Doppelunterstreichungen bei Firefox und Google Chrome

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-12-2013
Ran by Lokaladmin (administrator) on PCWG1300 on 11-12-2013 23:45:56
Running from C:\Users\Lokaladmin\AppData\Local\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Gladinet, INC) C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
() C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSVSSSvr.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Professional 8\PDFProFiltSrv.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Remote Management System\ManagementAgentNT.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Remote Management System\RouterNT.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe
(Uwe Sieber - www.uwe-sieber.de) C:\Program Files\USBDLM\USBDLM.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Ulead Systems\Ulead PhotoImpact 6\ABMTSR.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\OmniPage18\omnipage.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Professional 8\PdfPro8Hook.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
(Uwe Sieber - www.uwe-sieber.de) C:\Program Files\USBDLM\USBDLM_usr.exe
(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe
(Gladinet, INC) C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladinetClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-30] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] ()
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.EXE [689488 2008-03-11] (CANON INC.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoWelcomeScreen] 1
HKCU\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
MountPoints2: {4ec55f1e-cdb0-11e2-8897-10604b852c3e} - F:\LaunchU3.exe -a
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [290688 2012-10-24] (Intel Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [ConnectionCenter] - C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [309184 2012-03-28] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [Sophos AutoUpdate Monitor] - C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe [929272 2013-02-13] (Sophos Limited)
HKLM-x32\...\Run: [OmniPage Preload] - C:\Program Files (x86)\Nuance\OmniPage18\omnipage.exe [1467240 2011-07-13] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
HKLM-x32\...\Run: [PDF8 Registry Controller] - C:\Program Files (x86)\Nuance\PDF Professional 8\RegistryController.exe [178576 2012-10-23] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFProHook] - C:\Program Files (x86)\Nuance\PDF Professional 8\PdfPro8Hook.exe [2013072 2012-10-23] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2013-10-10] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
AppInit_DLLs: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll [217672 2013-10-21] (Sophos Limited)
AppInit_DLLs-x32: c:\progra~2\sophos\sophos~1\sophos~1.dll [275352 2013-10-21] (Sophos Limited)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.lmu.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6D65629BD7C3CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - c:\program files (x86)\internet explorer\iexplore.exe
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Professional 8\bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO-x32: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Show-Password - {8ce16b24-784d-4da6-9986-866250aa8596} - C:\Program Files (x86)\Show-Password\136.dll ()
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: ZeonIEEventHelper Class - {C7DA0384-42AA-428c-B832-88AC343DE1A8} - C:\Program Files (x86)\Nuance\PDF Professional 8\bin\gzeoniefavclient.dll (Zeon Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Nuance PDF - {BCCE15AE-AC7E-4bc9-94AF-2A714A412BCB} - C:\Program Files (x86)\Nuance\PDF Professional 8\bin\gzeoniefavclient.dll (Zeon Corporation)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect119b.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Winsock: Catalog9 01 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 02 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 03 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 04 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 05 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 06 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 07 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 08 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 19 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9-x64 01 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 02 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 03 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 04 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 05 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 06 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 07 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 08 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 19 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Lokaladmin\AppData\Roaming\Mozilla\Firefox\Profiles\gg6wiobf.default
FF user.js: detected! => C:\Users\Lokaladmin\AppData\Roaming\Mozilla\Firefox\Profiles\gg6wiobf.default\user.js
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @caminova.com/DjVuPlugin - C:\Program Files (x86)\Caminova\Document Express DjVu Plug-in\npdjvu.dll (Caminova, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Professional 8\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Tube Dimmer - C:\Users\Lokaladmin\AppData\Roaming\Mozilla\Firefox\Profiles\gg6wiobf.default\Extensions\support@tubedimmerapp.com
FF Extension: WOT - C:\Users\Lokaladmin\AppData\Roaming\Mozilla\Firefox\Profiles\gg6wiobf.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: DownloadHelper - C:\Users\Lokaladmin\AppData\Roaming\Mozilla\Firefox\Profiles\gg6wiobf.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: nuance - C:\Users\Lokaladmin\AppData\Roaming\Mozilla\Firefox\Profiles\gg6wiobf.default\Extensions\nuance@pdf8
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF HKCU\...\Firefox\Extensions: [{da6d9f64-0bec-427b-a62d-6f6f6ce72768}] - C:\Program Files (x86)\Show-Password\136.xpi
FF Extension: No Name - C:\Program Files (x86)\Show-Password\136.xpi

