4 Tagen keine Antwort gepostet wird, werden geschlossen.
Bitte lasse keine anderen Tools laufen, während ich bereinige
Wenn Du Tools wie z.B. Malwarebytes etc. ohne meines Wissens laufen lässt, kann es unter Umständen Ergebnisse verfälschen.
Ließ meine Posts vollständig durch
Falls nicht, kann das zu schwerwiegenden Problemen (z.B. PC bootet nicht mehr) führen oder der Prozess der Malwareentfernung wird länger

Wo ist das Addition Log?

schnüffel · 18.05.2014, 18:37

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Sabrina at 2013-10-17 22:07:22
Running from C:\Users\Sabrina\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (x32)
Adobe AIR (x32 Version: 3.7.0.1530)
Adobe Extension Manager CS6 (x32 Version: 6.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Help Manager (x32 Version: 4.0.244)
Adobe InDesign CS5 (x32 Version: 7.0)
Adobe Media Player (x32 Version: 1.8)
Adobe Photoshop 7.0.1 (x32 Version: 7.0.1)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)
Apple Application Support (x32 Version: 2.3)
Apple Mobile Device Support (Version: 5.2.0.6)
Apple Software Update (x32 Version: 2.1.3.127)
Avira Free Antivirus (x32 Version: 12.1.9.2500)
Bonjour (Version: 3.0.0.10)
Broadcom InConcert Maestro (Version: 1.0.1.1500)
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.0.08057)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.0.08057)
Cisco Systems VPN Client 5.0.07.0290 (Version: 5.0.7)
Citrix Authentication Manager (x32 Version: 4.0.0.53726)
Citrix Endpoint Analysis Plugin (x32 Version: 4.5.5.0)
Citrix Receiver (DV) (x32 Version: 13.4.0.25)
Citrix Receiver (HDX Flash-Umleitung) (x32 Version: 13.4.0.25)
Citrix Receiver (USB) (x32 Version: 13.4.0.25)
Citrix Receiver (x32 Version: 13.4.0.25)
Citrix Receiver Inside (x32 Version: 3.4.0.29585)
Citrix Receiver Updater (x32 Version: 3.4.0.29577)
Citrix Receiver(Aero) (x32 Version: 13.4.0.25)
Conexant 20672 SmartAudio HD (Version: 8.32.23.0)
Corel WinDVD (x32 Version: 10.0.5.828)
Create Recovery Media (x32 Version: 1.20.0.00)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7 (Version: 1.00)
EasyRotator Wizard (x32 Version: 1.0.123)
EasyTax 2012 AG 1.02 (x32 Version: 1.02)
Evernote v. 4.2.3 (x32 Version: 4.2.3.15)
Free Audio Converter version 5.0.15.706 (x32 Version: 5.0.15.706)
Free DVD Video Converter version 2.0.9.706 (x32 Version: 2.0.9.706)
Free Video to Flash Converter version 5.0.15.706 (x32 Version: 5.0.15.706)
Free YouTube Download version 3.1.42.1212 (x32 Version: 3.1.42.1212)
Free YouTube to MP3 Converter version 3.11.37.1212 (x32 Version: 3.11.37.1212)
Google Chrome (x32 Version: 30.0.1599.69)
Google Earth Plug-in (x32 Version: 7.1.1.1888)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54)
Google Update Helper (x32 Version: 1.3.21.165)
IB Updater Service (x32 Version: 4.0.7.4)
Integrated Camera Driver Installer Package Ver.1.1.0.1147 (x32 Version: 1.1.0.1147)
Integrated Camera TWAIN (x32 Version: 1.0.11.1223)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Identity Protection Technology 1.1.2.0 (x32 Version: 1.1.2.0)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2321)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.2.0000)
Internet Explorer Toolbar 4.6 by SweetPacks (x32 Version: 4.6.0003)
iTunes (Version: 10.6.3.25)
Kalender-Excel-8.8 (x32 Version: 8.8)
Lenovo Auto Scroll Utility (Version: 1.10)
Lenovo Patch Utility (x32 Version: 1.0.1.1)
Lenovo Patch Utility 64 bit (Version: 1.2.0.1)
Lenovo Registration (x32 Version: 1.0.4)
Lenovo SimpleTap (Version: 3.0.0010.00)
Lenovo System Interface Driver (Version: 1.05)
Lenovo ThinkVantage Toolbox (Version: 6.0.5849.23)
Lenovo User Guide (x32 Version: 1.0.0008.00)
Lenovo Warranty Information (x32 Version: 1.0.0005.00)
Lenovo Welcome (x32 Version: 3.00.006.0)
Macromedia Contribute 3 (x32 Version: 3.0.2.2326)
Macromedia Dreamweaver 8 (x32 Version: 8.0.0.2751)
Macromedia Extension Manager (x32 Version: 1.7.270)
Macromedia Fireworks 8 (x32 Version: 8.0.0.777)
Macromedia Flash 8 (x32 Version: 8.00.0000)
Macromedia Flash 8 Video Encoder (x32 Version: 1.00.0000)
Macromedia HomeSite+ (x32)
Message Center Plus (x32 Version: 2.0.0012.00)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook Connector (x32 Version: 14.0.5118.5000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SkyDrive (HKCU Version: 16.4.6013.0910)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nur Entfernen der CopyTrans Suite möglich (HKCU Version: 2.36)
NVIDIA 3D Vision Treiber 306.97 (Version: 306.97)
NVIDIA Grafiktreiber 306.97 (Version: 306.97)
NVIDIA HD-Audiotreiber 1.2.23.3 (Version: 1.2.23.3)
NVIDIA Install Application (Version: 2.1002.85.551)
NVIDIA Optimus 1.10.8 (Version: 1.10.8)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.0697)
NVIDIA Systemsteuerung 306.97 (Version: 306.97)
NVIDIA Update Components (Version: 1.10.8)
On Screen Display (Version: 6.50.00)
Online Plug-in (x32 Version: 13.4.0.25)
PDF Settings CS5 (x32 Version: 10.0)
PDFCreator (x32 Version: 1.2.3)
Picasa 3 (x32 Version: 3.9)
Private Tax 2011 1.4 (x32 Version: 1.4)
Programmer's Notepad (x32 Version: 2.3.4.2350)
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14)
QuickTime (x32 Version: 7.73.80.64)
R for Windows 2.14.1 (Version: 2.14.1)
RapidBoot (Version: 1.11)
Readiris Pro 10 (x32)
Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (Version: 1.00)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0)
RICOH_Media_Driver_v2.14.18.01 (x32 Version: 2.14.18.01)
Samsung CLX-3170 Series (x32)
Secure Download Manager (x32 Version: 3.0.3)
Self-Service Plug-in (x32 Version: 3.4.0.33684)
SimilarWeb (x32 Version: 0.0.0.1)
SmarThru 4 (x32)
SmarThru PC Fax (x32)
SweetIM for Messenger 3.7 (x32 Version: 3.7.0005)
Swisscom Quick Help (x32 Version: 3.3.2.340)
System Update (x32 Version: 4.01.0015)
TDM-GCC (x32 Version: 1.1006.0)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 6.4.0.1500)
ThinkPad FullScreen Magnifier (Version: 2.40)
ThinkPad Modem Adapter (Version: 7.80.5.0)
ThinkPad Power Management Driver (Version: 1.61.00.11)
ThinkPad Power Manager (x32 Version: 3.63)
ThinkPad UltraNav Driver (Version: 15.3.8.0)
ThinkPad UltraNav Utility (x32 Version: 2.13.0)
ThinkVantage Active Protection System (Version: 1.73)
ThinkVantage AutoLock (Version: 1.03)
ThinkVantage Communications Utility (Version: 2.07)
ThinkVantage Fingerprint Software (Version: 5.9.4.6882)
Tinn-R 2.3.7.1 (x32)
TopStyle Lite (Version 3.0) (x32 Version: 3.1.0)
Unlimited Data Manager 10.0.0 (x32 Version: 10.0.21168.0)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2494150) (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2827325) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
Update Manager for SweetPacks 1.0 (x32 Version: 1.0.0005)
VIP Access (x32 Version: 2.0.2.140)
VLC media player 2.0.2 (x32 Version: 2.0.2)
Wajam (x32 Version: 1.76)
Windows Driver Package - Intel (e1cexpress) Net  (12/21/2010 11.8.84.0) (Version: 12/21/2010 11.8.84.0)
Windows Driver Package - Intel System  (09/10/2010 9.2.0.1011) (Version: 09/10/2010 9.2.0.1011)
Windows Driver Package - Intel System  (11/20/2010 9.2.0.1016) (Version: 11/20/2010 9.2.0.1016)
Windows Driver Package - Intel USB  (12/21/2010 9.2.0.1021) (Version: 12/21/2010 9.2.0.1021)
Windows Driver Package - Lenovo 1.61.00.11 (11/11/2010 1.61.00.11) (Version: 11/11/2010 1.61.00.11)
Windows Driver Package - Synaptics (SynTP) Mouse  (05/19/2011 15.3.8.0) (Version: 05/19/2011 15.3.8.0)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows XP Mode (Version: 1.3.7600.16422)
WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0)
WinVPP 1.3.4 (x32 Version: 1.3.4)
Wondershare Vivideo(Build 2.0.0.12) (x32)

==================== Restore Points  =========================

15-09-2013 08:24:19 Geplanter Prüfpunkt
15-09-2013 09:45:46 Windows Update
22-09-2013 18:37:41 Geplanter Prüfpunkt
24-09-2013 01:00:27 Windows Update
03-10-2013 09:32:13 Macromedia Dreamweaver 8 wird entfernt
03-10-2013 09:41:15 Macromedia Dreamweaver 8 wird installiert
03-10-2013 10:01:21 Macromedia Dreamweaver 8 wird entfernt
03-10-2013 10:10:13 Macromedia Dreamweaver 8 wird installiert
12-10-2013 01:00:50 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0BC77D44-74FA-455A-B587-E73CE62C5990} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-13] (Google Inc.)
Task: {11EF87FA-F5C4-4F01-89D7-E8ECB43B7D7C} - System32\Tasks\MCP => C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-28] ()
Task: {3BE08FEC-0FC8-441D-939E-C609A500E540} - System32\Tasks\AdobeAAMUpdater-1.0-Sabrina-THINK-Sabrina => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {3D74BFA3-1C0A-4739-B737-FCDF6999E8B4} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2011-12-21] (Lenovo)
Task: {73978FBE-6EAD-4932-8803-2008ACAD057D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated)
Task: {7629E501-D646-44BF-8DF0-85E237916E4B} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {7EBBFFA8-F9C9-4534-8D6D-8A9AC2815D03} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {94B59A78-1266-4B6B-983C-AA7837A977BC} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {957D2B91-634E-4D2B-9EE4-85AE74F41DFC} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {C32FF76B-6D11-4288-8203-8954890ED5EB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {DBC194AD-8A8E-4AAA-BFE4-C43BFCEBA7C5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-13] (Google Inc.)
Task: {EF259D21-F761-4E73-8FA3-F6DDC6A2B365} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PWMIDTSV.EXE [2011-08-31] (Lenovo Group Limited)
Task: {F2E147F1-A5C9-45E3-B2D9-9940C0B51F8D} - System32\Tasks\Lenovo\SimpleTap\Start SimpleTap for Sabrina-THINK.Sabrina => C:\Program Files\Lenovo\SimpleTap\SimpleTap.exe [2011-12-21] (Lenovo)
Task: {F3B604C6-B7CE-4E96-B52F-0B4A5F5B3B23} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/17/2013 09:24:14 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_WbioSrvc, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1677
Ausnahmecode: 0x80004004
Fehleroffset: 0x000000000000940d
ID des fehlerhaften Prozesses: 0x7f4
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_WbioSrvc0
Pfad der fehlerhaften Anwendung: svchost.exe_WbioSrvc1
Pfad des fehlerhaften Moduls: svchost.exe_WbioSrvc2
Berichtskennung: svchost.exe_WbioSrvc3

Error: (10/17/2013 09:20:29 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/17/2013 08:56:59 PM) (Source: PC-Doctor) (User: )
Description: (15072) Asapi: (20:56:59:3020)(15072) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12007) failed with error: 317

Error: (10/17/2013 08:56:59 PM) (Source: PC-Doctor) (User: )
Description: (15072) Asapi: (20:56:59:2710)(15072) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12007) failed with error: 317

Error: (10/15/2013 06:25:55 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2028

Error: (10/15/2013 06:25:55 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2028

Error: (10/15/2013 06:25:55 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (10/15/2013 06:25:54 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1030

Error: (10/15/2013 06:25:54 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1030

Error: (10/15/2013 06:25:54 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (10/17/2013 09:24:19 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Windows-Biometriedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/17/2013 09:24:18 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (10/17/2013 09:24:18 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (10/17/2013 09:24:10 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (10/17/2013 09:24:01 PM) (Source: BROWSER) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{E089CE53-2835-477B-AD7E-785AC58EF460}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.

Error: (10/17/2013 09:23:58 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (10/17/2013 09:20:09 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%20

Error: (10/17/2013 09:09:53 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (10/17/2013 09:03:35 PM) (Source: BROWSER) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{E089CE53-2835-477B-AD7E-785AC58EF460}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.

Error: (10/16/2013 09:11:05 PM) (Source: BROWSER) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{E089CE53-2835-477B-AD7E-785AC58EF460}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.


Microsoft Office Sessions:
=========================
Error: (07/22/2013 01:47:56 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 52 seconds with 0 seconds of active time.  This session ended with a crash.

Machiavelli · 18.05.2014, 18:45

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4
Bitte starte

FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

Bitte poste mir die Inhalte der Logs von Adwarecleaner, MBAM, JRT und FRST hier in den Thread.

schnüffel · 18.05.2014, 20:36

Code:

ATTFilter

# AdwCleaner v3.209 - Bericht erstellt am 18/05/2014 um 20:10:19
# Aktualisiert 18/05/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Sabrina - SABRINA-THINK
# Gestartet von : C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : 1a34a8e0

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\CaheoapMee
Ordner Gelöscht : C:\Program Files (x86)\CaheoapMee
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\torch
Ordner Gelöscht : C:\Users\Gast\AppData\Local\torch
Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\torch
Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\Sabrina\AppData\Roaming\AppCloudUpdater
Ordner Gelöscht : C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\ooeu24m3d@pkpojf.org
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij
Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij
Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij
Ordner Gelöscht : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba
Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba
Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba
Ordner Gelöscht : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba
Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcjmphdcljedddkheginnckbjccchepe
Datei Gelöscht : C:\Program Files (x86)\GSSvc.dll
Datei Gelöscht : C:\Windows\Tasks\AppCloudUpdater.job
Datei Gelöscht : C:\Windows\System32\Tasks\AppCloudUpdater

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ChEapMe.ChEapMe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ChEapMe.ChEapMe.5.1
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{1a34a8e0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4006E1A8-DBC1-85C2-AB05-C358A67FAC60}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4006E1A8-DBC1-85C2-AB05-C358A67FAC60}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4006E1A8-DBC1-85C2-AB05-C358A67FAC60}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : HKCU\Software\AppCloudUpdater
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\RegisteredApplicationsEx
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gelöscht : HKLM\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gelöscht : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKLM\Software\GS.Enabler
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppCloudUpdater

***** [ Browser ] *****

#NAME?


