Win32/Cryptor

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=8ce97b012524ab40b4a55fb8452105e0
# engine=14608
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-01 11:16:09
# local_time=2013-08-01 01:16:09 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1043 16777213 100 87 158297 62489753 0 0
# compatibility_mode=5893 16776574 100 94 1812494 126985619 0 0
# scanned=184400
# found=0
# cleaned=0
# scan_time=8404
         

 Results of screen317's Security Check version 0.99.71  
 Windows 7 Service Pack 1 x64 (UAC is disabled!)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
AVG AntiVirus Free Edition 2013   
 Antivirus out of date!  
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 TuneUp Utilities 2011   
 TuneUp Utilities Language Pack (de-DE) 
 Java 7 Update 21  
 Java version out of Date! 
 Adobe Flash Player 11.7.700.224  
 Mozilla Firefox (22.0) 
 Mozilla Thunderbird (17.0.7) 
````````Process Check: objlist.exe by Laurent````````  
 AVG avgwdsvc.exe 
 Steganos Online Shield OnlineShieldService.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-07-2013 03
Ran by Klaus (administrator) on 01-08-2013 13:57:47
Running from C:\Users\Klaus\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
(Macrovision Corporation) C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
() C:\Program Files (x86)\EssentialPIM\EssentialPIM.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(Michel Krämer) C:\Program Files\Spamihilator\spamihilator.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Online Shield\OnlineShieldService.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
(Microsoft Corporation) C:\Windows\system32\UI0Detect.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe
(ASCOMP Software GmbH) C:\Program Files (x86)\ASCOMP Software\BackUp Maker\bkmaker.exe
(QuestSoft) C:\Program Files (x86)\QTranslate\QTranslate.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Farbar) C:\Users\Klaus\Downloads\FRST64(2).exe

==================== Registry (Whitelisted) ==================

HKLM\...\InprocServer32: [Default-cscui]  <==== ATTENTION!
HKCU\...\Run: [EssentialPIM] - C:\Program Files (x86)\EssentialPIM\EssentialPIM.exe [13919224 2013-03-22] ()
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4408368 2013-04-29] (AVG Technologies CZ, s.r.o.)
HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun [x]
HKU\Default User\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun [x]
Startup: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spamihilator.lnk
ShortcutTarget: Spamihilator.lnk -> C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer)
BootExecute: 

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {49BBA580-F0FF-4BCD-BB70-44EE6C71166B} URL = hxxp://search.zonealarm.com/search?Source=Browser&oemCode=ZLN115922623630104-1001&toolbarId=base&affiliateId=1001&Lan=de&utid=204c3cc0000000000000b803051e7ee1&q={searchTerms}&r=629
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
DPF: HKLM-x32 {22E5D91F-89E6-4405-AD9C-0AF27BA6F06B} file:///E:/components/hidinputmonitorx.ocx
DPF: HKLM-x32 {4F63D44B-6274-4D60-8AB1-CAA7116B8AF3} file:///E:/components/A9.ocx
DPF: HKLM-x32 {7030CC6C-1A88-4591-BB5A-651B9F7F0C30} file:///E:/components/wmvhdrating.ocx
Tcpip\Parameters: [DhcpNameServer] 217.68.161.141 217.68.161.171
Tcpip\..\Interfaces\{2EDAB288-B902-4BB2-A8AB-C79C5A154837}: [NameServer]8.26.56.26,156.154.70.22
Tcpip\..\Interfaces\{B3CA05E5-FE31-49F1-992E-81A6580C20A7}: [NameServer]8.26.56.26,156.154.70.22

FireFox:
========
FF ProfilePath: C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1c32bbm5.default
FF SelectedSearchEngine: webwebweb
FF Homepage: https://startpage.com/deu/
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.13.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1c32bbm5.default\searchplugins\idealode.xml
FF SearchPlugin: C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1c32bbm5.default\searchplugins\ixquick-https---deutsch.xml
FF SearchPlugin: C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1c32bbm5.default\searchplugins\startpage-https---deutsch.xml
FF Extension: Ghostery - C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1c32bbm5.default\Extensions\firefox@ghostery.com
FF Extension: WOT - C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1c32bbm5.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: FoxLingo - C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1c32bbm5.default\Extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}
FF Extension: vdpure - C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1c32bbm5.default\Extensions\vdpure@link64.xpi
FF Extension: No Name - C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1c32bbm5.default\Extensions\{b6f3913d-d2e8-480c-9aca-c41d3d4c1db3}.xpi
FF Extension: No Name - C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1c32bbm5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1c32bbm5.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==================== Services (Whitelisted) =================

S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4937264 2013-05-14] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-04-18] (AVG Technologies CZ, s.r.o.)
S2 backupservice; C:\Windows\system32\backupservice.dll [336384 2012-10-31] (Digital Dynamic)
S3 CxAudMsg; C:\Windows\system32\CxAudMsg64.exe [198784 2010-12-17] (Conexant Systems Inc.)
S4 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-03] ()
R2 Online Shield Starter Service; C:\Program Files (x86)\Steganos Online Shield\OnlineShieldService.exe [315656 2013-07-15] (Steganos Software GmbH)
S4 StarMoney 8.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2028864 2011-12-08] (TuneUp Software)
S2 WSWNA3100; C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe [285152 2010-08-26] ()
S3 Freemake Improver; "C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe" [x]
S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [x]

==================== Drivers (Whitelisted) ====================

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-03-29] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-02-08] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [206136 2013-02-08] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311096 2013-02-08] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-02-08] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-02-08] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [240952 2013-03-21] (AVG Technologies CZ, s.r.o.)