Chrome: 
=======
CHR HomePage: 
CHR RestoreOnStartup: "hxxp://www.google.de/"
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U9) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.90.5) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Extension: (Google Drive) - C:\Users\Lokaladmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Lokaladmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Lokaladmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Show-Password) - C:\Users\Lokaladmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\logekkkdbdidmmcgkonmmonclldogceg\1.136_0
CHR Extension: (Google Wallet) - C:\Users\Lokaladmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Lokaladmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [logekkkdbdidmmcgkonmmonclldogceg] - C:\Program Files (x86)\Show-Password\136.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 GladFileMonSvc; C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe [29592 2012-09-24] (Gladinet, INC)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 PDFProFiltSrv; C:\Program Files (x86)\Nuance\PDF Professional 8\PDFProFiltSrv.exe [135056 2012-10-23] (Nuance Communications, Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-08-31] (Realtek Semiconductor)
R2 Samsung Network Fax Server; C:\windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [239616 2012-08-07] (Samsung Electronics Co., Ltd.)
R2 SAVAdminService; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe [290296 2013-10-21] (Sophos Limited)
R2 SAVService; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe [206328 2013-10-21] (Sophos Limited)
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia)
R2 Sophos Agent; C:\Program Files (x86)\Sophos\Remote Management System\ManagementAgentNT.exe [289856 2013-02-01] (Sophos Limited)
R2 Sophos AutoUpdate Service; C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe [237048 2013-02-13] (Sophos Limited)
R2 Sophos Message Router; C:\Program Files (x86)\Sophos\Remote Management System\RouterNT.exe [818240 2013-02-01] (Sophos Limited)
R2 Sophos Web Control Service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe [357400 2013-02-01] (Sophos Limited)
R2 swi_service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [3109880 2013-10-21] (Sophos Limited)
S2 swi_update_64; C:\ProgramData\Sophos\Web Intelligence\swi_update_64.exe [2012152 2013-10-21] (Sophos Limited)
R2 USBDLM; C:\Program Files\USBDLM\USBDLM.exe [451560 2012-09-09] (Uwe Sieber - www.uwe-sieber.de)
S3 uvnc_service; C:\Program Files (x86)\UltraVNC\WinVNC.exe [2015968 2012-02-14] (UltraVNC)