#NAME?

[ Datei : C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.NCi_3WXY.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.ind[...]

#NAME?

[ Datei : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Search Provider] : hxxp://isearch.avg.com/search?cid={993F16F5-AA8A-498A-A825-52390C043FB5}&mid=&lang=&ds=&pr=&d=&v=&sap=dsp&q={searchTerms}
Gelöscht [Search Provider] : hxxp://websearch.searchsunmy.info/?l=1&q={searchTerms}&pid=377&r=2014/01/04&hid=6896541430164809529&lg=EN&cc=CH&unqvl=45
Gelöscht [Extension] : cmnkecdffcoibofckamdddfgeohpikij
Gelöscht [Extension] : jcjmphdcljedddkheginnckbjccchepe
Gelöscht [Extension] : mfpknoifpolmopniafjdmhgpeobpcbba

*************************

AdwCleaner[R0].txt - [9030 octets] - [21/10/2013 14:26:05]
AdwCleaner[R1].txt - [5322 octets] - [11/01/2014 13:58:23]
AdwCleaner[R2].txt - [1860 octets] - [12/01/2014 12:41:12]
AdwCleaner[R3].txt - [2715 octets] - [13/01/2014 17:03:55]
AdwCleaner[R4].txt - [1431 octets] - [22/01/2014 22:19:06]
AdwCleaner[R5].txt - [1547 octets] - [31/01/2014 18:51:19]
AdwCleaner[R6].txt - [6884 octets] - [18/05/2014 20:07:57]
AdwCleaner[S0].txt - [8615 octets] - [21/10/2013 14:27:20]
AdwCleaner[S1].txt - [5034 octets] - [11/01/2014 13:59:23]
AdwCleaner[S2].txt - [1921 octets] - [12/01/2014 12:42:37]
AdwCleaner[S3].txt - [2784 octets] - [13/01/2014 17:10:01]
AdwCleaner[S4].txt - [1492 octets] - [22/01/2014 22:20:25]
AdwCleaner[S5].txt - [1608 octets] - [31/01/2014 18:58:35]
AdwCleaner[S6].txt - [6536 octets] - [18/05/2014 20:10:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S6].txt - [6596 octets] ##########

Code:

ATTFilter

# AdwCleaner v3.209 - Bericht erstellt am 18/05/2014 um 20:10:19
# Aktualisiert 18/05/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Sabrina - SABRINA-THINK
# Gestartet von : C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : 1a34a8e0

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\CaheoapMee
Ordner Gelöscht : C:\Program Files (x86)\CaheoapMee
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\torch
Ordner Gelöscht : C:\Users\Gast\AppData\Local\torch
Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\torch
Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\Sabrina\AppData\Roaming\AppCloudUpdater
Ordner Gelöscht : C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\ooeu24m3d@pkpojf.org
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij
Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij
Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij
Ordner Gelöscht : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba
Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba
Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba
Ordner Gelöscht : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba
Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcjmphdcljedddkheginnckbjccchepe
Datei Gelöscht : C:\Program Files (x86)\GSSvc.dll
Datei Gelöscht : C:\Windows\Tasks\AppCloudUpdater.job
Datei Gelöscht : C:\Windows\System32\Tasks\AppCloudUpdater

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ChEapMe.ChEapMe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ChEapMe.ChEapMe.5.1
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{1a34a8e0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4006E1A8-DBC1-85C2-AB05-C358A67FAC60}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4006E1A8-DBC1-85C2-AB05-C358A67FAC60}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4006E1A8-DBC1-85C2-AB05-C358A67FAC60}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : HKCU\Software\AppCloudUpdater
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\RegisteredApplicationsEx
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gelöscht : HKLM\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gelöscht : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKLM\Software\GS.Enabler
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppCloudUpdater

***** [ Browser ] *****

#NAME?


#NAME?

[ Datei : C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.NCi_3WXY.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.ind[...]

#NAME?

[ Datei : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Search Provider] : hxxp://isearch.avg.com/search?cid={993F16F5-AA8A-498A-A825-52390C043FB5}&mid=&lang=&ds=&pr=&d=&v=&sap=dsp&q={searchTerms}
Gelöscht [Search Provider] : hxxp://websearch.searchsunmy.info/?l=1&q={searchTerms}&pid=377&r=2014/01/04&hid=6896541430164809529&lg=EN&cc=CH&unqvl=45
Gelöscht [Extension] : cmnkecdffcoibofckamdddfgeohpikij
Gelöscht [Extension] : jcjmphdcljedddkheginnckbjccchepe
Gelöscht [Extension] : mfpknoifpolmopniafjdmhgpeobpcbba

*************************

AdwCleaner[R0].txt - [9030 octets] - [21/10/2013 14:26:05]
AdwCleaner[R1].txt - [5322 octets] - [11/01/2014 13:58:23]
AdwCleaner[R2].txt - [1860 octets] - [12/01/2014 12:41:12]
AdwCleaner[R3].txt - [2715 octets] - [13/01/2014 17:03:55]
AdwCleaner[R4].txt - [1431 octets] - [22/01/2014 22:19:06]
AdwCleaner[R5].txt - [1547 octets] - [31/01/2014 18:51:19]
AdwCleaner[R6].txt - [6884 octets] - [18/05/2014 20:07:57]
AdwCleaner[S0].txt - [8615 octets] - [21/10/2013 14:27:20]
AdwCleaner[S1].txt - [5034 octets] - [11/01/2014 13:59:23]
AdwCleaner[S2].txt - [1921 octets] - [12/01/2014 12:42:37]
AdwCleaner[S3].txt - [2784 octets] - [13/01/2014 17:10:01]
AdwCleaner[S4].txt - [1492 octets] - [22/01/2014 22:20:25]
AdwCleaner[S5].txt - [1608 octets] - [31/01/2014 18:58:35]
AdwCleaner[S6].txt - [6536 octets] - [18/05/2014 20:10:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S6].txt - [6596 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Sabrina on 18.05.2014 at 20:44:59.50
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted the following from C:\Users\Sabrina\AppData\Roaming\mozilla\firefox\profiles\9ulbhy7c.default\prefs.js

user_pref("extensions.p1LpPE.url", "hxxp://gethexnow.com/sync2/?q=hfZ9ofV9CShEAen0rHC6tMqLDe49CNU0n9YMCMlNhd9FqdaFrdnFqHaHrjaMBzqUojw9rdwFrTwFrdr8qih7hfs0pihPBMn0rjkEpdsGpdwEr
Emptied folder: C:\Users\Sabrina\AppData\Roaming\mozilla\firefox\profiles\9ulbhy7c.default\minidumps [27 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 18.05.2014 at 21:17:00.40
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Sabrina (administrator) on SABRINA-THINK on 18-05-2014 21:34:29
Running from C:\Users\Sabrina\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(UPEK Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Swisscom) C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe
(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe
(Swisscom) C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ZOOM\TpScrex.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Avanquest Software ) C:\Program Files (x86)\Digital Line Detect\DLG.exe
(Dropbox, Inc.) C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Swisscom) C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\System Update\SUService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe
() C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2789160 2011-05-19] (Synaptics Incorporated)
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [380776 2010-12-09] (Lenovo.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2011-03-14] (Conexant systems, Inc.)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [40808 2011-05-31] (Lenovo Group Limited)
HKLM\...\Run: [ALCKRESI.EXE] => C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE [281960 2011-05-26] (Lenovo Group Limited)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-31] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [112152 2011-01-17] (Intel Corporation)
HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-14] (Lenovo, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Samsung PanelMgr] => C:\Windows\Samsung\PanelMgr\ssmmgr.exe [606208 2009-10-13] ()
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)
HKLM-x32\...\Run: [Swisscom Quick Help] => C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe [16668080 2013-10-02] (Swisscom)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (UPEK Inc.)
HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [LTT] => C:\Program Files\PC-Doctor\EnableToolbarW32.exe [23120 2011-06-27] (PC-Doctor, Inc.)
HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [AppSafe] => C:\Program Files (x86)\AppSafe\AppSafe.exe
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs: , C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk
ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files (x86)\Digital Line Detect\DLG.exe (Avanquest Software )
Startup: C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

ProxyServer: proxy.lfrz.at:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
URLSearchHook: HKLM-x32 - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}
URLSearchHook: HKCU - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_deCH472
BHO: YoutubeAdblocker - {159BC49F-2CD6-4CB7-932B-1027665E58BD} - C:\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll No File
BHO: greaotssaVer - {4F72390C-3192-91EF-ECD9-D90061D298A2} - C:\Program Files (x86)\greaotssaVer\2ZKW9c.x64.dll No File
BHO: SNT - {847493A0-9B57-E1D5-FE2C-CC1B12BC46CB} - C:\Program Files (x86)\SNT\p7T2DTlA.x64.dll No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{D5A2C57D-7554-4054-AE53-57D7A4D0B831}: [NameServer]195.186.216.33 195.186.152.33

FireFox:
========
FF ProfilePath: C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default
FF Homepage: https://www.google.ch/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Swisscom Quick Help - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\{6A6114A5-EEF5-45F4-BCD1-B00A7B33E04B} [2014-01-13]
FF Extension: Firebug - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\firebug@software.joehewitt.com.xpi [2013-02-17]
FF HKLM-x32\...\Firefox\Extensions: [VIP@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client\
FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\ []
FF HKLM-x32\...\Firefox\Extensions: [{E4D8AFFF-DA7C-412F-A976-05ED142C7806}] - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\
FF Extension: Unlimited Data Manager - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Extension: (YTBBookMark) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\amabcieebhjofcnbdphdmfkfcdgfilgk [2014-01-04]
CHR Extension: (YouTube) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-02-25]
CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij [2014-01-04]
CHR Extension: (Google Search) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-02-25]
CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpicgdnjfnbkibnicdnnpkkpklkjkki [2013-04-12]
CHR Extension: (Speedy Shopper) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ganlifbpkcplnldliibcbegplfmcfigp [2014-01-04]
CHR Extension: (SNT) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcgmnfaeohlofnjigiimjlbjleaomlei [2014-01-04]
CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcjmphdcljedddkheginnckbjccchepe [2014-05-16]
CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba [2014-01-04]
CHR Extension: (Norton Identity Protection) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2012-02-25]
CHR Extension: (Gmail) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-02-25]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-01-15]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [478056 2011-08-31] (Lenovo.)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2513752 2014-03-04] ()
R2 SesamService; C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe [1482240 2011-05-16] (Swisscom)
R2 SwiCardDetectSvc; C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe [307568 2010-09-22] (Sierra Wireless, Inc.)
R2 UDM Service; C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe [182128 2011-05-20] (Swisscom)
R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [82544 2011-06-30] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-25] (Samsung Electronics Co., Ltd.)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2011-02-18] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-18] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [301512 2014-03-04] (NVIDIA Corporation)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13840 2009-03-13] (UPEK Inc.)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [41536 2009-09-24] (Lenovo (United States) Inc.)
R3 WtSmpAdap; C:\Windows\System32\DRIVERS\wtsmpadap.sys [56688 2011-04-11] (Swisscom)
R1 WtSmpFlt; C:\Windows\System32\DRIVERS\wtsmpflt.sys [409456 2011-04-11] (Swisscom)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 vpnva; system32\DRIVERS\vpnva64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-18 21:17 - 2014-05-18 21:17 - 00001065 _____ () C:\Users\Sabrina\Desktop\JRT.txt
2014-05-18 20:44 - 2014-05-18 20:44 - 01016261 _____ (Thisisu) C:\Users\Sabrina\Downloads\JRT(2).exe
2014-05-18 20:17 - 2014-05-18 20:40 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-18 20:17 - 2014-05-18 20:17 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-18 20:17 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-18 20:17 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-18 20:17 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-18 20:16 - 2014-05-18 20:16 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Sabrina\Downloads\mbam-setup-2.0.1.1004.exe
2014-05-18 20:08 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-18 20:07 - 2014-05-18 20:07 - 01328723 _____ () C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe
2014-05-18 19:20 - 2014-05-18 21:34 - 00023140 _____ () C:\Users\Sabrina\Desktop\FRST.txt
2014-05-16 23:17 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-16 23:17 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-16 23:17 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-16 23:17 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-16 23:17 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-16 23:17 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-13 21:16 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-13 21:16 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-13 21:16 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-13 21:16 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-13 21:15 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-13 21:15 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-13 21:15 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-13 21:15 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-13 21:15 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-13 21:15 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-13 21:15 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-13 21:15 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-13 21:15 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-13 21:15 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-13 21:15 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-13 21:15 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-13 21:15 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-13 21:15 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-13 21:15 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-13 21:15 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-07 20:02 - 2014-05-07 20:03 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe
2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd
2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe
2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe
2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe
2014-05-05 07:40 - 2014-05-05 08:07 - 00000000 ____D () C:\Program Files (x86)\CrossFnt
2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe
2014-05-05 07:32 - 2014-05-05 07:32 - 00050473 ____R () C:\Users\Sabrina\Desktop\schriften.zipx
2014-05-04 22:15 - 2014-05-18 19:31 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit
2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense
2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe
2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-04 21:41 - 2014-05-13 00:13 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job
2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe
2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml
2014-05-04 21:34 - 2012-05-15 07:13 - 00144896 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2014-05-04 21:34 - 2012-05-15 06:20 - 00104448 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\system32\NV
2014-05-04 21:28 - 2014-05-04 21:31 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe
2014-05-04 21:25 - 2014-03-04 20:35 - 02513752 _____ () C:\Windows\system32\nvwmi64.exe
2014-05-04 21:25 - 2014-03-04 20:35 - 00004084 _____ () C:\Windows\system32\nvPerfProvider.man
2014-05-04 21:25 - 2014-03-04 18:17 - 00595232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA
2014-05-04 21:23 - 2014-03-04 20:35 - 30389192 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 25257816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 22973896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 18312672 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 18225104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 15879264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 15232424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 12672288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-05-04 21:23 - 2014-03-04 20:35 - 11638736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 11587736 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 09731624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 09688888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 03131848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 03123544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 02936152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 02752856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 01883480 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433276.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433276.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 01249080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00888776 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00880984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00860104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00850888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00301512 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvkflt.sys
2014-05-04 21:23 - 2014-03-04 20:35 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00031576 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-05-04 21:18 - 2014-05-04 21:22 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe
2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf
2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)
2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)
2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)
2014-05-04 20:04 - 2014-05-04 20:05 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf
2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp
2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf
2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip
2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\WinZip
2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\Program Files\WinZip
2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi
2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx
2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor
2014-05-04 18:26 - 2014-05-04 21:08 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-05-04 18:26 - 2014-05-04 18:29 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI
2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe
2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe
2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files
2014-05-04 18:13 - 2014-05-04 18:14 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi
2014-05-04 18:08 - 2014-05-04 18:09 - 00000020 _____ () C:\Windows\ø÷Í
2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸
2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe
2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener
2014-05-04 17:02 - 2014-05-04 17:07 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe
2014-05-04 16:44 - 2014-05-17 00:24 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-04 16:44 - 2014-05-04 16:46 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe
2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster
2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe
2014-05-03 08:33 - 2012-09-18 15:27 - 00501760 _____ () C:\Windows\system32\ZSHP1020.EXE
2014-05-03 08:33 - 2012-09-18 15:27 - 00192512 _____ () C:\Windows\system32\ZLhp1020.DLL
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe
2014-04-22 03:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 03:00 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 03:00 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 03:00 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 03:00 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 03:00 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 03:00 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 03:00 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 03:00 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 03:00 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 03:00 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 03:00 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 03:00 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 03:00 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 03:00 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 03:00 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 03:00 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 03:00 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 03:00 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 03:00 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 03:00 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 03:00 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 03:00 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 03:00 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 03:00 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 03:00 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 03:00 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 03:00 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 03:00 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 03:00 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 03:00 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 03:00 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 03:00 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 03:00 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 03:00 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 03:00 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 03:00 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 03:00 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 03:00 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 03:00 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 03:00 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 03:00 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 03:00 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