R0 DiskSec; C:\Windows\System32\Drivers\DiskSec.sys [27168 2010-05-22] (MAGIX)
S1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [95752 2013-01-16] (COMODO)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [530488 2012-08-07] (Duplex Secure Ltd.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [11856 2010-10-07] (TuneUp Software)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
R1 VirtualDisk_U; C:\Windows\system32\drivers\virtualdisk_u.sys [69152 2010-04-22] (MAGIX)
R1 VirtualDisk_U; C:\Windows\system32\drivers\virtualdisk_u.sys [69152 2010-04-22] (MAGIX)
S3 AmUStor; system32\drivers\AmUStor.SYS [x]
S3 BioNTDrv; \??\C:\Program Files (x86)\Paragon Software\Backup and Recovery 2013 Free\program\BioNTDrv.SYS [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 clwvd; system32\DRIVERS\clwvd.sys [x]
U3 DfSdkS; 
S2 PEGAGFN; \??\C:\Program Files (x86)\PHotkey\PEGAGFN.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-01 13:53 - 2013-08-01 13:53 - 00000997 _____ C:\Users\Klaus\Documents\checkup.txt
2013-08-01 13:50 - 2013-08-01 13:50 - 00891098 _____ C:\Users\Klaus\Downloads\SecurityCheck.exe
2013-08-01 10:49 - 2013-08-01 10:49 - 00000000 ____D C:\Program Files (x86)\ESET
2013-08-01 10:46 - 2013-08-01 10:47 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu.exe
2013-07-31 15:12 - 2013-07-31 15:12 - 00045213 _____ C:\Users\Klaus\Documents\FRST.txt
2013-07-31 15:10 - 2013-07-31 15:10 - 01781589 _____ (Farbar) C:\Users\Klaus\Downloads\FRST64(1).exe
2013-07-31 15:08 - 2013-07-31 15:08 - 00001387 _____ C:\Users\Klaus\Documents\JRT.txt
2013-07-31 15:07 - 2013-07-31 15:07 - 00001387 _____ C:\Users\Klaus\Desktop\JRT.txt
2013-07-31 15:04 - 2013-07-31 15:04 - 00562430 _____ (Oleg N. Scherbakov) C:\Users\Klaus\Downloads\JRT.exe
2013-07-31 15:04 - 2013-07-31 15:04 - 00000000 ____D C:\Windows\ERUNT
2013-07-31 15:01 - 2013-07-31 15:01 - 00013478 _____ C:\Users\Klaus\Documents\AdwCleaner[S1].txt
2013-07-31 14:55 - 2013-07-31 14:56 - 00013478 _____ C:\AdwCleaner[S1].txt
2013-07-31 14:55 - 2013-07-31 14:55 - 00666633 _____ C:\Users\Klaus\Downloads\adwcleaner.exe
2013-07-31 14:41 - 2013-07-31 14:41 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-31 14:41 - 2013-07-31 14:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Malwarebytes
2013-07-31 14:41 - 2013-07-31 14:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-31 14:41 - 2013-07-31 14:41 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-07-31 14:41 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-07-31 14:39 - 2013-07-31 14:40 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-31 11:20 - 2013-07-31 11:20 - 00031601 _____ C:\ComboFix.txt
2013-07-31 11:05 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-31 11:05 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-31 11:05 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-31 11:05 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-31 11:05 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-31 11:05 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-31 11:05 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-31 11:05 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-31 11:04 - 2013-07-31 11:20 - 00000000 ____D C:\Qoobox
2013-07-31 11:04 - 2013-07-31 11:18 - 00000000 ____D C:\Windows\erdnt
2013-07-31 11:03 - 2013-07-31 11:03 - 05098210 ____R (Swearware) C:\Users\Klaus\Downloads\ComboFix.exe
2013-07-30 16:12 - 2013-07-30 16:12 - 00020648 _____ C:\Users\Klaus\Downloads\Addition.txt
2013-07-30 16:08 - 2013-07-30 16:08 - 01781589 _____ (Farbar) C:\Users\Klaus\Downloads\FRST64.exe
2013-07-30 16:08 - 2013-07-30 16:08 - 00000000 ____D C:\FRST
2013-07-28 10:02 - 2013-07-28 10:02 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2013-07-28 10:01 - 2013-07-28 10:01 - 00527423 _____ (                                                            ) C:\Users\Klaus\Downloads\Lame_v3.99.3_for_Windows.exe
2013-07-27 15:08 - 2013-07-27 15:08 - 00045838 _____ C:\Users\Klaus\Documents\Handbuch  Audacity.htm
2013-07-27 12:20 - 2013-07-30 12:11 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Audacity
2013-07-27 12:20 - 2013-07-27 12:20 - 00001018 _____ C:\Users\Klaus\Desktop\Audacity.lnk
2013-07-27 12:20 - 2013-07-27 12:20 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-07-27 12:02 - 2013-07-27 12:04 - 60530848 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSAudioRecorder.exe
