Grundlegende Reinigung des bestehenden Systems

OTL logfile created on: 11.06.2013 21:19:29 - Run 2
OTL by OldTimer - Version 3.2.54.0     Folder = C:\Users\admin\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,99 Gb Total Physical Memory | 1,73 Gb Available Physical Memory | 58,03% Memory free
6,18 Gb Paging File | 4,67 Gb Available in Paging File | 75,62% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 33,34 Gb Free Space | 14,31% Space Free | Partition Type: NTFS
Drive E: | 549,94 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: LAPPI | User Name: admin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\admin\Downloads\Defogger.exe ()
PRC - C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe ()
PRC - C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Programme\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Programme\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Programme\Hotspot Shield\bin\openvpnas.exe (AnchorFree Inc.)
PRC - C:\Programme\Hotspot Shield\bin\hsswd.exe ()
PRC - C:\Programme\Hotspot Shield\HssWPR\HssSrv.exe (AnchorFree Inc.)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Programme\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Users\admin\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe ()
PRC - C:\Programme\Nero\Update\NASvc.exe (Nero AG)
PRC - C:\Programme\Dell\QuickSet\quickset.exe (Dell Inc.)
PRC - C:\Programme\Windows Sidebar\sidebar.exe (Microsoft Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Programme\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe ()
PRC - C:\Programme\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Programme\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Programme\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
PRC - C:\Programme\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe (Pinnacle Systems)
PRC - C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Programme\DellTPad\ApMsgFwd.exe (Alps Electric Co., Ltd.)
PRC - C:\Windows\OEM02Mon.exe (Creative Technology Ltd.)
PRC - C:\Programme\Brother\Brmfcmon\BrMfcMon.exe (Brother Industries, Ltd.)
PRC - C:\Programme\DellTPad\hidfind.exe (Alps Electric Co., Ltd.)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Users\admin\Downloads\Defogger.exe ()
MOD - C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe ()
MOD - c:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll ()
MOD - C:\Programme\DivX\DivX Update\DivXUpdateCheck.dll ()
MOD - C:\Programme\DivX\DivX Update\DivXUpdate.exe ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\b757806657fa5db2b1ed1a89b026b463\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\cc149d08e75f8c53cd28ac926b38c370\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\2227d1559f87943255069398608d5c56\mscorlib.ni.dll ()
MOD - C:\Programme\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Programme\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Programme\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()
MOD - C:\Programme\Pinnacle\Shared Files\Programs\StrmServer\UPnPStreamingDevice.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (Secunia Update Agent) -- C:\Program Files\Secunia\PSI\sua.exe File not found
SRV - (BrowserProtect) -- C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe ()
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (avast! Antivirus) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (HssTrayService) -- C:\Programme\Hotspot Shield\bin\HSSTrayService.exe ()
SRV - (hshld) -- C:\Programme\Hotspot Shield\bin\openvpnas.exe (AnchorFree Inc.)
SRV - (HssWd) -- C:\Programme\Hotspot Shield\bin\hsswd.exe ()
SRV - (HssSrv) -- C:\Programme\Hotspot Shield\HssWPR\HssSrv.exe (AnchorFree Inc.)
SRV - (MBAMService) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (Microsoft SharePoint Workspace Audit Service) -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE (Microsoft Corporation)
SRV - (vToolbarUpdater11.2.0) -- C:\Programme\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe ()
SRV - (NAUpdate) -- C:\Programme\Nero\Update\NASvc.exe (Nero AG)
SRV - (osppsvc) -- C:\Programme\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation)
SRV - (ose) -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (yksvc) -- C:\Windows\System32\ykx32mpcoinst.dll (Marvell)
SRV - (AAV UpdateService) -- C:\Programme\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe ()
SRV - (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter) -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (IAANTMON) Intel(R) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (NwlnkFwd) -- system32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- system32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) -- system32\DRIVERS\ipinip.sys File not found
DRV - (A2DDA) -- C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys File not found
DRV - (aswSnx) -- C:\Windows\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswVmm) -- C:\Windows\System32\drivers\aswVmm.sys ()
DRV - (aswTdi) -- C:\Windows\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswRvrt) -- C:\Windows\System32\drivers\aswRvrt.sys ()
DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (AVAST Software)
DRV - (AswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswFsBlk) -- C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (HssDRV6) -- C:\Windows\System32\drivers\hssdrv6.sys (AnchorFree Inc.)