==================== One Month Modified Files and Folders =======

2014-05-18 21:35 - 2012-02-13 09:42 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-18 21:34 - 2014-05-18 19:20 - 00023140 _____ () C:\Users\Sabrina\Desktop\FRST.txt
2014-05-18 21:34 - 2013-10-17 22:06 - 00000000 ____D () C:\FRST
2014-05-18 21:17 - 2014-05-18 21:17 - 00001065 _____ () C:\Users\Sabrina\Desktop\JRT.txt
2014-05-18 21:01 - 2012-04-06 14:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-18 20:48 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-18 20:48 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-18 20:45 - 2012-02-13 08:16 - 00705124 _____ () C:\Windows\system32\perfh007.dat
2014-05-18 20:45 - 2012-02-13 08:16 - 00151492 _____ () C:\Windows\system32\perfc007.dat
2014-05-18 20:45 - 2009-07-14 07:13 - 01629508 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-18 20:44 - 2014-05-18 20:44 - 01016261 _____ (Thisisu) C:\Users\Sabrina\Downloads\JRT(2).exe
2014-05-18 20:42 - 2012-04-03 22:35 - 00000000 ___RD () C:\Users\Sabrina\Dropbox
2014-05-18 20:42 - 2012-04-03 22:34 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Dropbox
2014-05-18 20:41 - 2012-02-13 09:42 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-18 20:40 - 2014-05-18 20:17 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-18 20:40 - 2014-01-04 19:04 - 00000464 ____H () C:\Windows\Tasks\GS.Enabler-S-926685765.job
2014-05-18 20:40 - 2012-02-13 09:01 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-18 20:40 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-18 20:40 - 2009-07-14 06:51 - 00117419 _____ () C:\Windows\setupact.log
2014-05-18 20:39 - 2012-02-13 08:46 - 01532887 _____ () C:\Windows\WindowsUpdate.log
2014-05-18 20:39 - 2010-11-21 05:47 - 00922862 _____ () C:\Windows\PFRO.log
2014-05-18 20:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Web
2014-05-18 20:17 - 2014-05-18 20:17 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-18 20:17 - 2013-10-21 14:04 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-18 20:16 - 2014-05-18 20:16 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Sabrina\Downloads\mbam-setup-2.0.1.1004.exe
2014-05-18 20:11 - 2012-02-25 18:46 - 00000466 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job
2014-05-18 20:10 - 2013-10-21 14:25 - 00000000 ____D () C:\AdwCleaner
2014-05-18 20:07 - 2014-05-18 20:07 - 01328723 _____ () C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe
2014-05-18 19:56 - 2012-02-25 18:46 - 00003506 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest
2014-05-18 19:56 - 2012-02-25 18:46 - 00003448 _____ () C:\Windows\System32\Tasks\PCDEventLauncher
2014-05-18 19:31 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit
2014-05-18 19:30 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\fc124d4af23c6577
2014-05-18 19:19 - 2014-01-31 18:47 - 02067456 _____ (Farbar) C:\Users\Sabrina\Desktop\FRST64.exe
2014-05-18 19:19 - 2014-01-31 18:47 - 00000000 ____D () C:\Users\Sabrina\Desktop\FRST-OlderVersion
2014-05-18 18:39 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\UDM
2014-05-17 08:06 - 2013-03-12 15:20 - 00000000 ___RD () C:\Users\Sabrina\Virtual Machines
2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-17 00:24 - 2014-05-04 16:44 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-17 00:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-16 23:17 - 2012-02-25 11:19 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-16 23:16 - 2013-08-02 03:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-16 23:11 - 2012-08-29 07:47 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-16 23:11 - 2012-02-25 12:07 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Adobe
2014-05-16 23:04 - 2013-12-01 21:48 - 00001040 _____ () C:\Users\Sabrina\Desktop\Dropbox.lnk
2014-05-16 23:04 - 2013-12-01 21:47 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-14 21:01 - 2012-04-06 14:52 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 21:01 - 2012-04-06 14:52 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 21:01 - 2012-02-27 19:10 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-13 21:01 - 2012-02-25 11:40 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-13 00:13 - 2014-05-04 21:41 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job
2014-05-11 09:04 - 2012-05-22 17:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-11 01:34 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\WtDashboard
2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-10 15:18 - 2012-06-23 19:00 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Apple Computer
2014-05-10 00:23 - 2009-07-14 06:45 - 05256976 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-09 08:14 - 2014-05-13 21:16 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-13 21:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-08 23:30 - 2012-02-13 09:42 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-08 23:30 - 2012-02-13 09:42 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-08 18:32 - 2012-03-01 12:27 - 00011311 _____ () C:\Users\Sabrina\AppData\Roaming\SmarThruOptions.xml
2014-05-07 20:03 - 2014-05-07 20:02 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe
2014-05-06 06:40 - 2014-05-16 23:17 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-16 23:17 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-16 23:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-16 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-05 12:03 - 2012-02-25 18:47 - 00118016 _____ () C:\Users\Sabrina\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-05 11:59 - 2014-02-28 10:48 - 00000000 ____D () C:\Users\Sabrina\Documents\BVA
2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd
2014-05-05 08:07 - 2014-05-05 07:40 - 00000000 ____D () C:\Program Files (x86)\CrossFnt
2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe
2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe
2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe
2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe
2014-05-05 07:32 - 2014-05-05 07:32 - 00050473 ____R () C:\Users\Sabrina\Desktop\schriften.zipx
2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense
2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe
2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-04 21:45 - 2012-02-13 09:43 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-05-04 21:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-05-04 21:43 - 2012-02-13 09:43 - 00204593 _____ () C:\Windows\DirectX.log
2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe
2014-05-04 21:41 - 2012-04-15 11:40 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Windows Live
2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml
2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\system32\NV
2014-05-04 21:34 - 2012-02-13 08:54 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\ProgramData\Intel
2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-05-04 21:31 - 2014-05-04 21:28 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe
2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA
2014-05-04 21:22 - 2014-05-04 21:18 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe
2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor
2014-05-04 21:08 - 2014-05-04 18:26 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf
2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)
2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)
2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)
2014-05-04 20:05 - 2014-05-04 20:04 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf
2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp
2014-05-04 19:46 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf
2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip
2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\ProgramData\WinZip
2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\Program Files\WinZip
2014-05-04 19:21 - 2012-02-25 18:45 - 00000000 ____D () C:\Users\Sabrina
2014-05-04 19:21 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi
2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx
2014-05-04 18:29 - 2014-05-04 18:26 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI
2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe
2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe
2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files
2014-05-04 18:14 - 2014-05-04 18:13 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi
2014-05-04 18:09 - 2014-05-04 18:08 - 00000020 _____ () C:\Windows\ø÷Í
2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸
2014-05-04 17:49 - 2012-03-06 07:54 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\CrashDumps
2014-05-04 17:37 - 2010-11-21 09:16 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe
2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener
2014-05-04 17:07 - 2014-05-04 17:02 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe
2014-05-04 16:46 - 2014-05-04 16:44 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe
2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster
2014-05-04 16:38 - 2012-02-25 18:46 - 00000528 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe
2014-04-29 09:42 - 2012-02-25 18:46 - 00004246 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2014-04-22 03:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

Some content of TEMP:
====================
C:\Users\Sabrina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp40zz8g.dll
C:\Users\Sabrina\AppData\Local\Temp\IrsoDLL.dll
C:\Users\Sabrina\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Sabrina\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Sabrina\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Sabrina\AppData\Local\Temp\nvStInst.exe
C:\Users\Sabrina\AppData\Local\Temp\Quarantine.exe
C:\Users\Sabrina\AppData\Local\Temp\Risweb32.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-05-13 21:15] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-10 17:39

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Sabrina at 2013-10-17 22:07:22
Running from C:\Users\Sabrina\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (x32)
Adobe AIR (x32 Version: 3.7.0.1530)
Adobe Extension Manager CS6 (x32 Version: 6.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Help Manager (x32 Version: 4.0.244)
Adobe InDesign CS5 (x32 Version: 7.0)
Adobe Media Player (x32 Version: 1.8)
Adobe Photoshop 7.0.1 (x32 Version: 7.0.1)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)
Apple Application Support (x32 Version: 2.3)
Apple Mobile Device Support (Version: 5.2.0.6)
Apple Software Update (x32 Version: 2.1.3.127)
Avira Free Antivirus (x32 Version: 12.1.9.2500)
Bonjour (Version: 3.0.0.10)
Broadcom InConcert Maestro (Version: 1.0.1.1500)
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.0.08057)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.0.08057)
Cisco Systems VPN Client 5.0.07.0290 (Version: 5.0.7)
Citrix Authentication Manager (x32 Version: 4.0.0.53726)
Citrix Endpoint Analysis Plugin (x32 Version: 4.5.5.0)
Citrix Receiver (DV) (x32 Version: 13.4.0.25)
Citrix Receiver (HDX Flash-Umleitung) (x32 Version: 13.4.0.25)
Citrix Receiver (USB) (x32 Version: 13.4.0.25)
Citrix Receiver (x32 Version: 13.4.0.25)
Citrix Receiver Inside (x32 Version: 3.4.0.29585)
Citrix Receiver Updater (x32 Version: 3.4.0.29577)
Citrix Receiver(Aero) (x32 Version: 13.4.0.25)
Conexant 20672 SmartAudio HD (Version: 8.32.23.0)
Corel WinDVD (x32 Version: 10.0.5.828)
Create Recovery Media (x32 Version: 1.20.0.00)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7 (Version: 1.00)
EasyRotator Wizard (x32 Version: 1.0.123)
EasyTax 2012 AG 1.02 (x32 Version: 1.02)
Evernote v. 4.2.3 (x32 Version: 4.2.3.15)
Free Audio Converter version 5.0.15.706 (x32 Version: 5.0.15.706)
Free DVD Video Converter version 2.0.9.706 (x32 Version: 2.0.9.706)
Free Video to Flash Converter version 5.0.15.706 (x32 Version: 5.0.15.706)
Free YouTube Download version 3.1.42.1212 (x32 Version: 3.1.42.1212)
Free YouTube to MP3 Converter version 3.11.37.1212 (x32 Version: 3.11.37.1212)
Google Chrome (x32 Version: 30.0.1599.69)
Google Earth Plug-in (x32 Version: 7.1.1.1888)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54)
Google Update Helper (x32 Version: 1.3.21.165)
IB Updater Service (x32 Version: 4.0.7.4)
Integrated Camera Driver Installer Package Ver.1.1.0.1147 (x32 Version: 1.1.0.1147)
Integrated Camera TWAIN (x32 Version: 1.0.11.1223)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Identity Protection Technology 1.1.2.0 (x32 Version: 1.1.2.0)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2321)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.2.0000)
Internet Explorer Toolbar 4.6 by SweetPacks (x32 Version: 4.6.0003)
iTunes (Version: 10.6.3.25)
Kalender-Excel-8.8 (x32 Version: 8.8)
Lenovo Auto Scroll Utility (Version: 1.10)
Lenovo Patch Utility (x32 Version: 1.0.1.1)
Lenovo Patch Utility 64 bit (Version: 1.2.0.1)
Lenovo Registration (x32 Version: 1.0.4)
Lenovo SimpleTap (Version: 3.0.0010.00)
Lenovo System Interface Driver (Version: 1.05)
Lenovo ThinkVantage Toolbox (Version: 6.0.5849.23)
Lenovo User Guide (x32 Version: 1.0.0008.00)
Lenovo Warranty Information (x32 Version: 1.0.0005.00)
Lenovo Welcome (x32 Version: 3.00.006.0)
Macromedia Contribute 3 (x32 Version: 3.0.2.2326)
Macromedia Dreamweaver 8 (x32 Version: 8.0.0.2751)
Macromedia Extension Manager (x32 Version: 1.7.270)
Macromedia Fireworks 8 (x32 Version: 8.0.0.777)
Macromedia Flash 8 (x32 Version: 8.00.0000)
Macromedia Flash 8 Video Encoder (x32 Version: 1.00.0000)
Macromedia HomeSite+ (x32)
Message Center Plus (x32 Version: 2.0.0012.00)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook Connector (x32 Version: 14.0.5118.5000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SkyDrive (HKCU Version: 16.4.6013.0910)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nur Entfernen der CopyTrans Suite möglich (HKCU Version: 2.36)
NVIDIA 3D Vision Treiber 306.97 (Version: 306.97)
NVIDIA Grafiktreiber 306.97 (Version: 306.97)
NVIDIA HD-Audiotreiber 1.2.23.3 (Version: 1.2.23.3)
NVIDIA Install Application (Version: 2.1002.85.551)
NVIDIA Optimus 1.10.8 (Version: 1.10.8)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.0697)
NVIDIA Systemsteuerung 306.97 (Version: 306.97)
NVIDIA Update Components (Version: 1.10.8)
On Screen Display (Version: 6.50.00)
Online Plug-in (x32 Version: 13.4.0.25)
PDF Settings CS5 (x32 Version: 10.0)
PDFCreator (x32 Version: 1.2.3)
Picasa 3 (x32 Version: 3.9)
Private Tax 2011 1.4 (x32 Version: 1.4)
Programmer's Notepad (x32 Version: 2.3.4.2350)
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14)
QuickTime (x32 Version: 7.73.80.64)
R for Windows 2.14.1 (Version: 2.14.1)
RapidBoot (Version: 1.11)
Readiris Pro 10 (x32)
Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (Version: 1.00)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0)
RICOH_Media_Driver_v2.14.18.01 (x32 Version: 2.14.18.01)
Samsung CLX-3170 Series (x32)
Secure Download Manager (x32 Version: 3.0.3)
Self-Service Plug-in (x32 Version: 3.4.0.33684)
SimilarWeb (x32 Version: 0.0.0.1)
SmarThru 4 (x32)
SmarThru PC Fax (x32)
SweetIM for Messenger 3.7 (x32 Version: 3.7.0005)
Swisscom Quick Help (x32 Version: 3.3.2.340)
System Update (x32 Version: 4.01.0015)
TDM-GCC (x32 Version: 1.1006.0)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 6.4.0.1500)
ThinkPad FullScreen Magnifier (Version: 2.40)
ThinkPad Modem Adapter (Version: 7.80.5.0)
ThinkPad Power Management Driver (Version: 1.61.00.11)
ThinkPad Power Manager (x32 Version: 3.63)
ThinkPad UltraNav Driver (Version: 15.3.8.0)
ThinkPad UltraNav Utility (x32 Version: 2.13.0)
ThinkVantage Active Protection System (Version: 1.73)
ThinkVantage AutoLock (Version: 1.03)
ThinkVantage Communications Utility (Version: 2.07)
ThinkVantage Fingerprint Software (Version: 5.9.4.6882)
Tinn-R 2.3.7.1 (x32)
TopStyle Lite (Version 3.0) (x32 Version: 3.1.0)
Unlimited Data Manager 10.0.0 (x32 Version: 10.0.21168.0)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2494150) (x32)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2827325) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
Update Manager for SweetPacks 1.0 (x32 Version: 1.0.0005)
VIP Access (x32 Version: 2.0.2.140)
VLC media player 2.0.2 (x32 Version: 2.0.2)
Wajam (x32 Version: 1.76)
Windows Driver Package - Intel (e1cexpress) Net  (12/21/2010 11.8.84.0) (Version: 12/21/2010 11.8.84.0)
Windows Driver Package - Intel System  (09/10/2010 9.2.0.1011) (Version: 09/10/2010 9.2.0.1011)
Windows Driver Package - Intel System  (11/20/2010 9.2.0.1016) (Version: 11/20/2010 9.2.0.1016)
Windows Driver Package - Intel USB  (12/21/2010 9.2.0.1021) (Version: 12/21/2010 9.2.0.1021)
Windows Driver Package - Lenovo 1.61.00.11 (11/11/2010 1.61.00.11) (Version: 11/11/2010 1.61.00.11)
Windows Driver Package - Synaptics (SynTP) Mouse  (05/19/2011 15.3.8.0) (Version: 05/19/2011 15.3.8.0)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows XP Mode (Version: 1.3.7600.16422)
WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0)
WinVPP 1.3.4 (x32 Version: 1.3.4)
Wondershare Vivideo(Build 2.0.0.12) (x32)