2013-07-22 11:27 - 2013-07-22 11:29 - 17737608 _____ (Adobe Systems Incorporated) C:\Users\Klaus\Downloads\install_flash_player(1).exe
2013-07-20 16:58 - 2013-07-20 17:00 - 00000000 ____D C:\Users\Klaus\Downloads\vcredist_x86
2013-07-20 16:57 - 2013-07-20 16:58 - 02663497 _____ C:\Users\Klaus\Downloads\vcredist_x86.zip
2013-07-20 16:54 - 2013-07-20 16:55 - 41719400 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\avsaudioeditor(5).exe
2013-07-19 16:45 - 2013-07-19 16:45 - 24114336 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Klaus\Downloads\FreeVideoToMP3Converter_5.0.27.717.exe
2013-07-19 15:31 - 2013-07-19 15:31 - 00003394 _____ C:\Windows\System32\Tasks\EPUpdater
2013-07-19 11:30 - 2013-07-29 08:50 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-07-19 11:27 - 2013-07-19 11:27 - 24114160 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Klaus\Downloads\FreeAudioConverter.exe
2013-07-19 08:38 - 2013-07-31 11:14 - 00004754 _____ C:\Windows\PFRO.log
2013-07-18 15:37 - 2013-07-18 15:39 - 10226704 _____ (Learnpulse) C:\Users\Klaus\Downloads\Screenpresso140.exe
2013-07-18 10:43 - 2013-07-18 10:43 - 00377856 _____ C:\Users\Klaus\Downloads\gmer_2.1.19163.exe
2013-07-18 10:36 - 2013-07-18 11:32 - 00113156 _____ C:\Users\Klaus\Downloads\OTL.Txt
2013-07-18 10:29 - 2013-07-18 10:29 - 00602112 _____ (OldTimer Tools) C:\Users\Klaus\Downloads\OTL.exe
2013-07-18 10:27 - 2013-07-18 10:27 - 00000524 _____ C:\Users\Klaus\Downloads\defogger_disable.log
2013-07-18 10:19 - 2013-07-18 10:19 - 00050477 _____ C:\Users\Klaus\Downloads\Defogger.exe
2013-07-17 17:02 - 2013-07-29 08:53 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AVS4YOU
2013-07-17 17:02 - 2013-07-17 17:02 - 00000000 ____D C:\ProgramData\AVS4YOU
2013-07-17 17:01 - 2013-07-17 17:01 - 00001224 _____ C:\Users\Klaus\Desktop\AVS Video Editor.lnk
2013-07-17 16:57 - 2013-07-17 17:58 - 154348096 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSVideoEditor(2).exe
2013-07-17 16:08 - 2013-08-01 10:33 - 00004401 _____ C:\Windows\setupact.log
2013-07-17 16:06 - 2013-07-29 08:53 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2013-07-17 16:06 - 2013-07-27 12:06 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2013-07-17 16:00 - 2013-07-17 16:05 - 41719400 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSAudioEditor(4).exe
2013-07-17 15:36 - 2013-07-17 15:36 - 00003152 _____ C:\Windows\System32\Tasks\{96A2BAC8-349A-46C6-9377-2EC6B8A0100C}
2013-07-17 15:35 - 2013-07-17 15:35 - 00563560 _____ (Online Media Technologies Ltd.) C:\Users\Klaus\Downloads\AVSUninstallCleaner(1).exe
2013-07-17 15:22 - 2013-07-17 15:24 - 41719400 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSAudioEditor(3).exe
2013-07-17 15:19 - 2013-07-17 15:19 - 00563560 _____ (Online Media Technologies Ltd.) C:\Users\Klaus\Downloads\AVSUninstallCleaner.exe
2013-07-16 14:27 - 2013-07-16 14:27 - 14037816 _____ (Steganos Software GmbH) C:\Users\Klaus\Downloads\sosint(1).exe
2013-07-16 11:04 - 2013-07-16 11:06 - 24119568 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Klaus\Downloads\FreeVideoToMP3Converter-5.0.26.628.exe
2013-07-15 12:14 - 2013-07-15 12:15 - 21281052 _____ (Audacity Team                                               ) C:\Users\Klaus\Downloads\audacity-win-2.0.3.exe
2013-07-15 08:06 - 2013-07-15 08:07 - 41719400 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSAudioEditor(2).exe
2013-07-15 07:57 - 2013-07-15 08:02 - 154348096 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSVideoEditor(1).exe
2013-07-15 07:01 - 2013-07-15 07:02 - 17737608 _____ (Adobe Systems Incorporated) C:\Users\Klaus\Downloads\install_flash_player.exe
2013-07-14 18:28 - 2013-07-14 18:28 - 00000000 ____D C:\ProgramData\Free Download Manager
2013-07-14 18:24 - 2013-07-14 18:25 - 07696614 _____ (FreeDownloadManager.ORG                                     ) C:\Users\Klaus\Downloads\fdminst_3.9.2b1303.exe
2013-07-14 17:19 - 2013-07-14 17:20 - 00000000 ____D C:\Users\Klaus\Downloads\KeePass-1.26
2013-07-14 17:19 - 2013-07-14 17:19 - 01481207 _____ C:\Users\Klaus\Downloads\KeePass-1.26.zip
2013-07-14 17:17 - 2013-07-14 17:17 - 01850306 _____ (Dominik Reichl                                              ) C:\Users\Klaus\Downloads\KeePass-1.26-Setup.exe
2013-07-14 16:33 - 2013-07-14 16:36 - 41719400 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSAudioEditor(1).exe