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (taphss6) -- C:\Windows\System32\drivers\taphss6.sys (Anchorfree Inc.)
DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys ()
DRV - (dtsoftbus01) -- C:\Windows\System32\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV - (NBVol) -- C:\Windows\System32\drivers\NBVol.sys (Nero AG)
DRV - (NBVolUp) -- C:\Windows\System32\drivers\NBVolUp.sys (Nero AG)
DRV - (Uim_IM) -- C:\Windows\System32\drivers\Uim_IM.sys (Paragon)
DRV - (Uim_Vim) -- C:\Windows\System32\drivers\Uim_Vim.sys (Paragon)
DRV - (UimBus) -- C:\Windows\System32\drivers\UimBus.sys (Windows (R) 2000 DDK provider)
DRV - (rimmptsk) -- C:\Windows\System32\drivers\rimmptsk.sys (REDC)
DRV - (rimsptsk) -- C:\Windows\System32\drivers\rimsptsk.sys (REDC)
DRV - (rismxdp) -- C:\Windows\System32\drivers\rixdptsk.sys (REDC)
DRV - (ApfiltrService) -- C:\Windows\System32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (OEM02Dev) -- C:\Windows\System32\drivers\OEM02Dev.sys (Creative Technology Ltd.)
DRV - (NETw4v32) Intel(R) -- C:\Windows\System32\drivers\NETw4v32.sys (Intel Corporation)
DRV - (Ltn_stk7070P) -- C:\Windows\System32\drivers\Ltn_stk7070P.sys (LITEON)
DRV - (Ltn_stkrc) -- C:\Windows\System32\drivers\Ltn_stkrc.sys (LITEON)
DRV - (IntcHdmiAddService) Intel(R) -- C:\Windows\System32\drivers\IntcHdmi.sys (Intel(R) Corporation)
DRV - (OEM02Vfx) -- C:\Windows\System32\drivers\OEM02Vfx.sys (EyePower Games Pte. Ltd.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 
IE - HKLM\..\SearchScopes,DefaultScope = 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKCU\..\SearchScopes,DefaultScope = 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.startup.homepage: "hxxp://www.bild.de/"
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Plus Web Player Plug-In,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.6: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013.06.07 11:55:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013.04.15 19:18:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.05.27 21:56:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.05.27 21:56:39 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.05.27 21:56:39 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.05.27 21:56:39 | 000,000,000 | ---D | M]
 
[2012.03.28 16:52:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\mozilla\Extensions
[2013.06.11 20:26:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\fmmahgfc.default\extensions
[2013.02.19 13:04:20 | 000,000,000 | ---D | M] (FireShot) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\fmmahgfc.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2013.05.21 11:34:05 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\fmmahgfc.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2013.04.16 21:55:04 | 000,000,000 | ---D | M] (Flashblock) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\fmmahgfc.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
[2013.06.11 20:26:27 | 000,000,000 | ---D | M] (WOT) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\fmmahgfc.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2013.05.30 18:24:04 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\fmmahgfc.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013.01.01 20:53:09 | 000,000,000 | ---D | M] ("Fox Splitter") -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\fmmahgfc.default\extensions\foxsplitter@piro.sakura.ne.jp
[2013.04.06 15:15:03 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\fmmahgfc.default\extensions\ich@maltegoetz.de
[2012.05.05 14:05:03 | 000,000,000 | ---D | M] (IE Tab Plus) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\fmmahgfc.default\extensions\ietab@ip.cn
[2013.05.02 17:41:47 | 000,006,471 | ---- | M] () -- C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmmahgfc.default\searchplugins\babylon.xml
[2013.05.02 17:41:47 | 000,006,471 | ---- | M] () -- C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmmahgfc.default\searchplugins\BrowserProtect.xml
[2013.04.06 21:13:07 | 000,001,294 | ---- | M] () -- C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\fmmahgfc.default\searchplugins\delta.xml