==================== Restore Points  =========================

15-09-2013 08:24:19 Geplanter Prüfpunkt
15-09-2013 09:45:46 Windows Update
22-09-2013 18:37:41 Geplanter Prüfpunkt
24-09-2013 01:00:27 Windows Update
03-10-2013 09:32:13 Macromedia Dreamweaver 8 wird entfernt
03-10-2013 09:41:15 Macromedia Dreamweaver 8 wird installiert
03-10-2013 10:01:21 Macromedia Dreamweaver 8 wird entfernt
03-10-2013 10:10:13 Macromedia Dreamweaver 8 wird installiert
12-10-2013 01:00:50 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0BC77D44-74FA-455A-B587-E73CE62C5990} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-13] (Google Inc.)
Task: {11EF87FA-F5C4-4F01-89D7-E8ECB43B7D7C} - System32\Tasks\MCP => C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-28] ()
Task: {3BE08FEC-0FC8-441D-939E-C609A500E540} - System32\Tasks\AdobeAAMUpdater-1.0-Sabrina-THINK-Sabrina => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {3D74BFA3-1C0A-4739-B737-FCDF6999E8B4} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2011-12-21] (Lenovo)
Task: {73978FBE-6EAD-4932-8803-2008ACAD057D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated)
Task: {7629E501-D646-44BF-8DF0-85E237916E4B} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {7EBBFFA8-F9C9-4534-8D6D-8A9AC2815D03} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {94B59A78-1266-4B6B-983C-AA7837A977BC} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {957D2B91-634E-4D2B-9EE4-85AE74F41DFC} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {C32FF76B-6D11-4288-8203-8954890ED5EB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {DBC194AD-8A8E-4AAA-BFE4-C43BFCEBA7C5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-13] (Google Inc.)
Task: {EF259D21-F761-4E73-8FA3-F6DDC6A2B365} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PWMIDTSV.EXE [2011-08-31] (Lenovo Group Limited)
Task: {F2E147F1-A5C9-45E3-B2D9-9940C0B51F8D} - System32\Tasks\Lenovo\SimpleTap\Start SimpleTap for Sabrina-THINK.Sabrina => C:\Program Files\Lenovo\SimpleTap\SimpleTap.exe [2011-12-21] (Lenovo)
Task: {F3B604C6-B7CE-4E96-B52F-0B4A5F5B3B23} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/17/2013 09:24:14 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_WbioSrvc, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1677
Ausnahmecode: 0x80004004
Fehleroffset: 0x000000000000940d
ID des fehlerhaften Prozesses: 0x7f4
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_WbioSrvc0
Pfad der fehlerhaften Anwendung: svchost.exe_WbioSrvc1
Pfad des fehlerhaften Moduls: svchost.exe_WbioSrvc2
Berichtskennung: svchost.exe_WbioSrvc3

Error: (10/17/2013 09:20:29 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/17/2013 08:56:59 PM) (Source: PC-Doctor) (User: )
Description: (15072) Asapi: (20:56:59:3020)(15072) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12007) failed with error: 317

Error: (10/17/2013 08:56:59 PM) (Source: PC-Doctor) (User: )
Description: (15072) Asapi: (20:56:59:2710)(15072) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12007) failed with error: 317

Error: (10/15/2013 06:25:55 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2028

Error: (10/15/2013 06:25:55 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2028

Error: (10/15/2013 06:25:55 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (10/15/2013 06:25:54 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1030

Error: (10/15/2013 06:25:54 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1030

Error: (10/15/2013 06:25:54 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (10/17/2013 09:24:19 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Windows-Biometriedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/17/2013 09:24:18 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (10/17/2013 09:24:18 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (10/17/2013 09:24:10 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (10/17/2013 09:24:01 PM) (Source: BROWSER) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{E089CE53-2835-477B-AD7E-785AC58EF460}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.

Error: (10/17/2013 09:23:58 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (10/17/2013 09:20:09 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%20

Error: (10/17/2013 09:09:53 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (10/17/2013 09:03:35 PM) (Source: BROWSER) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{E089CE53-2835-477B-AD7E-785AC58EF460}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.

Error: (10/16/2013 09:11:05 PM) (Source: BROWSER) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{E089CE53-2835-477B-AD7E-785AC58EF460}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.


Microsoft Office Sessions:
=========================
Error: (07/22/2013 01:47:56 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 52 seconds with 0 seconds of active time.  This session ended with a crash.

Machiavelli · 18.05.2014, 20:38

Wo ist das Malwarebytes Log?

MBAM-Funde posten: So gehts...
Manchmal ist es wichtig zu wissen, welche Schadprogramme im Vorfeld ohne Anweisung der Helfer schon gelöscht wurden.
Daher benötige ich den Inhalt der Logdatei, in welcher der Suchlauf protokolliert wurde.

Starte MBAM.
Klicke auf Verlauf.
Klicke auf Anwendungsprotokolle.
Klicke auf das letzte Suchlaufprotokoll mit Funden.
Klicke auf "In Zwischenablage kopieren".
Poste den Inhalt in Code-Tags [CODE] [/CODE] durch Einfügen mit Strg+V als Antwort in Deinen Thread.

schnüffel · 18.05.2014, 20:48

Code:

ATTFilter

Malwarebytes Anti-Malware 2.0.1.1004

Improvements:
•   Database is now updated automatically after installation
•   Notifications are no longer displayed if the Dashboard is in focus to reduce redundant information
•   Significantly reduced the size of all tray notifications
•   Reduced the intensity of the colors used for tray notifications and status banners in the Dashboard
•   Database out of date and scan has never been run notifications now reduced in severity to orange instead of red

Issues Fixed:
•   All scheduled scans should now run without popping up the main UI so that users are not interrupted

Machiavelli · 18.05.2014, 20:54

Das ist das falsche Log. Siehe Post #6, da ist ne Anleitung, wie man ein MBAM Log postet.

schnüffel · 18.05.2014, 20:56

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 18.05.2014
Suchlauf-Zeit: 20:39:06
Logdatei: 
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.03.04.09
Rootkit Datenbank: v2014.02.20.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Sabrina

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 314237
Verstrichene Zeit: 20 Min, 37 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 1
PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT, In Quarantäne, [b990d9268cee0531747e169bbb485ea2], 

Registrierungswerte: 1
PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT|URL, MYSTART, In Quarantäne, [b990d9268cee0531747e169bbb485ea2]

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 1
PUP.Optional.Babylon.A, C:\Users\Sabrina\Downloads\Unlocker1.9.2.exe, In Quarantäne, [1f2ae01fb2c82e0832ab460129d820e0], 

Physische Sektoren: 0
(No malicious items detected)


(end)

Machiavelli · 18.05.2014, 21:07

Hey,

Schritt 1: FRST Fix

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: YoutubeAdblocker - {159BC49F-2CD6-4CB7-932B-1027665E58BD} - C:\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll No File
BHO: greaotssaVer - {4F72390C-3192-91EF-ECD9-D90061D298A2} - C:\Program Files (x86)\greaotssaVer\2ZKW9c.x64.dll No File
BHO: SNT - {847493A0-9B57-E1D5-FE2C-CC1B12BC46CB} - C:\Program Files (x86)\SNT\p7T2DTlA.x64.dll No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
2014-05-07 20:02 - 2014-05-07 20:03 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe
2014-05-18 19:30 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\fc124d4af23c6577
C:\Users\Sabrina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp40zz8g.dll
C:\Users\Sabrina\AppData\Local\Temp\IrsoDLL.dll
C:\Users\Sabrina\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Sabrina\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Sabrina\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Sabrina\AppData\Local\Temp\nvStInst.exe
C:\Users\Sabrina\AppData\Local\Temp\Quarantine.exe
C:\Users\Sabrina\AppData\Local\Temp\Risweb32.exe

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2: FRST Scan

Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

Schritt 3: TFC

Lade dir

TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

Öffne die TFC.exe.
Vista und Win 7 User mit Rechtsklick "als Administrator starten".
Schließe alle anderen Programme.
Drücke auf den Button Start.
Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Schritt 4: ESET

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 5: Frage

Wie läuft Dein System?

schnüffel · 18.05.2014, 21:17

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-05-2014
Ran by Sabrina at 2014-05-18 22:13:24 Run:2
Running from C:\Users\Sabrina\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 18.05.2014
Suchlauf-Zeit: 20:39:06
Logdatei: 
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.03.04.09
Rootkit Datenbank: v2014.02.20.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Sabrina

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 314237
Verstrichene Zeit: 20 Min, 37 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 1
PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT, In Quarantäne, [b990d9268cee0531747e169bbb485ea2], 

Registrierungswerte: 1
PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT|URL, MYSTART, In Quarantäne, [b990d9268cee0531747e169bbb485ea2]

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 1
PUP.Optional.Babylon.A, C:\Users\Sabrina\Downloads\Unlocker1.9.2.exe, In Quarantäne, [1f2ae01fb2c82e0832ab460129d820e0], 

Physische Sektoren: 0
(No malicious items detected)


(end)
*****************


==== End of Fixlog ====

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Sabrina (administrator) on SABRINA-THINK on 18-05-2014 22:14:05
Running from C:\Users\Sabrina\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(UPEK Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Swisscom) C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe
(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe
(Swisscom) C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ZOOM\TpScrex.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Avanquest Software ) C:\Program Files (x86)\Digital Line Detect\DLG.exe
(Dropbox, Inc.) C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Swisscom) C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\System Update\SUService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe
() C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2789160 2011-05-19] (Synaptics Incorporated)
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [380776 2010-12-09] (Lenovo.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2011-03-14] (Conexant systems, Inc.)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [40808 2011-05-31] (Lenovo Group Limited)
HKLM\...\Run: [ALCKRESI.EXE] => C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE [281960 2011-05-26] (Lenovo Group Limited)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-31] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [112152 2011-01-17] (Intel Corporation)
HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-14] (Lenovo, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Samsung PanelMgr] => C:\Windows\Samsung\PanelMgr\ssmmgr.exe [606208 2009-10-13] ()
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)
HKLM-x32\...\Run: [Swisscom Quick Help] => C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe [16668080 2013-10-02] (Swisscom)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (UPEK Inc.)
HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [LTT] => C:\Program Files\PC-Doctor\EnableToolbarW32.exe [23120 2011-06-27] (PC-Doctor, Inc.)
HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [AppSafe] => C:\Program Files (x86)\AppSafe\AppSafe.exe
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs: , C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk
ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files (x86)\Digital Line Detect\DLG.exe (Avanquest Software )
Startup: C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