2013-07-14 16:07 - 2013-07-14 16:11 - 41719400 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSAudioEditor.exe
2013-07-12 18:57 - 2013-07-12 18:57 - 00000000 ____D C:\ProgramData\mergeparts
2013-07-12 18:57 - 2013-07-12 18:57 - 00000000 ____D C:\ProgramData\deletepart
2013-07-12 16:13 - 2013-07-12 16:55 - 330301440 _____ C:\Users\Klaus\Downloads\pmagic_2013_06_15.iso
2013-07-12 16:04 - 2013-07-12 16:08 - 66274816 _____ C:\Users\Klaus\Downloads\PM12_Prof_demo_de_xU.msi
2013-07-12 15:57 - 2013-07-12 15:58 - 26388552 _____ (EaseUS                                                      ) C:\Users\Klaus\Downloads\epm_9.2.2.exe
2013-07-12 14:10 - 2013-07-12 14:11 - 00000000 ____D C:\Windows\system32\MRT
2013-07-12 11:49 - 2013-07-12 11:49 - 00000000 ____D C:\ProgramData\managecapsule
2013-07-12 09:53 - 2013-07-12 09:53 - 00000886 _____ C:\Users\Public\Desktop\NETGEAR WNA3100 Setup-Assistent.lnk
2013-07-12 09:53 - 2013-07-12 09:53 - 00000000 ____D C:\Program Files (x86)\NETGEAR
2013-07-12 09:53 - 2007-01-19 18:24 - 00025312 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\Drivers\SCMNdisP.sys
2013-07-12 09:51 - 2013-07-12 09:51 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_bcmwlhigh664_01009.Wdf
2013-07-12 09:51 - 2009-11-06 08:40 - 00838136 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\bcmwlhigh664.sys
2013-07-12 09:51 - 2009-11-06 08:34 - 03888128 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv64.dll
2013-07-12 09:51 - 2009-11-06 08:34 - 03552768 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui64.dll
2013-07-12 09:51 - 2009-11-06 08:34 - 00095472 _____ (Broadcom Corporation) C:\Windows\system32\bcmwlcoi.dll
2013-07-12 09:51 - 2009-11-06 08:31 - 01436920 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2013-07-11 11:33 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 11:33 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 11:33 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 11:33 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 11:33 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 11:33 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 11:33 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 11:33 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 11:33 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 11:33 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 11:33 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 11:33 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 11:33 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 11:33 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 11:33 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 11:33 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 11:33 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 11:33 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 11:33 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 11:33 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 11:33 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 11:33 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 11:33 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 11:33 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 11:33 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 11:33 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 11:33 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 11:33 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 11:33 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 10:50 - 2013-07-11 10:50 - 00000000 ____D C:\Users\Klaus\Documents\AVS4YOU
2013-07-11 09:57 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 09:57 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-11 09:57 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 09:57 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 09:56 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 09:52 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-11 09:52 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 06:54 - 2013-07-10 06:54 - 31807306 _____ C:\Users\Klaus\Documents\Media Library.vec
2013-07-08 17:24 - 2013-07-08 17:24 - 01272256 _____ (Ellora Assets Corporation                                   ) C:\Users\Klaus\Downloads\FreemakeVideo3524DownloaderSetup.exe
2013-07-08 16:55 - 2013-07-08 18:02 - 00000000 ____D C:\ProgramData\Freemake
2013-07-08 16:55 - 2013-07-08 17:29 - 00000000 ____D C:\Users\Klaus\Documents\Freemake