[2013.05.23 19:33:47 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2013.04.08 18:35:23 | 000,000,000 | ---D | M] (Hotspot Shield Helper (Please allow this installation)) -- C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com
[2013.05.23 19:33:46 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\browser\extensions
[2013.05.23 19:33:46 | 000,000,000 | ---D | M] (Default) -- C:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013.06.07 11:55:43 | 000,000,000 | ---D | M] (avast! Online Security) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2013.04.15 19:18:44 | 000,000,000 | ---D | M] (No name found) -- C:\PROGRAM FILES\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5
[2013.05.14 20:40:53 | 000,350,626 | ---- | M] () (No name found) -- C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\FMMAHGFC.DEFAULT\EXTENSIONS\{19503E42-CA3C-4C27-B1E2-9CDB2170EE34}.XPI
[2012.03.31 18:54:11 | 000,164,858 | ---- | M] () (No name found) -- C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\FMMAHGFC.DEFAULT\EXTENSIONS\{37E4D8EA-8BDA-4831-8EA1-89053939A250}.XPI
[2013.05.17 12:30:19 | 000,117,280 | ---- | M] () (No name found) -- C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\FMMAHGFC.DEFAULT\EXTENSIONS\{9AA46F4F-4DC7-4C06-97AF-5035170634FE}.XPI
[2012.09.09 19:00:43 | 000,434,392 | ---- | M] () (No name found) -- C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\FMMAHGFC.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI
[2012.03.30 11:48:09 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2013.04.06 21:12:13 | 000,006,468 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
 
========== Chrome  ==========
 
CHR - default_search_provider:  ()
CHR - default_search_provider: search_url = 
CHR - default_search_provider: suggest_url = 
CHR - homepage: hxxp://www.google.com
CHR - Extension: No name found = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\
CHR - Extension: No name found = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\
CHR - Extension: No name found = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: No name found = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: No name found = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
CHR - Extension: No name found = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.172\
CHR - Extension: No name found = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2012.07.13 17:39:13 | 000,000,098 | ---- | M]) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Programme\Hotspot Shield\HssIE\HssIE.dll (AnchorFree Inc.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [Apoint] C:\Programme\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [dellsupportcenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [DivXMediaServer] C:\Programme\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [IAAnotif] C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [NBAgent] C:\Program Files\Nero\Nero 11\Nero BackItUp\NBAgent.exe (Nero AG)
O4 - HKLM..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [QuickSet] C:\Programme\Dell\QuickSet\quickset.exe (Dell Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [FileHippo.com] C:\Program Files\FileHippo.com\UpdateChecker.exe (FileHippo.com)
O4 - HKCU..\Run: [PMCLoader] C:\Program Files\Pinnacle\TVCenter Pro\PMCLoader.exe (Pinnacle Systems GmbH)
O4 - HKCU..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O8 - Extra context menu item: An OneNote s&enden - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.17.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DE27A848-7AA8-4027-A121-608441E240EA}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EAD38CD0-3A4B-4FA5-99FD-EC2E19C84CCA}: DhcpNameServer = 8.8.8.8
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (c:\progra~2\browse~1\261339~1.144\{c16c1~1\browse~1.dll) - c:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\admin\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\admin\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2012.11.01 21:00:00 | 000,000,052 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{017b65a0-8a0f-11e1-8d7f-001fe1f2da32}\Shell - "" = AutoRun