ProxyServer: proxy.lfrz.at:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
URLSearchHook: HKLM-x32 - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}
URLSearchHook: HKCU - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_deCH472
BHO: YoutubeAdblocker - {159BC49F-2CD6-4CB7-932B-1027665E58BD} - C:\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll No File
BHO: greaotssaVer - {4F72390C-3192-91EF-ECD9-D90061D298A2} - C:\Program Files (x86)\greaotssaVer\2ZKW9c.x64.dll No File
BHO: SNT - {847493A0-9B57-E1D5-FE2C-CC1B12BC46CB} - C:\Program Files (x86)\SNT\p7T2DTlA.x64.dll No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{D5A2C57D-7554-4054-AE53-57D7A4D0B831}: [NameServer]195.186.216.33 195.186.152.33

FireFox:
========
FF ProfilePath: C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default
FF Homepage: https://www.google.ch/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Swisscom Quick Help - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\{6A6114A5-EEF5-45F4-BCD1-B00A7B33E04B} [2014-01-13]
FF Extension: Firebug - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\firebug@software.joehewitt.com.xpi [2013-02-17]
FF HKLM-x32\...\Firefox\Extensions: [VIP@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client\
FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\ []
FF HKLM-x32\...\Firefox\Extensions: [{E4D8AFFF-DA7C-412F-A976-05ED142C7806}] - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\
FF Extension: Unlimited Data Manager - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Extension: (YTBBookMark) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\amabcieebhjofcnbdphdmfkfcdgfilgk [2014-01-04]
CHR Extension: (YouTube) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-02-25]
CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij [2014-01-04]
CHR Extension: (Google Search) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-02-25]
CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpicgdnjfnbkibnicdnnpkkpklkjkki [2013-04-12]
CHR Extension: (Speedy Shopper) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ganlifbpkcplnldliibcbegplfmcfigp [2014-01-04]
CHR Extension: (SNT) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcgmnfaeohlofnjigiimjlbjleaomlei [2014-01-04]
CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcjmphdcljedddkheginnckbjccchepe [2014-05-16]
CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba [2014-01-04]
CHR Extension: (Norton Identity Protection) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2012-02-25]
CHR Extension: (Gmail) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-02-25]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-01-15]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [478056 2011-08-31] (Lenovo.)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2513752 2014-03-04] ()
R2 SesamService; C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe [1482240 2011-05-16] (Swisscom)
R2 SwiCardDetectSvc; C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe [307568 2010-09-22] (Sierra Wireless, Inc.)
R2 UDM Service; C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe [182128 2011-05-20] (Swisscom)
R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [82544 2011-06-30] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-25] (Samsung Electronics Co., Ltd.)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2011-02-18] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-18] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [301512 2014-03-04] (NVIDIA Corporation)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13840 2009-03-13] (UPEK Inc.)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [41536 2009-09-24] (Lenovo (United States) Inc.)
R3 WtSmpAdap; C:\Windows\System32\DRIVERS\wtsmpadap.sys [56688 2011-04-11] (Swisscom)
R1 WtSmpFlt; C:\Windows\System32\DRIVERS\wtsmpflt.sys [409456 2011-04-11] (Swisscom)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 vpnva; system32\DRIVERS\vpnva64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-18 22:14 - 2014-05-18 22:14 - 00448512 _____ (OldTimer Tools) C:\Users\Sabrina\Downloads\TFC.exe
2014-05-18 21:17 - 2014-05-18 21:17 - 00001065 _____ () C:\Users\Sabrina\Desktop\JRT.txt
2014-05-18 20:44 - 2014-05-18 20:44 - 01016261 _____ (Thisisu) C:\Users\Sabrina\Downloads\JRT(2).exe
2014-05-18 20:17 - 2014-05-18 20:40 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-18 20:17 - 2014-05-18 20:17 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-18 20:17 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-18 20:17 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-18 20:17 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-18 20:16 - 2014-05-18 20:16 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Sabrina\Downloads\mbam-setup-2.0.1.1004.exe
2014-05-18 20:08 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-18 20:07 - 2014-05-18 20:07 - 01328723 _____ () C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe
2014-05-18 19:20 - 2014-05-18 22:14 - 00023140 _____ () C:\Users\Sabrina\Desktop\FRST.txt
2014-05-16 23:17 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-16 23:17 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-16 23:17 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-16 23:17 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-16 23:17 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-16 23:17 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-13 21:16 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-13 21:16 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-13 21:16 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-13 21:16 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-13 21:15 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-13 21:15 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-13 21:15 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-13 21:15 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-13 21:15 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-13 21:15 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-13 21:15 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-13 21:15 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-13 21:15 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-13 21:15 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-13 21:15 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-13 21:15 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-13 21:15 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-13 21:15 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-13 21:15 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-13 21:15 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-07 20:02 - 2014-05-07 20:03 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe
2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd
2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe
2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe
2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe
2014-05-05 07:40 - 2014-05-05 08:07 - 00000000 ____D () C:\Program Files (x86)\CrossFnt
2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe
2014-05-05 07:32 - 2014-05-05 07:32 - 00050473 ____R () C:\Users\Sabrina\Desktop\schriften.zipx
2014-05-04 22:15 - 2014-05-18 19:31 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit
2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense
2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe
2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-04 21:41 - 2014-05-13 00:13 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job
2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe
2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml
2014-05-04 21:34 - 2012-05-15 07:13 - 00144896 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2014-05-04 21:34 - 2012-05-15 06:20 - 00104448 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\system32\NV
2014-05-04 21:28 - 2014-05-04 21:31 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe
2014-05-04 21:25 - 2014-03-04 20:35 - 02513752 _____ () C:\Windows\system32\nvwmi64.exe
2014-05-04 21:25 - 2014-03-04 20:35 - 00004084 _____ () C:\Windows\system32\nvPerfProvider.man
2014-05-04 21:25 - 2014-03-04 18:17 - 00595232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA
2014-05-04 21:23 - 2014-03-04 20:35 - 30389192 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 25257816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 22973896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 18312672 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 18225104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 15879264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 15232424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 12672288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-05-04 21:23 - 2014-03-04 20:35 - 11638736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 11587736 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 09731624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 09688888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 03131848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 03123544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 02936152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 02752856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 01883480 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433276.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433276.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 01249080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00888776 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00880984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00860104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00850888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00301512 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvkflt.sys
2014-05-04 21:23 - 2014-03-04 20:35 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00031576 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-05-04 21:18 - 2014-05-04 21:22 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe
2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf
2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)
2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)
2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)
2014-05-04 20:04 - 2014-05-04 20:05 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf
2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp
2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf
2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip
2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\WinZip
2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\Program Files\WinZip
2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi
2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx
2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor
2014-05-04 18:26 - 2014-05-04 21:08 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-05-04 18:26 - 2014-05-04 18:29 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI
2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe
2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe
2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files
2014-05-04 18:13 - 2014-05-04 18:14 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi
2014-05-04 18:08 - 2014-05-04 18:09 - 00000020 _____ () C:\Windows\ø÷Í
2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸
2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe
2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener
2014-05-04 17:02 - 2014-05-04 17:07 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe
2014-05-04 16:44 - 2014-05-17 00:24 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-04 16:44 - 2014-05-04 16:46 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe
2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster
2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe
2014-05-03 08:33 - 2012-09-18 15:27 - 00501760 _____ () C:\Windows\system32\ZSHP1020.EXE
2014-05-03 08:33 - 2012-09-18 15:27 - 00192512 _____ () C:\Windows\system32\ZLhp1020.DLL
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe
2014-04-22 03:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 03:00 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 03:00 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 03:00 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 03:00 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 03:00 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 03:00 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 03:00 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 03:00 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 03:00 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 03:00 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 03:00 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 03:00 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 03:00 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 03:00 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 03:00 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 03:00 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 03:00 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 03:00 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 03:00 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 03:00 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 03:00 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 03:00 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 03:00 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 03:00 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 03:00 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 03:00 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 03:00 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 03:00 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 03:00 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 03:00 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 03:00 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 03:00 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 03:00 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 03:00 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 03:00 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 03:00 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 03:00 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 03:00 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 03:00 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 03:00 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 03:00 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 03:00 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

==================== One Month Modified Files and Folders =======

2014-05-18 22:14 - 2014-05-18 22:14 - 00448512 _____ (OldTimer Tools) C:\Users\Sabrina\Downloads\TFC.exe
2014-05-18 22:14 - 2014-05-18 19:20 - 00023140 _____ () C:\Users\Sabrina\Desktop\FRST.txt
2014-05-18 22:14 - 2013-10-17 22:06 - 00000000 ____D () C:\FRST
2014-05-18 22:01 - 2012-04-06 14:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-18 21:35 - 2012-02-13 09:42 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-18 21:17 - 2014-05-18 21:17 - 00001065 _____ () C:\Users\Sabrina\Desktop\JRT.txt
2014-05-18 20:48 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-18 20:48 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-18 20:45 - 2012-02-13 08:16 - 00705124 _____ () C:\Windows\system32\perfh007.dat
2014-05-18 20:45 - 2012-02-13 08:16 - 00151492 _____ () C:\Windows\system32\perfc007.dat
2014-05-18 20:45 - 2009-07-14 07:13 - 01629508 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-18 20:44 - 2014-05-18 20:44 - 01016261 _____ (Thisisu) C:\Users\Sabrina\Downloads\JRT(2).exe
2014-05-18 20:44 - 2012-02-13 08:46 - 01532887 _____ () C:\Windows\WindowsUpdate.log
2014-05-18 20:42 - 2012-04-03 22:35 - 00000000 ___RD () C:\Users\Sabrina\Dropbox
2014-05-18 20:42 - 2012-04-03 22:34 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Dropbox
2014-05-18 20:41 - 2012-02-13 09:42 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-18 20:40 - 2014-05-18 20:17 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-18 20:40 - 2014-01-04 19:04 - 00000464 ____H () C:\Windows\Tasks\GS.Enabler-S-926685765.job
2014-05-18 20:40 - 2012-02-13 09:01 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-18 20:40 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-18 20:40 - 2009-07-14 06:51 - 00117419 _____ () C:\Windows\setupact.log
2014-05-18 20:39 - 2010-11-21 05:47 - 00922862 _____ () C:\Windows\PFRO.log
2014-05-18 20:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Web
2014-05-18 20:17 - 2014-05-18 20:17 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-18 20:17 - 2013-10-21 14:04 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-18 20:16 - 2014-05-18 20:16 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Sabrina\Downloads\mbam-setup-2.0.1.1004.exe
2014-05-18 20:11 - 2012-02-25 18:46 - 00000466 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job
2014-05-18 20:10 - 2013-10-21 14:25 - 00000000 ____D () C:\AdwCleaner
2014-05-18 20:07 - 2014-05-18 20:07 - 01328723 _____ () C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe
2014-05-18 19:56 - 2012-02-25 18:46 - 00003506 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest
2014-05-18 19:56 - 2012-02-25 18:46 - 00003448 _____ () C:\Windows\System32\Tasks\PCDEventLauncher
2014-05-18 19:31 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit
2014-05-18 19:30 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\fc124d4af23c6577
2014-05-18 19:19 - 2014-01-31 18:47 - 02067456 _____ (Farbar) C:\Users\Sabrina\Desktop\FRST64.exe
2014-05-18 19:19 - 2014-01-31 18:47 - 00000000 ____D () C:\Users\Sabrina\Desktop\FRST-OlderVersion
2014-05-18 18:39 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\UDM
2014-05-17 08:06 - 2013-03-12 15:20 - 00000000 ___RD () C:\Users\Sabrina\Virtual Machines
2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-17 00:24 - 2014-05-04 16:44 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-17 00:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-16 23:17 - 2012-02-25 11:19 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-16 23:16 - 2013-08-02 03:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-16 23:11 - 2012-08-29 07:47 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-16 23:11 - 2012-02-25 12:07 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Adobe
2014-05-16 23:04 - 2013-12-01 21:48 - 00001040 _____ () C:\Users\Sabrina\Desktop\Dropbox.lnk
2014-05-16 23:04 - 2013-12-01 21:47 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-14 21:01 - 2012-04-06 14:52 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 21:01 - 2012-04-06 14:52 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 21:01 - 2012-02-27 19:10 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-13 21:01 - 2012-02-25 11:40 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-13 00:13 - 2014-05-04 21:41 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job
2014-05-11 09:04 - 2012-05-22 17:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-11 01:34 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\WtDashboard
2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-10 15:18 - 2012-06-23 19:00 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Apple Computer
2014-05-10 00:23 - 2009-07-14 06:45 - 05256976 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-09 08:14 - 2014-05-13 21:16 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-13 21:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-08 23:30 - 2012-02-13 09:42 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-08 23:30 - 2012-02-13 09:42 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-08 18:32 - 2012-03-01 12:27 - 00011311 _____ () C:\Users\Sabrina\AppData\Roaming\SmarThruOptions.xml
2014-05-07 20:03 - 2014-05-07 20:02 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe
2014-05-06 06:40 - 2014-05-16 23:17 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-16 23:17 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-16 23:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-16 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-05 12:03 - 2012-02-25 18:47 - 00118016 _____ () C:\Users\Sabrina\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-05 11:59 - 2014-02-28 10:48 - 00000000 ____D () C:\Users\Sabrina\Documents\BVA
2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd
2014-05-05 08:07 - 2014-05-05 07:40 - 00000000 ____D () C:\Program Files (x86)\CrossFnt
2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe
2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe
2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe
2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe
2014-05-05 07:32 - 2014-05-05 07:32 - 00050473 ____R () C:\Users\Sabrina\Desktop\schriften.zipx
2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense
2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe
2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-04 21:45 - 2012-02-13 09:43 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-05-04 21:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-05-04 21:43 - 2012-02-13 09:43 - 00204593 _____ () C:\Windows\DirectX.log
2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe
2014-05-04 21:41 - 2012-04-15 11:40 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Windows Live
2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml
2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\system32\NV
2014-05-04 21:34 - 2012-02-13 08:54 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\ProgramData\Intel
2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-05-04 21:31 - 2014-05-04 21:28 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe
2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA
2014-05-04 21:22 - 2014-05-04 21:18 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe
2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor
2014-05-04 21:08 - 2014-05-04 18:26 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf
2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)
2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)
2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)
2014-05-04 20:05 - 2014-05-04 20:04 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf
2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp
2014-05-04 19:46 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf
2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip
2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\ProgramData\WinZip
2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\Program Files\WinZip
2014-05-04 19:21 - 2012-02-25 18:45 - 00000000 ____D () C:\Users\Sabrina
2014-05-04 19:21 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi
2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx
2014-05-04 18:29 - 2014-05-04 18:26 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI
2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe
2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe
2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files
2014-05-04 18:14 - 2014-05-04 18:13 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi
2014-05-04 18:09 - 2014-05-04 18:08 - 00000020 _____ () C:\Windows\ø÷Í
2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸
2014-05-04 17:49 - 2012-03-06 07:54 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\CrashDumps
2014-05-04 17:37 - 2010-11-21 09:16 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe
2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener
2014-05-04 17:07 - 2014-05-04 17:02 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe
2014-05-04 16:46 - 2014-05-04 16:44 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe
2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster
2014-05-04 16:38 - 2012-02-25 18:46 - 00000528 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe
2014-04-29 09:42 - 2012-02-25 18:46 - 00004246 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2014-04-22 03:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

Some content of TEMP:
====================
C:\Users\Sabrina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp40zz8g.dll
C:\Users\Sabrina\AppData\Local\Temp\IrsoDLL.dll
C:\Users\Sabrina\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Sabrina\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Sabrina\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Sabrina\AppData\Local\Temp\nvStInst.exe
C:\Users\Sabrina\AppData\Local\Temp\Quarantine.exe
C:\Users\Sabrina\AppData\Local\Temp\Risweb32.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-05-13 21:15] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-10 17:39

==================== End Of Log ============================

--- --- ---

--- --- ---

Machiavelli · 18.05.2014, 21:23

Warum mixt Du FRST Fixlog mit dem Malwarebytes Log?

schnüffel · 19.05.2014, 06:18

Sorry, war der Meinung ich hab alles der Reihe nach gepostet.
Das ESET File folgt noch.
Herzlichen Dank für die Hilfe!