==================== Drivers (Whitelisted) ====================

R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [154952 2013-02-01] (Sophos Limited)
S3 sdcfilter; C:\Windows\System32\DRIVERS\sdcfilter.sys [36640 2013-02-01] (Sophos Limited)
S4 SophosBootDriver; C:\Windows\System32\DRIVERS\SophosBootDriver.sys [25608 2013-02-01] (Sophos Plc)
R3 SRS_PremiumSound_Service; C:\Windows\System32\drivers\srs_PremiumSound_amd64.sys [513312 2011-07-18] ()
S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52080 2013-10-10] (Cisco Systems, Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-11 23:45 - 2013-12-11 23:45 - 00000000 ____D C:\FRST
2013-12-10 18:26 - 2013-12-10 18:26 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-10 18:26 - 2013-12-10 18:26 - 00000000 ____D C:\Users\Lokaladmin\AppData\Roaming\Malwarebytes
2013-12-10 18:26 - 2013-12-10 18:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-10 18:26 - 2013-12-10 18:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-10 18:26 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-12-09 23:35 - 2013-12-11 22:53 - 00003116 _____ C:\windows\System32\Tasks\WinZip Malware Protector_startup
2013-12-09 23:35 - 2013-12-11 07:24 - 00000000 ____D C:\Program Files (x86)\WinZip Malware Protector
2013-12-09 23:35 - 2013-12-09 23:35 - 00001195 _____ C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2013-12-09 23:35 - 2013-12-09 23:35 - 00000000 ____D C:\Users\Lokaladmin\AppData\Roaming\Nico Mak Computing
2013-12-09 23:35 - 2013-12-09 23:35 - 00000000 ____D C:\ProgramData\Nico Mak Computing
2013-12-09 23:35 - 2013-03-15 17:10 - 00020480 _____ C:\windows\system32\wsusnative64.exe
2013-12-09 16:32 - 2013-12-10 18:46 - 00000000 ____D C:\ProgramData\Updater
2013-12-09 16:32 - 2013-12-10 18:46 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-09 16:32 - 2013-12-09 16:32 - 00000000 ____D C:\Users\Lokaladmin\Documents\StreamTransport
2013-12-09 16:31 - 2013-12-11 22:52 - 00000414 _____ C:\windows\Tasks\Show-Password Update.job
2013-12-09 16:31 - 2013-12-09 23:15 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2013-12-09 16:31 - 2013-12-09 21:52 - 00000000 ____D C:\Users\Lokaladmin\AppData\Local\Mobogenie
2013-12-09 16:31 - 2013-12-09 16:46 - 00000340 _____ C:\Users\Lokaladmin\daemonprocess.txt
2013-12-09 16:31 - 2013-12-09 16:31 - 00003072 _____ C:\windows\System32\Tasks\Show-Password Update
2013-12-09 16:31 - 2013-12-09 16:31 - 00000000 ____D C:\Users\Lokaladmin\Documents\Mobogenie
2013-12-09 16:31 - 2013-12-09 16:31 - 00000000 ____D C:\Users\Lokaladmin\AppData\Local\cache
2013-12-09 16:31 - 2013-12-09 16:31 - 00000000 ____D C:\Program Files (x86)\Show-Password
2013-12-09 10:18 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\windows\system32\IEUDINIT.EXE
2013-12-09 10:16 - 2013-12-09 10:16 - 23212032 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 17142784 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 12995584 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 11220992 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 05765120 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 04240384 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-09 10:16 - 2013-12-09 10:16 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-09 10:16 - 2013-12-09 10:16 - 02332160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 02166272 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 01993728 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-12-09 10:16 - 2013-12-09 10:16 - 01926656 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-12-09 10:16 - 2013-12-09 10:16 - 01818112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 01394176 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 01228800 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 01156608 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 01051136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00942592 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00645120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsIntl.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00616104 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat
2013-12-09 10:16 - 2013-12-09 10:16 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat
2013-12-09 10:16 - 2013-12-09 10:16 - 00610304 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2013-12-09 10:16 - 2013-12-09 10:16 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2013-12-09 10:16 - 2013-12-09 10:16 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00263376 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00244736 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00238288 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00208384 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00151552 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00147968 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00083456 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2013-12-09 10:16 - 2013-12-09 10:16 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2013-12-09 10:16 - 2013-12-09 10:16 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-12-09 10:15 - 2013-12-09 10:18 - 00009768 _____ C:\windows\IE11_main.log
2013-12-09 10:07 - 2013-12-09 10:07 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-12-09 10:07 - 2013-12-09 10:07 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-12-09 10:07 - 2013-12-09 10:07 - 00174504 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-12-09 10:07 - 2013-12-09 10:07 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-09 10:07 - 2013-12-09 10:07 - 00000000 ____D C:\ProgramData\Oracle
2013-12-09 10:07 - 2013-12-09 10:07 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-09 09:44 - 2013-12-09 09:44 - 00002195 _____ C:\Users\Public\Desktop\WinZip.lnk
2013-12-09 09:44 - 2013-12-09 09:44 - 00000000 ____D C:\Users\Lokaladmin\AppData\Local\WinZip
2013-12-09 09:44 - 2013-12-09 09:44 - 00000000 ____D C:\ProgramData\WinZip
2013-12-09 09:44 - 2013-12-09 09:44 - 00000000 ____D C:\Program Files\WinZip
2013-12-01 11:38 - 2013-12-01 11:38 - 00000000 _____ C:\windows\system32\vireng.log
2013-11-19 12:48 - 2013-11-19 12:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-18 16:33 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll
2013-11-18 16:33 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\credui.dll
2013-11-18 16:33 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2013-11-18 16:33 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-18 16:33 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2013-11-18 16:33 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\credui.dll
2013-11-18 16:32 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-11-18 16:32 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-11-18 16:32 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2013-11-18 16:32 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2013-11-18 16:32 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2013-11-18 16:32 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2013-11-18 16:32 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2013-11-18 16:32 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2013-11-18 16:32 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2013-11-18 16:32 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2013-11-18 16:32 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2013-11-18 16:32 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2013-11-18 16:32 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2013-11-18 16:32 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2013-11-18 16:32 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2013-11-18 16:32 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2013-11-18 16:31 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-11-18 16:31 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-11-18 16:31 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-11-18 16:31 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll
2013-11-18 16:31 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL
2013-11-18 16:31 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-11-18 16:31 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2013-11-18 16:31 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-11-18 16:31 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-11-18 16:31 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-11-18 16:31 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-11-18 16:31 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-11-18 16:31 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-11-18 16:31 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-11-18 16:31 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-11-12 16:03 - 2013-11-12 16:03 - 00000000 ____D C:\Program Files\WinDjView
2013-11-12 15:37 - 2013-11-12 15:37 - 00001746 _____ C:\Users\Lokaladmin\Desktop\Caminova - Verknüpfung.lnk
2013-11-12 15:36 - 2013-11-12 15:36 - 00000000 ____D C:\Program Files (x86)\Caminova