O33 - MountPoints2\{017b65a0-8a0f-11e1-8d7f-001fe1f2da32}\Shell\AutoRun\command - "" = E:\start.exe -- [2012.11.01 21:00:00 | 000,087,704 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.06.11 18:42:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.06.11 18:42:25 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013.06.11 18:42:25 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013.05.27 21:56:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2013.05.27 21:56:05 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2013.05.27 21:53:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013.05.27 21:52:22 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013.05.27 21:52:14 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2013.05.27 21:52:14 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2013.05.17 12:46:48 | 000,000,000 | ---D | C] -- C:\2a3fea81c860abbe88e088
 
========== Files - Modified Within 30 Days ==========
 
[2013.06.11 21:17:35 | 000,000,156 | ---- | M] () -- C:\Users\admin\defogger_reenable
[2013.06.11 20:58:30 | 000,000,349 | ---- | M] () -- C:\Users\Public\Documents\PCLECHAL.INI
[2013.06.11 20:57:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.06.11 20:54:48 | 000,003,712 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013.06.11 20:54:48 | 000,003,712 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013.06.11 20:54:43 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.06.11 20:54:41 | 3210,784,768 | -HS- | M] () -- C:\hiberfil.sys
[2013.06.11 20:53:43 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2013.06.11 18:42:28 | 000,000,906 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.06.11 18:01:53 | 000,001,829 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2013.06.11 18:01:50 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2013.06.07 13:26:15 | 000,140,288 | ---- | M] () -- C:\Users\admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.05.28 20:57:52 | 015,344,581 | ---- | M] () -- C:\Users\admin\Pitch 28.05.13.mkv
[2013.05.27 22:24:04 | 000,631,358 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.05.27 22:24:04 | 000,598,612 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.05.27 22:24:04 | 000,127,668 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.05.27 22:24:04 | 000,105,284 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.05.27 21:53:12 | 000,001,664 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.05.17 13:10:40 | 000,419,960 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.05.13 20:35:03 | 000,000,859 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
 
========== Files Created - No Company Name ==========
 
[2013.06.11 21:17:34 | 000,000,156 | ---- | C] () -- C:\Users\admin\defogger_reenable
[2013.06.11 18:42:28 | 000,000,906 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.05.28 20:57:47 | 015,344,581 | ---- | C] () -- C:\Users\admin\Pitch 28.05.13.mkv
[2013.05.27 21:53:12 | 000,001,664 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.05.13 20:35:03 | 000,000,859 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2013.05.10 21:57:36 | 023,717,599 | ---- | C] () -- C:\Users\admin\Eisen 8 Winkel später auflösen.mkv
[2013.05.10 21:51:14 | 014,632,123 | ---- | C] () -- C:\Users\admin\Pitch 2.Versuch RS 10.05.13.mkv
[2013.05.10 21:29:27 | 020,925,404 | ---- | C] () -- C:\Users\admin\Pitch 1.Versuch RS 10.05.13.mkv
[2013.05.10 19:43:04 | 025,688,731 | ---- | C] () -- C:\Users\admin\Otto Golfschwung 10.05.13.mkv
[2013.05.06 22:26:53 | 077,532,182 | ---- | C] () -- C:\Users\admin\Chip 06.05.13.mkv
[2013.05.06 22:23:21 | 027,517,689 | ---- | C] () -- C:\Users\admin\Putt 06.05.13.mkv
[2013.05.06 22:14:08 | 208,922,588 | ---- | C] () -- C:\Users\admin\Driver 06.05.13.mkv
[2013.05.06 22:11:04 | 036,488,363 | ---- | C] () -- C:\Users\admin\Eisen 8 06.05.13.mkv
[2013.05.06 22:08:53 | 062,011,114 | ---- | C] () -- C:\Users\admin\Pitch 06.05.13.mkv
[2013.04.26 23:06:30 | 000,184,982 | ---- | C] () -- C:\Users\admin\aldi stelle.jpg
[2013.04.16 19:44:39 | 011,540,449 | ---- | C] () -- C:\Users\admin\langes Eisen 16.04.13.mkv