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=68b1296e4aba0d41a86cb19270476a99
# engine=16796
# end=stopped
# remove_checked=false
# archives_checked=false
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-25 03:26:34
# local_time=2014-01-25 04:26:34 (+0100, Mitteleuropäische Zeit)
# country="Switzerland"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 24588 142293444 0 0
# scanned=138102
# found=6
# cleaned=0
# scan_time=4842
sh=147FA4281120C99BA14DC5D5951C1A2972BDE759 ft=1 fh=c71c0011c04eb408 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YoutubeAdblocker\_2iD.dll.vir"
sh=8E518927746CD24C92DFACD4EA709E7154F43D56 ft=1 fh=c71c00119c47ca32 vn="Variante von Win64/Adware.MultiPlug.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll.vir"
sh=13FFDBAB9F8DF78798EE14AB2640F21EB7DEAA67 ft=1 fh=c71c0011a169624a vn="Variante von Win32/AdWare.MultiPlug.K.gen Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\YoutubeAdblocker\FvjZh.exe.vir"
sh=147FA4281120C99BA14DC5D5951C1A2972BDE759 ft=1 fh=c71c0011c04eb408 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung" ac=I fn="C:\FRST\Quarantine\greaotssaVer\2ZKW9c.dll"
sh=8E518927746CD24C92DFACD4EA709E7154F43D56 ft=1 fh=c71c00119c47ca32 vn="Variante von Win64/Adware.MultiPlug.A Anwendung" ac=I fn="C:\FRST\Quarantine\greaotssaVer\2ZKW9c.x64.dll"
sh=7BC4998793462E1932A4F74E3A139DCDDA7653C6 ft=1 fh=19edba72960273eb vn="möglicherweise unbekannter Virus NewHeur_PE Virus" ac=I fn="C:\Program Files (x86)\Swisscom\Quick Help\m2mupdate.exe"
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=68b1296e4aba0d41a86cb19270476a99
# engine=16796
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-25 07:22:47
# local_time=2014-01-25 08:22:47 (+0100, Mitteleuropäische Zeit)
# country="Switzerland"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 38761 142307617 0 0
# scanned=249809
# found=6
# cleaned=6
# scan_time=3520
sh=147FA4281120C99BA14DC5D5951C1A2972BDE759 ft=1 fh=c71c0011c04eb408 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YoutubeAdblocker\_2iD.dll.vir"
sh=8E518927746CD24C92DFACD4EA709E7154F43D56 ft=1 fh=c71c00119c47ca32 vn="Variante von Win64/Adware.MultiPlug.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll.vir"
sh=13FFDBAB9F8DF78798EE14AB2640F21EB7DEAA67 ft=1 fh=c71c0011a169624a vn="Variante von Win32/AdWare.MultiPlug.K.gen Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\YoutubeAdblocker\FvjZh.exe.vir"
sh=147FA4281120C99BA14DC5D5951C1A2972BDE759 ft=1 fh=c71c0011c04eb408 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\greaotssaVer\2ZKW9c.dll"
sh=8E518927746CD24C92DFACD4EA709E7154F43D56 ft=1 fh=c71c00119c47ca32 vn="Variante von Win64/Adware.MultiPlug.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\greaotssaVer\2ZKW9c.x64.dll"
sh=7BC4998793462E1932A4F74E3A139DCDDA7653C6 ft=1 fh=19edba72960273eb vn="möglicherweise unbekannter Virus NewHeur_PE Virus (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Program Files (x86)\Swisscom\Quick Help\m2mupdate.exe"
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=68b1296e4aba0d41a86cb19270476a99
# engine=18315
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-05-19 12:08:33
# local_time=2014-05-19 02:08:33 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 13994 152087963 0 0
# scanned=248730
# found=1
# cleaned=0
# scan_time=13511
sh=70622B1220013C8A7EF9B55FA2C840B4D3CF5A8D ft=1 fh=c71c0011adaa876f vn="Variante von Win32/AdWare.MultiPlug.K.gen Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\CaheoapMee\NwfY2HOswh.exe.vir"

Machiavelli · 19.05.2014, 15:18

Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

schnüffel · 19.05.2014, 22:07

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Sabrina (administrator) on SABRINA-THINK on 19-05-2014 23:03:23
Running from C:\Users\Sabrina\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(UPEK Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Swisscom) C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe
(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe
(Swisscom) C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\System Update\SUService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2789160 2011-05-19] (Synaptics Incorporated)
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [380776 2010-12-09] (Lenovo.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2011-03-14] (Conexant systems, Inc.)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [40808 2011-05-31] (Lenovo Group Limited)
HKLM\...\Run: [ALCKRESI.EXE] => C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE [281960 2011-05-26] (Lenovo Group Limited)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-31] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [112152 2011-01-17] (Intel Corporation)
HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-14] (Lenovo, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Samsung PanelMgr] => C:\Windows\Samsung\PanelMgr\ssmmgr.exe [606208 2009-10-13] ()
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)
HKLM-x32\...\Run: [Swisscom Quick Help] => C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe [16668080 2013-10-02] (Swisscom)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (UPEK Inc.)
HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [LTT] => C:\Program Files\PC-Doctor\EnableToolbarW32.exe [23120 2011-06-27] (PC-Doctor, Inc.)
HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [AppSafe] => C:\Program Files (x86)\AppSafe\AppSafe.exe
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs: , C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk
ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files (x86)\Digital Line Detect\DLG.exe (Avanquest Software )
Startup: C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

ProxyServer: proxy.lfrz.at:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
URLSearchHook: HKLM-x32 - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}
URLSearchHook: HKCU - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_deCH472
BHO: YoutubeAdblocker - {159BC49F-2CD6-4CB7-932B-1027665E58BD} - C:\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll No File
BHO: greaotssaVer - {4F72390C-3192-91EF-ECD9-D90061D298A2} - C:\Program Files (x86)\greaotssaVer\2ZKW9c.x64.dll No File
BHO: SNT - {847493A0-9B57-E1D5-FE2C-CC1B12BC46CB} - C:\Program Files (x86)\SNT\p7T2DTlA.x64.dll No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{D5A2C57D-7554-4054-AE53-57D7A4D0B831}: [NameServer]195.186.216.33 195.186.152.33

FireFox:
========
FF ProfilePath: C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default
FF Homepage: https://www.google.ch/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Swisscom Quick Help - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\{6A6114A5-EEF5-45F4-BCD1-B00A7B33E04B} [2014-01-13]
FF Extension: Firebug - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\firebug@software.joehewitt.com.xpi [2013-02-17]
FF HKLM-x32\...\Firefox\Extensions: [VIP@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client\
FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\ []
FF HKLM-x32\...\Firefox\Extensions: [{E4D8AFFF-DA7C-412F-A976-05ED142C7806}] - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\
FF Extension: Unlimited Data Manager - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Extension: (YTBBookMark) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\amabcieebhjofcnbdphdmfkfcdgfilgk [2014-01-04]
CHR Extension: (YouTube) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-02-25]
CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij [2014-01-04]
CHR Extension: (Google Search) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-02-25]
CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpicgdnjfnbkibnicdnnpkkpklkjkki [2013-04-12]
CHR Extension: (Speedy Shopper) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ganlifbpkcplnldliibcbegplfmcfigp [2014-01-04]
CHR Extension: (SNT) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcgmnfaeohlofnjigiimjlbjleaomlei [2014-01-04]
CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcjmphdcljedddkheginnckbjccchepe [2014-05-16]
CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba [2014-01-04]
CHR Extension: (Norton Identity Protection) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2012-02-25]
CHR Extension: (Gmail) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-02-25]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-01-15]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [478056 2011-08-31] (Lenovo.)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2513752 2014-03-04] ()
R2 SesamService; C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe [1482240 2011-05-16] (Swisscom)
R2 SwiCardDetectSvc; C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe [307568 2010-09-22] (Sierra Wireless, Inc.)
R2 UDM Service; C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe [182128 2011-05-20] (Swisscom)
R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [82544 2011-06-30] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-25] (Samsung Electronics Co., Ltd.)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2011-02-18] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-19] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [301512 2014-03-04] (NVIDIA Corporation)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13840 2009-03-13] (UPEK Inc.)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [41536 2009-09-24] (Lenovo (United States) Inc.)
R3 WtSmpAdap; C:\Windows\System32\DRIVERS\wtsmpadap.sys [56688 2011-04-11] (Swisscom)
R1 WtSmpFlt; C:\Windows\System32\DRIVERS\wtsmpflt.sys [409456 2011-04-11] (Swisscom)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 vpnva; system32\DRIVERS\vpnva64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-18 22:14 - 2014-05-18 22:14 - 00448512 _____ (OldTimer Tools) C:\Users\Sabrina\Desktop\TFC.exe
2014-05-18 20:44 - 2014-05-18 20:44 - 01016261 _____ (Thisisu) C:\Users\Sabrina\Downloads\JRT(2).exe
2014-05-18 20:17 - 2014-05-19 00:27 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-18 20:17 - 2014-05-18 20:17 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-18 20:17 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-18 20:17 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-18 20:17 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-18 20:16 - 2014-05-18 20:16 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Sabrina\Downloads\mbam-setup-2.0.1.1004.exe
2014-05-18 20:08 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-18 20:07 - 2014-05-18 20:07 - 01328723 _____ () C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe
2014-05-18 19:20 - 2014-05-19 23:03 - 00021897 _____ () C:\Users\Sabrina\Desktop\FRST.txt
2014-05-16 23:17 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-16 23:17 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-16 23:17 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-16 23:17 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-16 23:17 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-16 23:17 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-13 21:16 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-13 21:16 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-13 21:16 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-13 21:16 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-13 21:15 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-13 21:15 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-13 21:15 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-13 21:15 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-13 21:15 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-13 21:15 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-13 21:15 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-13 21:15 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-13 21:15 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-13 21:15 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-13 21:15 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-13 21:15 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-13 21:15 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-13 21:15 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-13 21:15 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-13 21:15 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-13 21:15 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-13 21:15 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-13 21:15 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-07 20:02 - 2014-05-07 20:03 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe
2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd
2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe
2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe
2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe
2014-05-05 07:40 - 2014-05-05 08:07 - 00000000 ____D () C:\Program Files (x86)\CrossFnt
2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe
2014-05-04 22:15 - 2014-05-18 19:31 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit
2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense
2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe
2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-04 21:41 - 2014-05-19 14:04 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job
2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe
2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml
2014-05-04 21:34 - 2012-05-15 07:13 - 00144896 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2014-05-04 21:34 - 2012-05-15 06:20 - 00104448 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\system32\NV
2014-05-04 21:28 - 2014-05-04 21:31 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe
2014-05-04 21:25 - 2014-03-04 20:35 - 02513752 _____ () C:\Windows\system32\nvwmi64.exe
2014-05-04 21:25 - 2014-03-04 20:35 - 00004084 _____ () C:\Windows\system32\nvPerfProvider.man
2014-05-04 21:25 - 2014-03-04 18:17 - 00595232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA
2014-05-04 21:23 - 2014-03-04 20:35 - 30389192 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 25257816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 22973896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 18312672 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 18225104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 15879264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 15232424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 12672288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-05-04 21:23 - 2014-03-04 20:35 - 11638736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 11587736 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 09731624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 09688888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 03131848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 03123544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 02936152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 02752856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 01883480 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433276.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433276.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 01249080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00888776 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00880984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00860104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00850888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00301512 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvkflt.sys
2014-05-04 21:23 - 2014-03-04 20:35 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-05-04 21:23 - 2014-03-04 20:35 - 00031576 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2014-05-04 21:18 - 2014-05-04 21:22 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe
2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf
2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)
2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)
2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)
2014-05-04 20:04 - 2014-05-04 20:05 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf
2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp
2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf
2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip
2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\WinZip
2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\Program Files\WinZip
2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi
2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx
2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor
2014-05-04 18:26 - 2014-05-04 21:08 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-05-04 18:26 - 2014-05-04 18:29 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI
2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe
2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe
2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files
2014-05-04 18:13 - 2014-05-04 18:14 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi
2014-05-04 18:08 - 2014-05-04 18:09 - 00000020 _____ () C:\Windows\ø÷Í
2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸
2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe
2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener
2014-05-04 17:02 - 2014-05-04 17:07 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe
2014-05-04 16:44 - 2014-05-17 00:24 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-04 16:44 - 2014-05-04 16:46 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe
2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster
2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe
2014-05-03 08:33 - 2012-09-18 15:27 - 00501760 _____ () C:\Windows\system32\ZSHP1020.EXE
2014-05-03 08:33 - 2012-09-18 15:27 - 00192512 _____ () C:\Windows\system32\ZLhp1020.DLL
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe
2014-04-22 03:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 03:00 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 03:00 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 03:00 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 03:00 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 03:00 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 03:00 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 03:00 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 03:00 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 03:00 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 03:00 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 03:00 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 03:00 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 03:00 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 03:00 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 03:00 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 03:00 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 03:00 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 03:00 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 03:00 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 03:00 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 03:00 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 03:00 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 03:00 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 03:00 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 03:00 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 03:00 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 03:00 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 03:00 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 03:00 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 03:00 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 03:00 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 03:00 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 03:00 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 03:00 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 03:00 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 03:00 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 03:00 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 03:00 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 03:00 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 03:00 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 03:00 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 03:00 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