2013-07-08 16:51 - 2013-07-08 16:53 - 29210128 _____ (Ellora Assets Corporation                                   ) C:\Users\Klaus\Downloads\FreemakeVideoConverter_4.0.2.10.exe
2013-07-08 11:23 - 2013-07-08 11:23 - 00308476 _____ C:\Users\Klaus\Documents\nios[vollbio.de]_2013-07-08_11-23.zip
2013-07-08 10:24 - 2013-07-08 10:25 - 16523960 _____ (Tracker Software Products Ltd                               ) C:\Users\Klaus\Downloads\PDFXVwer_2.5.211.exe
2013-07-07 18:12 - 2013-07-07 18:37 - 120291328 _____ C:\Users\Klaus\Downloads\br_free_g_2013_chip(2).msi
2013-07-07 16:45 - 2013-07-07 16:45 - 01327104 _____ C:\Users\Klaus\Downloads\pcwelt-sparberater.msi
2013-07-07 12:15 - 2013-07-07 12:49 - 153963984 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVS632VideoEditor.exe
2013-07-06 11:09 - 2013-07-06 11:09 - 00000000 ____D C:\ProgramData\LogSaver
2013-07-05 17:57 - 2013-07-05 18:08 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Wuala
2013-07-05 17:57 - 2013-07-05 17:59 - 00000000 ____D C:\Users\Klaus\AppData\Local\Wuala
2013-07-05 17:57 - 2013-07-05 17:57 - 00000860 _____ C:\Users\Klaus\Desktop\Wuala.lnk
2013-07-05 17:57 - 2013-07-05 17:57 - 00000846 _____ C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wuala.lnk
2013-07-05 17:54 - 2013-07-05 17:55 - 22964952 _____ C:\Users\Klaus\Downloads\WualaSetup.exe
2013-07-05 12:12 - 2013-07-05 12:12 - 00000000 ____D C:\ProgramData\restore
2013-07-04 16:27 - 2013-07-04 16:27 - 00000000 ____D C:\ProgramData\explauncher
2013-07-04 16:27 - 2013-07-04 16:27 - 00000000 ____D C:\ProgramData\backup
2013-07-04 15:14 - 2013-07-04 15:30 - 120291328 _____ C:\Users\Klaus\Downloads\br_free_g_2013_chip.msi
2013-07-04 15:02 - 2013-07-04 15:02 - 01936378 _____ C:\Users\Klaus\Downloads\u1301(1).zip
2013-07-04 15:01 - 2013-07-04 15:01 - 01936378 _____ C:\Users\Klaus\Downloads\u1301.zip
2013-07-04 15:01 - 2013-07-04 15:01 - 00000600 _____ C:\Users\Klaus\PUTTY.RND
2013-07-04 15:01 - 2013-07-04 15:01 - 00000000 ____D C:\Users\Klaus\Downloads\u1301
2013-07-04 14:57 - 2013-07-04 14:57 - 00131083 _____ C:\Users\Klaus\Downloads\betterprivacy-1.68-fx.zip
2013-07-04 14:57 - 2013-07-04 14:57 - 00000000 ____D C:\Users\Klaus\Downloads\betterprivacy-1.68-fx
2013-07-04 14:44 - 2013-07-04 14:57 - 120291328 _____ C:\Users\Klaus\Downloads\br_free_g_2013_chip(1).msi
192

==================== One Month Modified Files and Folders =======

2013-08-01 13:57 - 2013-08-01 13:57 - 01781589 _____ (Farbar) C:\Users\Klaus\Downloads\FRST64(2).exe
2013-08-01 13:53 - 2013-08-01 13:53 - 00000997 _____ C:\Users\Klaus\Documents\checkup.txt
2013-08-01 13:52 - 2012-11-23 09:46 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Spamihilator
2013-08-01 13:50 - 2013-08-01 13:50 - 00891098 _____ C:\Users\Klaus\Downloads\SecurityCheck.exe
2013-08-01 13:48 - 2013-06-26 17:34 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\QTranslate
2013-08-01 10:49 - 2013-08-01 10:49 - 00000000 ____D C:\Program Files (x86)\ESET
2013-08-01 10:47 - 2013-08-01 10:46 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu.exe
2013-08-01 10:46 - 2011-05-16 16:04 - 01786324 _____ C:\Windows\system32\perfh007.dat
2013-08-01 10:46 - 2011-05-16 16:04 - 00499744 _____ C:\Windows\system32\perfc007.dat
2013-08-01 10:46 - 2009-07-14 07:13 - 00006142 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-01 10:41 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-01 10:41 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-01 10:40 - 2013-05-16 17:57 - 01520882 _____ C:\Windows\WindowsUpdate.log
2013-08-01 10:33 - 2013-07-17 16:08 - 00004401 _____ C:\Windows\setupact.log
2013-08-01 10:33 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-31 17:30 - 2013-03-26 15:35 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\EssentialPIM
2013-07-31 15:25 - 2013-03-11 11:33 - 00000000 ____D C:\Program Files (x86)\StarMoney 8.0
2013-07-31 15:12 - 2013-07-31 15:12 - 00045213 _____ C:\Users\Klaus\Documents\FRST.txt
2013-07-31 15:10 - 2013-07-31 15:10 - 01781589 _____ (Farbar) C:\Users\Klaus\Downloads\FRST64(1).exe
2013-07-31 15:08 - 2013-07-31 15:08 - 00001387 _____ C:\Users\Klaus\Documents\JRT.txt
2013-07-31 15:07 - 2013-07-31 15:07 - 00001387 _____ C:\Users\Klaus\Desktop\JRT.txt
2013-07-31 15:04 - 2013-07-31 15:04 - 00562430 _____ (Oleg N. Scherbakov) C:\Users\Klaus\Downloads\JRT.exe
2013-07-31 15:04 - 2013-07-31 15:04 - 00000000 ____D C:\Windows\ERUNT
2013-07-31 15:01 - 2013-07-31 15:01 - 00013478 _____ C:\Users\Klaus\Documents\AdwCleaner[S1].txt
2013-07-31 14:56 - 2013-07-31 14:55 - 00013478 _____ C:\AdwCleaner[S1].txt
2013-07-31 14:55 - 2013-07-31 14:55 - 00666633 _____ C:\Users\Klaus\Downloads\adwcleaner.exe
2013-07-31 14:41 - 2013-07-31 14:41 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-31 14:41 - 2013-07-31 14:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Malwarebytes
2013-07-31 14:41 - 2013-07-31 14:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-31 14:41 - 2013-07-31 14:41 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-07-31 14:40 - 2013-07-31 14:39 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-31 11:20 - 2013-07-31 11:20 - 00031601 _____ C:\ComboFix.txt
2013-07-31 11:20 - 2013-07-31 11:04 - 00000000 ____D C:\Qoobox
2013-07-31 11:20 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-07-31 11:18 - 2013-07-31 11:04 - 00000000 ____D C:\Windows\erdnt
2013-07-31 11:15 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-07-31 11:14 - 2013-07-19 08:38 - 00004754 _____ C:\Windows\PFRO.log
2013-07-31 11:13 - 2009-07-14 04:34 - 60293120 _____ C:\Windows\system32\config\software.bak
2013-07-31 11:13 - 2009-07-14 04:34 - 17825792 _____ C:\Windows\system32\config\system.bak
2013-07-31 11:13 - 2009-07-14 04:34 - 00786432 _____ C:\Windows\system32\config\default.bak
2013-07-31 11:13 - 2009-07-14 04:34 - 00057344 _____ C:\Windows\system32\config\sam.bak
2013-07-31 11:13 - 2009-07-14 04:34 - 00024576 _____ C:\Windows\system32\config\security.bak
2013-07-31 11:03 - 2013-07-31 11:03 - 05098210 ____R (Swearware) C:\Users\Klaus\Downloads\ComboFix.exe
2013-07-31 10:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-30 17:17 - 2012-10-09 12:09 - 00000000 ____D C:\ProgramData\MFAData
2013-07-30 16:12 - 2013-07-30 16:12 - 00020648 _____ C:\Users\Klaus\Downloads\Addition.txt
2013-07-30 16:08 - 2013-07-30 16:08 - 01781589 _____ (Farbar) C:\Users\Klaus\Downloads\FRST64.exe
2013-07-30 16:08 - 2013-07-30 16:08 - 00000000 ____D C:\FRST
2013-07-30 12:11 - 2013-07-27 12:20 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Audacity
2013-07-30 12:11 - 2013-03-21 17:32 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\vlc
2013-07-30 10:24 - 2012-07-19 11:48 - 00000000 ____D C:\Users\Klaus\Documents\Banken
2013-07-29 08:53 - 2013-07-17 17:02 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AVS4YOU
2013-07-29 08:53 - 2013-07-17 16:06 - 00000000 ____D C:\Program Files (x86)\AVS4YOU
2013-07-29 08:50 - 2013-07-19 11:30 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-07-28 17:35 - 2013-06-16 09:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-28 10:02 - 2013-07-28 10:02 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2013-07-28 10:01 - 2013-07-28 10:01 - 00527423 _____ (                                                            ) C:\Users\Klaus\Downloads\Lame_v3.99.3_for_Windows.exe
2013-07-27 15:08 - 2013-07-27 15:08 - 00045838 _____ C:\Users\Klaus\Documents\Handbuch  Audacity.htm
2013-07-27 12:20 - 2013-07-27 12:20 - 00001018 _____ C:\Users\Klaus\Desktop\Audacity.lnk
2013-07-27 12:20 - 2013-07-27 12:20 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-07-27 12:06 - 2013-07-17 16:06 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2013-07-27 12:04 - 2013-07-27 12:02 - 60530848 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSAudioRecorder.exe
2013-07-26 11:25 - 2013-06-29 09:35 - 00001190 _____ C:\Users\Public\Desktop\Steganos Online Shield.lnk
2013-07-26 11:25 - 2013-06-29 09:33 - 00000000 ____D C:\Program Files (x86)\Steganos Online Shield
2013-07-24 18:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-07-24 10:32 - 2012-07-19 11:47 - 00000000 ____D C:\Users\Klaus\Documents\Kauphthing  Kriese
2013-07-22 11:29 - 2013-07-22 11:27 - 17737608 _____ (Adobe Systems Incorporated) C:\Users\Klaus\Downloads\install_flash_player(1).exe
2013-07-22 09:54 - 2012-07-18 11:32 - 00000000 ____D C:\Users\Klaus
2013-07-20 17:00 - 2013-07-20 16:58 - 00000000 ____D C:\Users\Klaus\Downloads\vcredist_x86
2013-07-20 16:58 - 2013-07-20 16:57 - 02663497 _____ C:\Users\Klaus\Downloads\vcredist_x86.zip
2013-07-20 16:55 - 2013-07-20 16:54 - 41719400 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\avsaudioeditor(5).exe
2013-07-19 16:45 - 2013-07-19 16:45 - 24114336 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Klaus\Downloads\FreeVideoToMP3Converter_5.0.27.717.exe
2013-07-19 16:41 - 2013-06-10 07:38 - 00000997 _____ C:\Users\Klaus\Desktop\KeePass.lnk
2013-07-19 15:31 - 2013-07-19 15:31 - 00003394 _____ C:\Windows\System32\Tasks\EPUpdater
2013-07-19 11:27 - 2013-07-19 11:27 - 24114160 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Klaus\Downloads\FreeAudioConverter.exe
2013-07-18 15:39 - 2013-07-18 15:37 - 10226704 _____ (Learnpulse) C:\Users\Klaus\Downloads\Screenpresso140.exe
2013-07-18 11:32 - 2013-07-18 10:36 - 00113156 _____ C:\Users\Klaus\Downloads\OTL.Txt
2013-07-18 10:43 - 2013-07-18 10:43 - 00377856 _____ C:\Users\Klaus\Downloads\gmer_2.1.19163.exe
2013-07-18 10:29 - 2013-07-18 10:29 - 00602112 _____ (OldTimer Tools) C:\Users\Klaus\Downloads\OTL.exe
2013-07-18 10:27 - 2013-07-18 10:27 - 00000524 _____ C:\Users\Klaus\Downloads\defogger_disable.log
2013-07-18 10:19 - 2013-07-18 10:19 - 00050477 _____ C:\Users\Klaus\Downloads\Defogger.exe
2013-07-17 17:58 - 2013-07-17 16:57 - 154348096 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSVideoEditor(2).exe
2013-07-17 17:02 - 2013-07-17 17:02 - 00000000 ____D C:\ProgramData\AVS4YOU
2013-07-17 17:01 - 2013-07-17 17:01 - 00001224 _____ C:\Users\Klaus\Desktop\AVS Video Editor.lnk
2013-07-17 16:05 - 2013-07-17 16:00 - 41719400 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSAudioEditor(4).exe
2013-07-17 15:57 - 2012-08-14 12:40 - 00000000 ___RD C:\Users\Klaus\Documents\Dropbox
2013-07-17 15:57 - 2012-08-14 12:37 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Dropbox
2013-07-17 15:36 - 2013-07-17 15:36 - 00003152 _____ C:\Windows\System32\Tasks\{96A2BAC8-349A-46C6-9377-2EC6B8A0100C}
2013-07-17 15:35 - 2013-07-17 15:35 - 00563560 _____ (Online Media Technologies Ltd.) C:\Users\Klaus\Downloads\AVSUninstallCleaner(1).exe
2013-07-17 15:24 - 2013-07-17 15:22 - 41719400 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSAudioEditor(3).exe
2013-07-17 15:19 - 2013-07-17 15:19 - 00563560 _____ (Online Media Technologies Ltd.) C:\Users\Klaus\Downloads\AVSUninstallCleaner.exe
2013-07-16 14:27 - 2013-07-16 14:27 - 14037816 _____ (Steganos Software GmbH) C:\Users\Klaus\Downloads\sosint(1).exe
2013-07-16 14:18 - 2013-06-29 09:32 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Steganos
2013-07-16 11:07 - 2013-05-18 08:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-16 11:06 - 2013-07-16 11:04 - 24119568 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Klaus\Downloads\FreeVideoToMP3Converter-5.0.26.628.exe
2013-07-15 12:15 - 2013-07-15 12:14 - 21281052 _____ (Audacity Team                                               ) C:\Users\Klaus\Downloads\audacity-win-2.0.3.exe
2013-07-15 08:07 - 2013-07-15 08:06 - 41719400 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSAudioEditor(2).exe
2013-07-15 08:02 - 2013-07-15 07:57 - 154348096 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSVideoEditor(1).exe
2013-07-15 07:02 - 2013-07-15 07:01 - 17737608 _____ (Adobe Systems Incorporated) C:\Users\Klaus\Downloads\install_flash_player.exe
2013-07-14 18:28 - 2013-07-14 18:28 - 00000000 ____D C:\ProgramData\Free Download Manager
2013-07-14 18:25 - 2013-07-14 18:24 - 07696614 _____ (FreeDownloadManager.ORG                                     ) C:\Users\Klaus\Downloads\fdminst_3.9.2b1303.exe
2013-07-14 17:20 - 2013-07-14 17:19 - 00000000 ____D C:\Users\Klaus\Downloads\KeePass-1.26
2013-07-14 17:19 - 2013-07-14 17:19 - 01481207 _____ C:\Users\Klaus\Downloads\KeePass-1.26.zip
2013-07-14 17:17 - 2013-07-14 17:17 - 01850306 _____ (Dominik Reichl                                              ) C:\Users\Klaus\Downloads\KeePass-1.26-Setup.exe
2013-07-14 17:09 - 2012-07-19 11:47 - 00000000 ____D C:\Users\Klaus\Documents\Internet
2013-07-14 16:36 - 2013-07-14 16:33 - 41719400 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSAudioEditor(1).exe
2013-07-14 16:11 - 2013-07-14 16:07 - 41719400 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVSAudioEditor.exe
2013-07-14 09:47 - 2013-02-03 09:18 - 00000996 _____ C:\Users\Public\Desktop\AVG 2013.lnk
2013-07-12 18:57 - 2013-07-12 18:57 - 00000000 ____D C:\ProgramData\mergeparts
2013-07-12 18:57 - 2013-07-12 18:57 - 00000000 ____D C:\ProgramData\deletepart
2013-07-12 16:55 - 2013-07-12 16:13 - 330301440 _____ C:\Users\Klaus\Downloads\pmagic_2013_06_15.iso
2013-07-12 16:08 - 2013-07-12 16:04 - 66274816 _____ C:\Users\Klaus\Downloads\PM12_Prof_demo_de_xU.msi
2013-07-12 15:58 - 2013-07-12 15:57 - 26388552 _____ (EaseUS                                                      ) C:\Users\Klaus\Downloads\epm_9.2.2.exe
2013-07-12 14:11 - 2013-07-12 14:10 - 00000000 ____D C:\Windows\system32\MRT
2013-07-12 11:49 - 2013-07-12 11:49 - 00000000 ____D C:\ProgramData\managecapsule
2013-07-12 09:53 - 2013-07-12 09:53 - 00000886 _____ C:\Users\Public\Desktop\NETGEAR WNA3100 Setup-Assistent.lnk
2013-07-12 09:53 - 2013-07-12 09:53 - 00000000 ____D C:\Program Files (x86)\NETGEAR
2013-07-12 09:53 - 2011-07-18 23:23 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-12 09:51 - 2013-07-12 09:51 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_bcmwlhigh664_01009.Wdf
2013-07-11 13:50 - 2013-03-06 12:12 - 05131400 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-11 13:47 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 13:47 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 10:50 - 2013-07-11 10:50 - 00000000 ____D C:\Users\Klaus\Documents\AVS4YOU
2013-07-10 06:54 - 2013-07-10 06:54 - 31807306 _____ C:\Users\Klaus\Documents\Media Library.vec
2013-07-08 18:02 - 2013-07-08 16:55 - 00000000 ____D C:\ProgramData\Freemake
2013-07-08 17:29 - 2013-07-08 16:55 - 00000000 ____D C:\Users\Klaus\Documents\Freemake
2013-07-08 17:24 - 2013-07-08 17:24 - 01272256 _____ (Ellora Assets Corporation                                   ) C:\Users\Klaus\Downloads\FreemakeVideo3524DownloaderSetup.exe
2013-07-08 16:53 - 2013-07-08 16:51 - 29210128 _____ (Ellora Assets Corporation                                   ) C:\Users\Klaus\Downloads\FreemakeVideoConverter_4.0.2.10.exe
2013-07-08 16:01 - 2013-05-07 11:02 - 00000000 ____D C:\Users\Klaus\.gimp-2.8
2013-07-08 14:57 - 2012-07-19 11:47 - 00000000 ____D C:\Users\Klaus\Documents\Gas Strom  Wasser
2013-07-08 11:23 - 2013-07-08 11:23 - 00308476 _____ C:\Users\Klaus\Documents\nios[vollbio.de]_2013-07-08_11-23.zip
2013-07-08 10:27 - 2013-03-26 10:55 - 00001043 _____ C:\Users\Public\Desktop\PDF-Viewer.lnk
2013-07-08 10:25 - 2013-07-08 10:24 - 16523960 _____ (Tracker Software Products Ltd                               ) C:\Users\Klaus\Downloads\PDFXVwer_2.5.211.exe
2013-07-07 18:37 - 2013-07-07 18:12 - 120291328 _____ C:\Users\Klaus\Downloads\br_free_g_2013_chip(2).msi
2013-07-07 16:45 - 2013-07-07 16:45 - 01327104 _____ C:\Users\Klaus\Downloads\pcwelt-sparberater.msi
2013-07-07 14:39 - 2012-07-19 11:48 - 00000000 ____D C:\Users\Klaus\Documents\Bewerbung Klaus
2013-07-07 12:49 - 2013-07-07 12:15 - 153963984 _____ (Online Media Technologies Ltd.                              ) C:\Users\Klaus\Downloads\AVS632VideoEditor.exe
2013-07-06 11:09 - 2013-07-06 11:09 - 00000000 ____D C:\ProgramData\LogSaver
2013-07-06 10:13 - 2012-07-18 11:32 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-05 18:08 - 2013-07-05 17:57 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Wuala
2013-07-05 17:59 - 2013-07-05 17:57 - 00000000 ____D C:\Users\Klaus\AppData\Local\Wuala
2013-07-05 17:57 - 2013-07-05 17:57 - 00000860 _____ C:\Users\Klaus\Desktop\Wuala.lnk
2013-07-05 17:57 - 2013-07-05 17:57 - 00000846 _____ C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wuala.lnk
2013-07-05 17:55 - 2013-07-05 17:54 - 22964952 _____ C:\Users\Klaus\Downloads\WualaSetup.exe
2013-07-05 12:12 - 2013-07-05 12:12 - 00000000 ____D C:\ProgramData\restore
2013-07-04 16:27 - 2013-07-04 16:27 - 00000000 ____D C:\ProgramData\explauncher
2013-07-04 16:27 - 2013-07-04 16:27 - 00000000 ____D C:\ProgramData\backup
2013-07-04 15:30 - 2013-07-04 15:14 - 120291328 _____ C:\Users\Klaus\Downloads\br_free_g_2013_chip.msi
2013-07-04 15:02 - 2013-07-04 15:02 - 01936378 _____ C:\Users\Klaus\Downloads\u1301(1).zip
2013-07-04 15:01 - 2013-07-04 15:01 - 01936378 _____ C:\Users\Klaus\Downloads\u1301.zip
2013-07-04 15:01 - 2013-07-04 15:01 - 00000600 _____ C:\Users\Klaus\PUTTY.RND
2013-07-04 15:01 - 2013-07-04 15:01 - 00000000 ____D C:\Users\Klaus\Downloads\u1301
2013-07-04 14:57 - 2013-07-04 14:57 - 00131083 _____ C:\Users\Klaus\Downloads\betterprivacy-1.68-fx.zip
2013-07-04 14:57 - 2013-07-04 14:57 - 00000000 ____D C:\Users\Klaus\Downloads\betterprivacy-1.68-fx
2013-07-04 14:57 - 2013-07-04 14:44 - 120291328 _____ C:\Users\Klaus\Downloads\br_free_g_2013_chip(1).msi

ZeroAccess:
C:\Windows\Installer\{93832d05-75e6-fdfc-982d-8cf84e7110f2}

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-24 09:45

==================== End Of Log ============================