[2013.04.16 19:41:54 | 013,778,512 | ---- | C] () -- C:\Users\admin\eisen front 16.04.13.mkv
[2013.04.16 19:40:20 | 013,509,337 | ---- | C] () -- C:\Users\admin\pitch front 16.04.13.mkv
[2013.04.16 19:39:15 | 013,183,495 | ---- | C] () -- C:\Users\admin\pitch 16.04.13.mkv
[2013.04.10 20:20:44 | 021,218,113 | ---- | C] () -- C:\Users\admin\Eisen 8 DTL 10.04.13.mkv
[2013.04.10 20:17:36 | 054,417,516 | ---- | C] () -- C:\Users\admin\Eisen 8 10.04.13.mkv
[2013.04.03 22:53:49 | 013,979,913 | ---- | C] () -- C:\Users\admin\Eisen front 03.04.13.mkv
[2013.04.03 22:51:06 | 016,372,428 | ---- | C] () -- C:\Users\admin\Eisen dtl 03.04.13.mkv
[2013.03.26 21:34:34 | 000,174,664 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
[2013.03.26 21:34:33 | 000,049,376 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2013.03.19 21:06:53 | 000,172,081 | ---- | C] () -- C:\Users\admin\Seier Assistent der GF.jpg
[2013.03.19 21:05:06 | 000,086,794 | ---- | C] () -- C:\Users\admin\Gemeinde Schiffdorf Verwaltung.jpg
[2013.03.19 21:03:26 | 000,108,191 | ---- | C] () -- C:\Users\admin\WoGe Immokfm.jpg
[2013.02.23 15:24:39 | 012,335,233 | ---- | C] () -- C:\Users\admin\Driver 23.02.13.mkv
[2013.02.23 15:20:01 | 011,826,541 | ---- | C] () -- C:\Users\admin\Eisen ohne Haube 23.02.13.mkv
[2013.02.23 15:14:14 | 012,107,038 | ---- | C] () -- C:\Users\admin\Eisen mit Haube rechte Achsel 23.02.13.mkv
[2013.02.10 13:25:54 | 000,000,538 | ---- | C] () -- C:\Windows\wiso.ini
[2013.02.04 19:46:02 | 020,925,145 | ---- | C] () -- C:\Users\admin\Eisen 5 front 02.02.13.mkv
[2013.02.04 19:43:11 | 024,579,049 | ---- | C] () -- C:\Users\admin\Driver front 02.02.13.mkv
[2012.12.28 20:03:13 | 024,627,363 | ---- | C] () -- C:\Users\admin\Holz 3 Ende Einheit 28.12.12.mkv
[2012.12.28 20:00:34 | 056,989,253 | ---- | C] () -- C:\Users\admin\Driver 28.12.12.mkv
[2012.12.28 19:55:40 | 014,571,245 | ---- | C] () -- C:\Users\admin\Eisen 8 28.12.12.mkv
[2012.12.28 19:49:54 | 055,616,684 | ---- | C] () -- C:\Users\admin\Holz 3 28.12.12.mkv
[2012.12.26 18:00:41 | 009,531,021 | ---- | C] () -- C:\Users\admin\Driver 26.12.12.mkv
[2012.12.26 17:57:32 | 013,533,847 | ---- | C] () -- C:\Users\admin\Eisen 5 front 26.12.12.mkv
[2012.12.26 17:55:28 | 014,352,682 | ---- | C] () -- C:\Users\admin\Eisen 8 mit Linien front 26.12.12.mkv
[2012.12.26 17:52:53 | 013,932,186 | ---- | C] () -- C:\Users\admin\Eisen 8 front 26.12.12.mkv
[2012.12.26 17:49:50 | 015,412,561 | ---- | C] () -- C:\Users\admin\Holz 3 26.12.12.mkv
[2012.12.26 17:46:45 | 009,920,000 | ---- | C] () -- C:\Users\admin\Eisen 5 ohne Linien 26.12.12.mkv
[2012.12.26 17:44:11 | 012,955,586 | ---- | C] () -- C:\Users\admin\Eisen 5 26.12.12.mkv
[2012.12.26 17:33:24 | 012,522,121 | ---- | C] () -- C:\Users\admin\Eisen 8 26.12.12.mkv
[2012.12.22 18:11:29 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2012.12.22 18:11:28 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2012.10.22 22:40:34 | 000,000,125 | -HS- | C] () -- C:\ProgramData\.zreglib
[2012.09.12 21:59:59 | 019,241,183 | ---- | C] () -- C:\Users\admin\Driver front 12.9.12.mkv
[2012.09.12 21:58:30 | 011,183,466 | ---- | C] () -- C:\Users\admin\Eisen 3 front 12.9.12.mkv
[2012.09.12 21:56:50 | 012,892,325 | ---- | C] () -- C:\Users\admin\Eisen 8 front 12.9.12.mkv
[2012.09.12 21:54:42 | 014,048,903 | ---- | C] () -- C:\Users\admin\Pitch 12.9.12.mkv
[2012.09.12 21:53:16 | 033,091,934 | ---- | C] () -- C:\Users\admin\Driver 12.9.12.mkv
[2012.09.12 21:50:59 | 017,953,315 | ---- | C] () -- C:\Users\admin\Eisen 8 12.9.12.mkv
[2012.09.12 21:48:33 | 026,932,392 | ---- | C] () -- C:\Users\admin\Eisen 3 12.9.12.mkv
[2012.07.23 10:31:38 | 004,428,800 | ---- | C] () -- C:\Windows\System32\x264vfw.dll
[2012.07.02 21:28:06 | 000,112,640 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2012.07.02 20:28:35 | 032,985,769 | ---- | C] () -- C:\Users\admin\Eisen 8 02.07.12.mkv
[2012.07.02 20:27:26 | 026,920,386 | ---- | C] () -- C:\Users\admin\Eisen 8 front 02.07.12.mkv
[2012.07.02 20:26:31 | 019,834,853 | ---- | C] () -- C:\Users\admin\Eisen 6 front 02.07.12.mkv
[2012.07.02 20:25:34 | 021,210,506 | ---- | C] () -- C:\Users\admin\Eisen 6 02.07.12.mkv