==================== One Month Modified Files and Folders =======

2014-05-19 23:03 - 2014-05-18 19:20 - 00021897 _____ () C:\Users\Sabrina\Desktop\FRST.txt
2014-05-19 23:03 - 2013-10-17 22:06 - 00000000 ____D () C:\FRST
2014-05-19 23:01 - 2012-04-06 14:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-19 23:01 - 2012-02-13 08:46 - 01551936 _____ () C:\Windows\WindowsUpdate.log
2014-05-19 23:00 - 2012-02-13 09:42 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-19 14:08 - 2012-02-13 08:16 - 00705124 _____ () C:\Windows\system32\perfh007.dat
2014-05-19 14:08 - 2012-02-13 08:16 - 00151492 _____ () C:\Windows\system32\perfc007.dat
2014-05-19 14:08 - 2009-07-14 07:13 - 01629508 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-19 14:04 - 2014-05-04 21:41 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job
2014-05-19 14:04 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\UDM
2014-05-19 14:04 - 2012-02-25 18:46 - 00003506 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest
2014-05-19 14:04 - 2012-02-25 18:46 - 00003448 _____ () C:\Windows\System32\Tasks\PCDEventLauncher
2014-05-19 14:04 - 2012-02-25 18:46 - 00000466 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job
2014-05-19 02:37 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-19 02:00 - 2012-02-25 12:07 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Adobe
2014-05-19 00:27 - 2014-05-18 20:17 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-18 23:35 - 2012-02-13 09:42 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-18 22:14 - 2014-05-18 22:14 - 00448512 _____ (OldTimer Tools) C:\Users\Sabrina\Desktop\TFC.exe
2014-05-18 20:48 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-18 20:48 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-18 20:44 - 2014-05-18 20:44 - 01016261 _____ (Thisisu) C:\Users\Sabrina\Downloads\JRT(2).exe
2014-05-18 20:42 - 2012-04-03 22:35 - 00000000 ___RD () C:\Users\Sabrina\Dropbox
2014-05-18 20:42 - 2012-04-03 22:34 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Dropbox
2014-05-18 20:40 - 2014-01-04 19:04 - 00000464 ____H () C:\Windows\Tasks\GS.Enabler-S-926685765.job
2014-05-18 20:40 - 2012-02-13 09:01 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-18 20:40 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-18 20:40 - 2009-07-14 06:51 - 00117419 _____ () C:\Windows\setupact.log
2014-05-18 20:39 - 2010-11-21 05:47 - 00922862 _____ () C:\Windows\PFRO.log
2014-05-18 20:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Web
2014-05-18 20:17 - 2014-05-18 20:17 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-18 20:17 - 2013-10-21 14:04 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-18 20:16 - 2014-05-18 20:16 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Sabrina\Downloads\mbam-setup-2.0.1.1004.exe
2014-05-18 20:10 - 2013-10-21 14:25 - 00000000 ____D () C:\AdwCleaner
2014-05-18 20:07 - 2014-05-18 20:07 - 01328723 _____ () C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe
2014-05-18 19:31 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit
2014-05-18 19:30 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\fc124d4af23c6577
2014-05-18 19:19 - 2014-01-31 18:47 - 02067456 _____ (Farbar) C:\Users\Sabrina\Desktop\FRST64.exe
2014-05-18 19:19 - 2014-01-31 18:47 - 00000000 ____D () C:\Users\Sabrina\Desktop\FRST-OlderVersion
2014-05-17 08:06 - 2013-03-12 15:20 - 00000000 ___RD () C:\Users\Sabrina\Virtual Machines
2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-17 00:24 - 2014-05-04 16:44 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-17 00:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-16 23:17 - 2012-02-25 11:19 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-16 23:16 - 2013-08-02 03:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-16 23:11 - 2012-08-29 07:47 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-16 23:04 - 2013-12-01 21:48 - 00001040 _____ () C:\Users\Sabrina\Desktop\Dropbox.lnk
2014-05-16 23:04 - 2013-12-01 21:47 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-14 21:01 - 2012-04-06 14:52 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 21:01 - 2012-04-06 14:52 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 21:01 - 2012-02-27 19:10 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-13 21:01 - 2012-02-25 11:40 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-11 09:04 - 2012-05-22 17:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-11 01:34 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\WtDashboard
2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-10 15:18 - 2012-06-23 19:00 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Apple Computer
2014-05-10 00:23 - 2009-07-14 06:45 - 05256976 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-09 08:14 - 2014-05-13 21:16 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-13 21:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-08 23:30 - 2012-02-13 09:42 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-08 23:30 - 2012-02-13 09:42 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-08 18:32 - 2012-03-01 12:27 - 00011311 _____ () C:\Users\Sabrina\AppData\Roaming\SmarThruOptions.xml
2014-05-07 20:03 - 2014-05-07 20:02 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe
2014-05-06 06:40 - 2014-05-16 23:17 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-16 23:17 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-16 23:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-16 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-05 12:03 - 2012-02-25 18:47 - 00118016 _____ () C:\Users\Sabrina\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-05 11:59 - 2014-02-28 10:48 - 00000000 ____D () C:\Users\Sabrina\Documents\BVA
2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd
2014-05-05 08:07 - 2014-05-05 07:40 - 00000000 ____D () C:\Program Files (x86)\CrossFnt
2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe
2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe
2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe
2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe
2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense
2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe
2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de
2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-05-04 21:45 - 2012-02-13 09:43 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-05-04 21:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-05-04 21:43 - 2012-02-13 09:43 - 00204593 _____ () C:\Windows\DirectX.log
2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe
2014-05-04 21:41 - 2012-04-15 11:40 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Windows Live
2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml
2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\system32\NV
2014-05-04 21:34 - 2012-02-13 08:54 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\ProgramData\Intel
2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-05-04 21:31 - 2014-05-04 21:28 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe
2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA
2014-05-04 21:22 - 2014-05-04 21:18 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe
2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor
2014-05-04 21:08 - 2014-05-04 18:26 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5
2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf
2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)
2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)
2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)
2014-05-04 20:05 - 2014-05-04 20:04 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf
2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf
2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp
2014-05-04 19:46 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf
2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip
2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\ProgramData\WinZip
2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\Program Files\WinZip
2014-05-04 19:21 - 2012-02-25 18:45 - 00000000 ____D () C:\Users\Sabrina
2014-05-04 19:21 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi
2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx
2014-05-04 18:29 - 2014-05-04 18:26 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI
2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe
2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe
2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe
2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files
2014-05-04 18:14 - 2014-05-04 18:13 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi
2014-05-04 18:09 - 2014-05-04 18:08 - 00000020 _____ () C:\Windows\ø÷Í
2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸
2014-05-04 17:49 - 2012-03-06 07:54 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\CrashDumps
2014-05-04 17:37 - 2010-11-21 09:16 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe
2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener
2014-05-04 17:07 - 2014-05-04 17:02 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe
2014-05-04 16:46 - 2014-05-04 16:44 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe
2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster
2014-05-04 16:38 - 2012-02-25 18:46 - 00000528 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun
2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe
2014-04-29 09:42 - 2012-02-25 18:46 - 00004246 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-05-13 21:15] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-19 02:29

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014
Ran by Sabrina at 2014-05-19 23:04:35
Running from C:\Users\Sabrina\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.1530 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.7.0.1530 - Adobe Systems Incorporated) Hidden
Adobe Extension Manager CS6 (HKLM-x32\...\{83463106-DD1C-4FE5-A61C-DF6715472AD4}) (Version: 6.0 - Adobe Systems Incorporated)
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS5 (HKLM-x32\...\{F9766AC1-1461-1033-B862-DF8FE1C033BE}) (Version: 7.0 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden
Adobe Photoshop 7.0.1 (HKLM-x32\...\Adobe Photoshop 7.0.1) (Version: 7.0.1 - Adobe Systems, Inc.)
Adobe Reader X (10.1.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}) (Version: 5.2.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom InConcert Maestro (HKLM\...\{57DD35E9-D9BB-4089-BB05-EF933C586CB3}) (Version: 1.0.1.1500 - Broadcom Corporation)
CH-Finance 2010 (HKLM-x32\...\CH-Finance 2010) (Version:  - )
Conexant 20672 SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.32.23.0 - Conexant)
Corel WinDVD (HKLM-x32\...\{5C1F18D2-F6B7-4242-B803-B5A78648185D}) (Version: 10.0.5.828 - Corel Inc.)
Create Recovery Media (HKLM-x32\...\{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}) (Version: 1.20.0.00 - Lenovo Group Limited)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7 (HKLM\...\DisableAMTPopup) (Version: 1.00 - )
Dropbox (HKCU\...\Dropbox) (Version: 2.6.33 - Dropbox, Inc.)
EasyRotator Wizard (HKLM-x32\...\com.dwuser.erwizard.EasyRotatorWizard) (Version: 1.0.123 - Magnetic Marketing Corp)
EasyRotator Wizard (x32 Version: 1.0.123 - Magnetic Marketing Corp) Hidden
EasyTax 2012 AG 1.02 (HKLM-x32\...\3785-6780-1293-3574) (Version: 1.02 - HWI Solutions AG)
EndNote X6 (HKLM-x32\...\{86B3F2D6-AC2B-0016-8AE1-F2F77F781B0C}) (Version: 16.0.0.6348 - Thomson Reuters)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Evernote v. 4.2.3 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.3.15 - Evernote Corp.)
Fonts CH-Line (HKLM-x32\...\Fonts CH-Line) (Version:  - )
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free Audio Converter version 5.0.15.706 (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.15.706 - DVDVideoSoft Ltd.)
Free DVD Video Converter version 2.0.9.706 (HKLM-x32\...\Free DVD Video Converter_is1) (Version: 2.0.9.706 - DVDVideoSoft Ltd.)
Free Video to Flash Converter version 5.0.15.706 (HKLM-x32\...\Free Video to Flash Converter_is1) (Version: 5.0.15.706 - DVDVideoSoft Ltd.)
Free YouTube Download version 3.1.42.1212 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.1.42.1212 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.11.37.1212 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.37.1212 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Integrated Camera Driver Installer Package Ver.1.1.0.1147 (HKLM-x32\...\{B2CA6F37-1602-4823-81B5-0384B6888AA6}) (Version: 1.1.0.1147 - RICOH)
Integrated Camera TWAIN (HKLM-x32\...\{9CA0DEE4-E84B-466F-9B96-FC255F3A929F}) (Version: 1.0.11.1223 - Chicony Electronics Co.,Ltd.)
Intel PROSet Wireless (Version:  - ) Hidden
Intel PROSet Wireless (x32 Version:  - ) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Identity Protection Technology 1.1.2.0 (HKLM-x32\...\{C01A86F5-56E7-101F-9BC9-E3F1025EB779}) (Version: 1.1.2.0 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3517 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi Software (HKLM\...\{25FBDA9A-E868-4B3B-B9FF-D923818511A1}) (Version: 14.2.0000 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
iTunes (HKLM\...\{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}) (Version: 10.6.3.25 - Apple Inc.)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Kalender-Excel-8.8 (HKLM-x32\...\Kalender-Excel-8.8_is1) (Version: 8.8 - MSDatec)
Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 1.10 - )
Lenovo Patch Utility (HKLM-x32\...\{24E92E7A-6848-4747-A3EA-3AAC0576BE52}) (Version: 1.0.1.1 - Lenovo Group Limited)
Lenovo Patch Utility 64 bit (HKLM\...\{39A04221-294E-4D90-A0F2-CCB1EF15CB56}) (Version: 1.2.0.1 - Lenovo Group Limited)
Lenovo Registration (HKLM-x32\...\{6707C034-ED6B-4B6A-B21F-969B3606FBDE}) (Version: 1.0.4 - Lenovo Inc.)
Lenovo SimpleTap (HKLM\...\{EFC9FE7C-ECE8-4282-8F77-FEDCAD374C77}) (Version: 3.0.0010.00 - Lenovo Group Limited)
Lenovo System Interface Driver (HKLM\...\LENOVO.SMIIF) (Version: 1.05 - )
Lenovo ThinkVantage Toolbox (HKLM\...\PC-Doctor for Windows) (Version: 6.0.5849.23 - PC-Doctor, Inc.)
Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0008.00 - Lenovo)
Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0005.00 - Lenovo)
Lenovo Welcome (HKLM-x32\...\Lenovo Welcome_is1) (Version: 3.00.006.0 - Lenovo)
Macromedia Contribute 3 (HKLM-x32\...\{0591FFE0-9E49-46F2-811F-DF829AFFB2FB}) (Version: 3.0.2.2326 - Macromedia, Inc.)
Macromedia Dreamweaver 8 (HKLM-x32\...\{44025BD7-AD10-4769-99AE-6378FD0303D6}) (Version: 8.0.0.2751 - Macromedia)
Macromedia Extension Manager (HKLM-x32\...\{0F022A2E-7022-497D-90A5-0F46746D8275}) (Version: 1.7.270 - Ihr Firmenname)
Macromedia Fireworks 8 (HKLM-x32\...\{4C24A8C1-7CFA-4650-AF15-732F5BD7B46D}) (Version: 8.0.0.777 - Macromedia)
Macromedia Flash 8 (HKLM-x32\...\{2BD5C305-1B27-4D41-B690-7A61172D2FEB}) (Version: 8.00.0000 - Macromedia)
Macromedia Flash 8 Video Encoder (HKLM-x32\...\{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}) (Version: 1.00.0000 - Macromedia)
Macromedia HomeSite+ (HKLM-x32\...\{8D3562E7-C795-4B5D-A091-6DAA3FF0DF3B}) (Version:  - )
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Message Center Plus (HKLM-x32\...\{FD331A3B-F7A5-4C31-B8D4-DF413C85AF7A}) (Version: 2.0.0012.00 - Lenovo Group Limited)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040C-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0410-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0413-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUSR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nur Entfernen der CopyTrans Suite möglich (HKCU\...\CopyTrans Suite) (Version: 2.36 - WindSolutions)
NVIDIA 3D Vision Treiber 332.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 332.76 - NVIDIA Corporation)
NVIDIA Grafiktreiber 332.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.76 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.15.2 (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3276 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 332.76 (Version: 332.76 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA WMI 2.16.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVWMI) (Version: 2.16.0 - NVIDIA Corporation)
On Screen Display (HKLM\...\OnScreenDisplay) (Version: 6.50.00 - )
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.3.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.3 - Frank Heindörfer, Philip Chinery)
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Private Tax 2011 1.4 (HKLM-x32\...\4095-7861-2728-4611) (Version: 1.4 - Information Factory AG)
Programmer's Notepad (HKLM-x32\...\{52CF142B-7B0E-41E7-98F5-B834122523E7}_is1) (Version: 2.3.4.2350 - Simon Steele)
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
R for Windows 2.14.1 (HKLM\...\R for Windows 2.14.1_is1) (Version: 2.14.1 - R Development Core Team)
RapidBoot (HKLM\...\{5E2652DF-743F-482B-A593-C95F431A5769}) (Version: 1.11 - Lenovo)
Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (HKLM\...\EnablePS) (Version: 1.00 - )
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden
RICOH_Media_Driver_v2.14.18.01 (HKLM-x32\...\{FE041B02-234C-4AAA-9511-80DF6482A458}) (Version: 2.14.18.01 - RICOH)
Samsung CLX-3170 Series (HKLM-x32\...\Samsung CLX-3170 Series) (Version:  - Samsung Electronics CO.,LTD)
Secure Download Manager (HKLM-x32\...\{B15B400A-19ED-4CC7-B3E4-9295D8470CBE}) (Version: 3.0.3 - e-academy Inc.)
SmarThru 4 (HKLM-x32\...\{90F1943D-EA4A-4460-B59F-30023F3BA69A}) (Version:  - )
SmarThru PC Fax (HKLM-x32\...\SmarThru PC Fax) (Version:  - )
Swisscom Quick Help (HKLM-x32\...\Swisscom Quick Help) (Version: 3.3.2.340 - Swisscom (Switzerland) AG)
Swisscom Quick Help (x32 Version: 3.3.2.340 - Swisscom (Switzerland) AG) Hidden
System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 4.01.0015 - Lenovo)
TDM-GCC (HKLM-x32\...\TDM-GCC) (Version: 1.1006.0 - TDM)
ThinkPad Bluetooth with Enhanced Data Rate Software (HKLM\...\{C6C9D5F7-630C-4125-8C4E-94AF77C1896E}) (Version: 6.4.0.1500 - Broadcom Corporation)
ThinkPad FullScreen Magnifier (HKLM\...\ThinkPad FullScreen Magnifier) (Version: 2.40 - )
ThinkPad Modem Adapter (HKLM\...\CNXT_MODEM_HDA_HSF) (Version: 7.80.5.0 - Conexant Systems)
ThinkPad Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.61.00.11 - )
ThinkPad Power Manager (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 3.63 - )
ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.8.0 - )
ThinkPad UltraNav Utility (HKLM-x32\...\{17CBC505-D1AE-459D-B445-3D2000A85842}) (Version: 2.13.0 - Lenovo)
ThinkVantage Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.73 - Lenovo)
ThinkVantage AutoLock (HKLM\...\{E224B44B-B5EB-4af3-A80A-A255358E241A}_is1) (Version: 1.03 - Lenovo)
ThinkVantage Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 2.07 - Lenovo)
ThinkVantage Fingerprint Software (HKLM\...\{502EE63C-9A62-4330-8F8B-1EAB51B7BB46}) (Version: 5.9.4.6882 - UPEK Inc.)
Tinn-R 2.3.7.1 (HKLM-x32\...\Tinn-R_is1) (Version:  - Tinn-R Team)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_PROPLUSR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUSR_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2880505) 32-Bit Edition (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{2720451F-5D04-43EC-AB1F-26D948FD971B}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_PROPLUSR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUSR_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_PROPLUSR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_PROPLUSR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VIP Access (HKLM-x32\...\{E8D46836-CD55-453C-A107-A59EC51CB8DC}) (Version: 2.0.2.140 - VeriSign)
VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN)
Windows Driver Package - Intel (e1cexpress) Net  (12/21/2010 11.8.84.0) (HKLM\...\6D23A494E9A245843FB8584D9307D3E328DF8613) (Version: 12/21/2010 11.8.84.0 - Intel)
Windows Driver Package - Intel System  (09/10/2010 9.2.0.1011) (HKLM\...\0CDBDD444A1F5FFEA227B4E7DCE195F11F08240A) (Version: 09/10/2010 9.2.0.1011 - Intel)
Windows Driver Package - Intel System  (09/10/2010 9.2.0.1011) (HKLM\...\8058FF31D7C7F4818DC176DAF53CD379968C86E4) (Version: 09/10/2010 9.2.0.1011 - Intel)
Windows Driver Package - Intel System  (11/20/2010 9.2.0.1016) (HKLM\...\43B5066463CEBC83E99586A67037B6F9FC4193FE) (Version: 11/20/2010 9.2.0.1016 - Intel)
Windows Driver Package - Intel USB  (12/21/2010 9.2.0.1021) (HKLM\...\0DD5528A211904214F70A66DE6ADBD378B21566D) (Version: 12/21/2010 9.2.0.1021 - Intel)
Windows Driver Package - Lenovo 1.61.00.11 (11/11/2010 1.61.00.11) (HKLM\...\466E9B20D871055D6D3CDA2CDD1D355E978A61AF) (Version: 11/11/2010 1.61.00.11 - Lenovo)
Windows Driver Package - Synaptics (SynTP) Mouse  (05/19/2011 15.3.8.0) (HKLM\...\DDD8A532E361E9A878EBEF69C338B306810DF059) (Version: 05/19/2011 15.3.8.0 - Synaptics)
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation)
WinMerge 2.14.0 (HKLM-x32\...\WinMerge_is1) (Version: 2.14.0 - Thingamahoochie Software)
WinRAR 4.20 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
WinVPP 1.3.4 (HKLM-x32\...\{0362ADEC-279F-4BC9-A861-BD486E98C8AD}) (Version: 1.3.4 - ETH Zuerich)
WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DF}) (Version: 18.0.10661 - WinZip Computing, S.L. )

==================== Restore Points  =========================

04-05-2014 16:15:04 Windows Live Essentials
04-05-2014 16:15:19 Installed Windows Movie Maker 2.6
04-05-2014 16:15:24 DirectX wurde installiert
04-05-2014 16:16:51 DirectX wurde installiert
04-05-2014 16:17:03 DirectX wurde installiert
04-05-2014 16:17:53 WLSetup
04-05-2014 16:19:31 Windows Live Essentials
04-05-2014 16:19:43 WLSetup
04-05-2014 16:21:54 Installed Windows Movie Maker 2.6
04-05-2014 17:20:28 WinZip 18.0 wird installiert
04-05-2014 19:06:57 Removed Windows Movie Maker 2.6
04-05-2014 19:41:37 Windows Live Essentials
04-05-2014 19:42:56 DirectX wurde installiert
04-05-2014 19:43:37 DirectX wurde installiert
04-05-2014 19:44:04 DirectX wurde installiert
04-05-2014 19:44:57 WLSetup
09-05-2014 22:30:18 Windows Update
13-05-2014 19:05:37 Windows Update
16-05-2014 21:08:10 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2014-01-12 12:35 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0BC77D44-74FA-455A-B587-E73CE62C5990} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-13] (Google Inc.)
Task: {11EF87FA-F5C4-4F01-89D7-E8ECB43B7D7C} - System32\Tasks\MCP => C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-28] ()
Task: {3BE08FEC-0FC8-441D-939E-C609A500E540} - System32\Tasks\AdobeAAMUpdater-1.0-Sabrina-THINK-Sabrina => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {3D74BFA3-1C0A-4739-B737-FCDF6999E8B4} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2011-12-21] (Lenovo)
Task: {73978FBE-6EAD-4932-8803-2008ACAD057D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {7629E501-D646-44BF-8DF0-85E237916E4B} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {86F9F4FF-7CC2-4EF9-AF27-496D13F8512D} - \AppCloudUpdater No Task File <==== ATTENTION
Task: {94B59A78-1266-4B6B-983C-AA7837A977BC} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {957D2B91-634E-4D2B-9EE4-85AE74F41DFC} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {C32FF76B-6D11-4288-8203-8954890ED5EB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {D084B0C7-213C-4141-97AD-87290A3595EB} - System32\Tasks\GS.Enabler-S-926685765 => c:\programdata\softwarehouse\gs.enabler\GS.Enabler.exe <==== ATTENTION
Task: {DBC194AD-8A8E-4AAA-BFE4-C43BFCEBA7C5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-13] (Google Inc.)
Task: {EF259D21-F761-4E73-8FA3-F6DDC6A2B365} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PWMIDTSV.EXE [2011-08-31] (Lenovo Group Limited)
Task: {F1BFA607-2CC3-4244-AAE5-9D98CBE91444} - System32\Tasks\AppSafe => C:\Program Files (x86)\AppSafe\AppSafe.exe
Task: {F2E147F1-A5C9-45E3-B2D9-9940C0B51F8D} - System32\Tasks\Lenovo\SimpleTap\Start SimpleTap for Sabrina-THINK.Sabrina => C:\Program Files\Lenovo\SimpleTap\SimpleTap.exe [2011-12-21] (Lenovo)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AppSafe.job => C:\Program Files (x86)\AppSafe\AppSafe.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GS.Enabler-S-926685765.job => c:\programdata\softwarehouse\gs.enabler\GS.Enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe

==================== Loaded Modules (whitelisted) =============

2014-05-04 21:25 - 2014-03-04 20:35 - 02513752 _____ () C:\Windows\system32\nvwmi64.exe
2011-07-28 06:07 - 2011-07-28 06:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2014-05-03 08:33 - 2012-09-18 15:27 - 00192512 _____ () C:\Windows\System32\zlhp1020.dll
2012-03-01 11:41 - 2005-03-12 02:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2012-03-01 12:26 - 2009-05-08 12:53 - 00082432 _____ () C:\Windows\System32\SamFaxPort64.dll
2008-09-09 12:22 - 2008-09-09 12:22 - 00022016 _____ () C:\Windows\System32\sst1cl6.dll
2014-05-03 08:33 - 2012-09-18 15:27 - 00065024 _____ () C:\Windows\system32\spool\PRTPROCS\x64\pphp1020.dll
2012-11-18 09:06 - 2014-03-04 19:10 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-02-13 08:11 - 2011-05-19 14:04 - 00057640 _____ () C:\Program Files\Synaptics\SynTP\SynTPEnhPS.dll
2012-02-13 08:57 - 2010-10-26 06:40 - 00049056 ____N () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
2012-02-13 09:00 - 2011-03-06 13:07 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-12-19 01:50 - 2010-12-19 01:50 - 00173856 _____ () C:\Program Files\ThinkPad\Bluetooth Software\btkeyind.dll
2012-03-01 12:24 - 2009-10-13 12:41 - 00306688 _____ () C:\Windows\Samsung\PanelMgr\caller64.exe
2012-02-13 09:03 - 2011-08-31 20:03 - 00055808 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL
2011-11-02 00:26 - 2011-11-02 00:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2010-10-13 10:13 - 2010-10-13 10:13 - 00057344 ____R () C:\Program Files (x86)\Swisscom\Sesam\BIN\boost_thread-vc80-mt-1_44.dll
2010-10-13 10:11 - 2010-10-13 10:11 - 00057344 ____R () C:\Program Files (x86)\Swisscom\Sesam\BIN\boost_date_time-vc80-mt-1_44.dll
2011-05-16 16:06 - 2011-05-16 16:06 - 01011712 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\LIBEAY32.dll
2011-05-16 16:06 - 2011-05-16 16:06 - 00249856 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\SSLEAY32.dll
2010-10-13 10:12 - 2010-10-13 10:12 - 00663552 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\boost_regex-vc80-mt-1_44.dll
2010-10-13 10:13 - 2010-10-13 10:13 - 00057344 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\boost_thread-vc80-mt-1_44.dll
2010-10-13 10:11 - 2010-10-13 10:11 - 00057344 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\boost_date_time-vc80-mt-1_44.dll
2010-10-13 10:12 - 2010-10-13 10:12 - 00233472 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\boost_serialization-vc80-mt-1_44.dll
2010-10-13 10:11 - 2010-10-13 10:11 - 00135168 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\boost_filesystem-vc80-mt-1_44.dll
2010-10-13 10:11 - 2010-10-13 10:11 - 00012288 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\boost_system-vc80-mt-1_44.dll
2011-05-16 16:04 - 2011-05-16 16:04 - 00438272 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\sqlite.dll
2009-02-26 14:46 - 2009-02-26 14:46 - 00064344 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
2011-06-22 12:46 - 2011-06-22 12:46 - 00434016 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
2011-05-26 21:18 - 2011-05-26 21:18 - 00136536 _____ () C:\Program Files (x86)\Microsoft Office\Office12\OUTLCTL.DLL
2013-07-10 18:07 - 2013-07-10 18:07 - 00756888 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2014-05-10 19:23 - 2014-05-10 19:23 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-05-14 21:01 - 2014-05-14 21:01 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/19/2014 05:20:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7036

Error: (05/19/2014 05:20:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7036

Error: (05/19/2014 05:20:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/19/2014 05:20:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6037

Error: (05/19/2014 05:20:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6037

Error: (05/19/2014 05:20:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/19/2014 05:20:55 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5039

Error: (05/19/2014 05:20:55 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5039

Error: (05/19/2014 05:20:55 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/19/2014 05:20:54 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4025


System errors:
=============
Error: (05/19/2014 11:00:38 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (05/18/2014 11:06:56 PM) (Source: iaStor) (EventID: 9) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (05/18/2014 10:17:48 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Stereoscopic 3D Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/18/2014 09:44:02 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================
Error: (10/21/2013 08:33:30 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 101 seconds with 60 seconds of active time.  This session ended with a crash.

Error: (07/22/2013 01:47:56 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 52 seconds with 0 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2014-01-12 11:35:02.045
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-01-12 11:35:01.905
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-01-12 11:35:01.764
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-01-12 11:35:01.624
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-01-11 00:10:14.250
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-01-11 00:10:14.109
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-01-11 00:10:13.969
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-01-11 00:10:13.829
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-10-21 07:43:30.132
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-10-21 07:43:29.976
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 31%
Total physical RAM: 8075.23 MB
Available physical RAM: 5524.32 MB
Total Pagefile: 16148.65 MB
Available Pagefile: 12919.4 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Windows7_OS) (Fixed) (Total:448.67 GB) (Free:341.04 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive q: (Lenovo_Recovery) (Fixed) (Total:15.62 GB) (Free:2.21 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 0FF44617)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=449 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=16 GB) - (Type=07 NTFS)

==================== End Of Log ============================

PC läuft sehr langsam, ständige Verzögerung

Log-Analyse und Auswertung: PC läuft sehr langsam, ständige Verzögerung