==================== One Month Modified Files and Folders =======

2013-12-11 23:45 - 2013-12-11 23:45 - 00000000 ____D C:\FRST
2013-12-11 23:21 - 2013-02-10 00:05 - 00000000 ____D C:\Users\Lokaladmin\Documents\Outlook-Dateien
2013-12-11 23:03 - 2012-11-19 15:13 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-11 22:59 - 2009-07-14 11:57 - 00701310 _____ C:\windows\system32\perfh007.dat
2013-12-11 22:59 - 2009-07-14 11:57 - 00150210 _____ C:\windows\system32\perfc007.dat
2013-12-11 22:59 - 2009-07-14 06:13 - 01620612 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-11 22:59 - 2009-07-14 05:45 - 00012272 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-11 22:59 - 2009-07-14 05:45 - 00012272 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-11 22:55 - 2013-05-22 21:01 - 00000000 ____D C:\Users\Lokaladmin\AppData\Local\gladinet
2013-12-11 22:55 - 2013-01-31 14:26 - 01924779 _____ C:\windows\WindowsUpdate.log
2013-12-11 22:53 - 2013-12-09 23:35 - 00003116 _____ C:\windows\System32\Tasks\WinZip Malware Protector_startup
2013-12-11 22:52 - 2013-12-09 16:31 - 00000414 _____ C:\windows\Tasks\Show-Password Update.job
2013-12-11 22:52 - 2012-11-19 15:09 - 00001106 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-11 22:52 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-12-11 22:52 - 2009-07-14 05:51 - 00062690 _____ C:\windows\setupact.log
2013-12-11 22:51 - 2012-11-19 15:09 - 00001110 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-11 18:42 - 2013-02-15 10:09 - 00000099 _____ C:\Users\Public\LMDebug.log
2013-12-11 18:03 - 2012-11-19 15:13 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 18:03 - 2012-11-19 15:13 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 18:03 - 2012-11-19 15:13 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 07:24 - 2013-12-09 23:35 - 00000000 ____D C:\Program Files (x86)\WinZip Malware Protector
2013-12-10 18:54 - 2012-11-14 16:52 - 00549204 _____ C:\windows\PFRO.log
2013-12-10 18:46 - 2013-12-09 16:32 - 00000000 ____D C:\ProgramData\Updater
2013-12-10 18:46 - 2013-12-09 16:32 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-10 18:26 - 2013-12-10 18:26 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-10 18:26 - 2013-12-10 18:26 - 00000000 ____D C:\Users\Lokaladmin\AppData\Roaming\Malwarebytes
2013-12-10 18:26 - 2013-12-10 18:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-10 18:26 - 2013-12-10 18:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-10 12:55 - 2013-02-09 12:03 - 00000000 ____D C:\Users\Lokaladmin\AppData\Roaming\The Master Genealogist v8
2013-12-09 23:35 - 2013-12-09 23:35 - 00001195 _____ C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2013-12-09 23:35 - 2013-12-09 23:35 - 00000000 ____D C:\Users\Lokaladmin\AppData\Roaming\Nico Mak Computing
2013-12-09 23:35 - 2013-12-09 23:35 - 00000000 ____D C:\ProgramData\Nico Mak Computing
2013-12-09 23:29 - 2013-05-12 09:52 - 00015344 _____ C:\Users\Lokaladmin\AppData\Local\internal.grp
2013-12-09 23:15 - 2013-12-09 16:31 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2013-12-09 21:52 - 2013-12-09 16:31 - 00000000 ____D C:\Users\Lokaladmin\AppData\Local\Mobogenie
2013-12-09 16:46 - 2013-12-09 16:31 - 00000340 _____ C:\Users\Lokaladmin\daemonprocess.txt
2013-12-09 16:32 - 2013-12-09 16:32 - 00000000 ____D C:\Users\Lokaladmin\Documents\StreamTransport
2013-12-09 16:31 - 2013-12-09 16:31 - 00003072 _____ C:\windows\System32\Tasks\Show-Password Update
2013-12-09 16:31 - 2013-12-09 16:31 - 00000000 ____D C:\Users\Lokaladmin\Documents\Mobogenie
2013-12-09 16:31 - 2013-12-09 16:31 - 00000000 ____D C:\Users\Lokaladmin\AppData\Local\cache
2013-12-09 16:31 - 2013-12-09 16:31 - 00000000 ____D C:\Program Files (x86)\Show-Password
2013-12-09 16:31 - 2013-01-31 14:53 - 00000000 ____D C:\Users\Lokaladmin
2013-12-09 15:51 - 2013-08-24 05:38 - 00001072 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-12-09 15:50 - 2013-01-31 14:53 - 00000000 ____D C:\Users\Lokaladmin\AppData\Roaming\vlc
2013-12-09 15:10 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2013-12-09 13:14 - 2013-03-03 12:19 - 00000000 ___RD C:\Users\Lokaladmin\Virtual Machines
2013-12-09 10:24 - 2013-01-31 14:53 - 00001427 _____ C:\Users\Lokaladmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-09 10:22 - 2009-07-14 04:20 - 00000000 ____D C:\windows\PolicyDefinitions
2013-12-09 10:20 - 2013-05-22 17:13 - 01597700 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2013-12-09 10:18 - 2013-12-09 10:15 - 00009768 _____ C:\windows\IE11_main.log
2013-12-09 10:16 - 2013-12-09 10:16 - 23212032 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 17142784 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 12995584 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 11220992 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 05765120 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 04240384 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-09 10:16 - 2013-12-09 10:16 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-09 10:16 - 2013-12-09 10:16 - 02332160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 02166272 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 01993728 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-12-09 10:16 - 2013-12-09 10:16 - 01926656 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-12-09 10:16 - 2013-12-09 10:16 - 01818112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 01394176 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 01228800 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 01156608 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 01051136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00942592 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00645120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsIntl.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00616104 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat
2013-12-09 10:16 - 2013-12-09 10:16 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat
2013-12-09 10:16 - 2013-12-09 10:16 - 00610304 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2013-12-09 10:16 - 2013-12-09 10:16 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2013-12-09 10:16 - 2013-12-09 10:16 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00263376 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00244736 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00238288 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00208384 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00151552 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00147968 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00083456 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2013-12-09 10:16 - 2013-12-09 10:16 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2013-12-09 10:16 - 2013-12-09 10:16 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2013-12-09 10:16 - 2013-12-09 10:16 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2013-12-09 10:16 - 2013-12-09 10:16 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-12-09 10:07 - 2013-12-09 10:07 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-12-09 10:07 - 2013-12-09 10:07 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-12-09 10:07 - 2013-12-09 10:07 - 00174504 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-12-09 10:07 - 2013-12-09 10:07 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-09 10:07 - 2013-12-09 10:07 - 00000000 ____D C:\ProgramData\Oracle
2013-12-09 10:07 - 2013-12-09 10:07 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-09 09:44 - 2013-12-09 09:44 - 00002195 _____ C:\Users\Public\Desktop\WinZip.lnk
2013-12-09 09:44 - 2013-12-09 09:44 - 00000000 ____D C:\Users\Lokaladmin\AppData\Local\WinZip
2013-12-09 09:44 - 2013-12-09 09:44 - 00000000 ____D C:\ProgramData\WinZip
2013-12-09 09:44 - 2013-12-09 09:44 - 00000000 ____D C:\Program Files\WinZip
2013-12-06 11:18 - 2013-02-09 11:29 - 00000000 ____D C:\Users\Lokaladmin\AppData\Roaming\WinEdt
2013-12-05 15:56 - 2013-01-31 14:53 - 00000000 ____D C:\Users\Lokaladmin\AppData\Local\Microsoft Help
2013-12-05 14:53 - 2012-11-19 15:09 - 00002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-04 12:00 - 2013-02-01 11:50 - 00000542 _____ C:\windows\Tasks\Tägliche zeitgesteuerte Überprüfung.job
2013-12-04 10:10 - 2013-05-09 09:38 - 00000000 ____D C:\nbwin
2013-12-02 20:09 - 2009-07-14 06:32 - 00000000 ____D C:\windows\system32\FxsTmp
2013-12-01 11:38 - 2013-12-01 11:38 - 00000000 _____ C:\windows\system32\vireng.log
2013-12-01 10:46 - 2012-11-19 15:09 - 00004106 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-01 10:46 - 2012-11-19 15:09 - 00003854 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-20 17:58 - 2012-11-19 14:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-20 09:37 - 2013-01-31 15:08 - 00000000 ____D C:\ProgramData\Cisco
2013-11-20 09:37 - 2013-01-31 15:08 - 00000000 ____D C:\Program Files (x86)\Cisco
2013-11-19 12:48 - 2013-11-19 12:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-19 03:33 - 2012-11-16 10:16 - 00267936 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2013-11-18 16:44 - 2012-11-16 12:13 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-18 16:43 - 2013-08-24 21:30 - 00000000 ____D C:\windows\system32\MRT
2013-11-18 16:42 - 2012-11-16 10:59 - 82896128 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-11-18 10:29 - 2013-01-31 14:53 - 00000000 ____D C:\Users\Lokaladmin\AppData\Local\Adobe
2013-11-12 16:03 - 2013-11-12 16:03 - 00000000 ____D C:\Program Files\WinDjView
2013-11-12 15:37 - 2013-11-12 15:37 - 00001746 _____ C:\Users\Lokaladmin\Desktop\Caminova - Verknüpfung.lnk
2013-11-12 15:36 - 2013-11-12 15:36 - 00000000 ____D C:\Program Files (x86)\Caminova

Files to move or delete:
====================
C:\Users\Lokaladmin\pdf8_ret_O2013_Update_x64.exe


Some content of TEMP:
====================
C:\Users\Lokaladmin\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Lokaladmin\AppData\Local\Temp\Mobogenie_Setup_2.1.23_515.exe
C:\Users\Lokaladmin\AppData\Local\Temp\Show-Password_1030-8101.exe
C:\Users\Lokaladmin\AppData\Local\Temp\vlc-2.1.1-win32.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-10 01:36

==================== End Of Log ============================
         

==================== Memory info =========================== 

Percentage of memory in use: 29%
Total physical RAM: 8066.95 MB
Available physical RAM: 5683.05 MB
Total Pagefile: 16132.07 MB
Available Pagefile: 13541.91 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:117.19 GB) (Free:35.3 GB) NTFS
Drive d: (Daten) (Fixed) (Total:814.23 GB) (Free:361.6 GB) NTFS
Drive e: (HDD2) (Fixed) (Total:465.76 GB) (Free:153.76 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 55F6CCAC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=117 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=814 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 466 GB) (Disk ID: BA62E5A4)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================