[2012.07.02 20:24:24 | 015,046,577 | ---- | C] () -- C:\Users\admin\Eisen 3  02.07.12.mkv
[2012.07.02 20:23:40 | 021,809,336 | ---- | C] () -- C:\Users\admin\Eisen 3 front 02.07.12.mkv
[2012.07.02 20:22:01 | 019,939,294 | ---- | C] () -- C:\Users\admin\Driver front 02.07.12.mkv
[2012.07.02 20:20:00 | 016,418,871 | ---- | C] () -- C:\Users\admin\Driver 02.07.12.mkv
[2012.06.21 15:12:48 | 000,405,649 | ---- | C] () -- C:\Users\admin\heiratsurkunde.jpg
[2012.06.18 21:07:09 | 000,000,600 | ---- | C] () -- C:\Users\admin\AppData\Roaming\winscp.rnd
[2012.05.22 19:33:48 | 000,196,096 | ---- | C] () -- C:\Windows\System32\MACD32.DLL
[2012.05.22 19:33:48 | 000,138,752 | ---- | C] () -- C:\Windows\System32\MASE32.DLL
[2012.05.22 19:33:48 | 000,136,192 | ---- | C] () -- C:\Windows\System32\MAMC32.DLL
[2012.05.22 19:33:48 | 000,057,856 | ---- | C] () -- C:\Windows\System32\MASD32.DLL
[2012.05.22 19:33:48 | 000,027,648 | ---- | C] () -- C:\Windows\System32\MA32.DLL
[2012.04.13 15:56:43 | 031,245,933 | ---- | C] () -- C:\Users\admin\kurzes Eisen 13.4.12.mkv
[2012.04.13 15:54:56 | 012,321,174 | ---- | C] () -- C:\Users\admin\mittleres Eisen 13.4.12.mkv
[2012.04.13 15:50:04 | 023,774,173 | ---- | C] () -- C:\Users\admin\Eisen 3 13.4.12.mkv
[2012.04.13 15:46:55 | 029,628,308 | ---- | C] () -- C:\Users\admin\mittleres Eisen Front 13.4.12.mkv
[2012.04.01 18:40:14 | 000,000,425 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2012.04.01 18:40:14 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI
[2012.04.01 18:19:07 | 000,000,050 | ---- | C] () -- C:\Windows\System32\bridf07a.dat
[2012.04.01 18:12:20 | 000,031,664 | ---- | C] () -- C:\Windows\maxlink.ini
[2012.03.31 16:08:29 | 000,140,288 | ---- | C] () -- C:\Users\admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.03.29 01:50:18 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2012.03.29 01:50:17 | 000,631,358 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2012.03.29 01:50:17 | 000,127,668 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2012.03.29 01:50:17 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2012.03.28 22:02:12 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2012.03.28 22:00:25 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2012.03.28 21:04:03 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2012.03.28 16:15:00 | 000,000,680 | ---- | C] () -- C:\Users\admin\AppData\Local\d3d9caps.dat
[2012.03.28 16:04:03 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2012.01.10 00:45:18 | 000,178,688 | ---- | C] () -- C:\Windows\System32\unrar.dll
 
========== LOP Check ==========
 
[2013.04.26 15:28:09 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Amazon
[2013.04.06 21:11:06 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Babylon
[2013.05.06 22:29:55 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Buhl Data Service
[2013.04.07 10:11:14 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\DAEMON Tools Lite
[2013.04.06 21:12:33 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Delta
[2013.04.06 21:10:02 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\DVDVideoSoft
[2012.04.15 21:35:59 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\FireShot
[2012.07.06 11:33:13 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\fotobuch.de AG
[2013.04.08 18:35:13 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Hotspot Shield
[2012.03.31 20:59:36 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Kinovea
[2013.04.06 21:10:02 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\OpenCandy
[2012.04.01 12:17:43 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\OpenOffice.org
[2012.12.22 18:13:02 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Ubisoft
[2012.05.10 15:58:42 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\UltraMixer4
[2012.11.02 21:07:44 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\VistaCodecs
[2012.04.02 17:55:58 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Xi
[2013.04.26 18:58:52 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\XMedia Recode
[2013.06.11 20:53:45 | 000,032,514 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >