Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 26.12.2013, 14:28   #1
Ravenwing
 
Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



Hallo zusammen,

seit ein paar Tagen habe ich das Problem, dass ich beim Öffnen meiner Browser (im Einsatz sind Chrome [Standard-Browser] und Firefox) automatisch als Startseite "hxxp://wisersearch.com/?channel=de_nt" habe. Ich hab schon in den Einstellungen geschaut, aber da ist "www.google.de" als Startseite hinterlegt.

Bitte helft mir, diese Einstellung zu löschen.

Ich habe schon Farbar's Recovery Scan Tool in der richtigen Version geladen und einen Scan durchgeführt.

hier die logs:

FRST.txt
Addition.txt

Alt 26.12.2013, 14:41   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.


So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________

Alt 26.12.2013, 14:46   #3
Ravenwing
 
Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



Alles klar, dann hier nochmal die logs:

FRST.txt:


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-12-2013
Ran by Saturn (administrator) on RAVENHOME on 26-12-2013 13:43:58
Running from C:\Users\Saturn\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Sonix) C:\Windows\vsnp2uvc.exe
() C:\Windows\System32\WTMKM.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(Gainward Co.) C:\Program Files (x86)\EXPERTool\TBPANEL.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
() C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe
() C:\Windows\tsnp2uvc.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Roccat GmbH) C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
( ) C:\Windows\System32\lxeccoms.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Windows\System32\atwtusb.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Windows\System32\atwtusb.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Google Inc.) C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-04] (Realtek Semiconductor)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix)
HKLM\...\Run: [MacrokeyManager] - C:\Windows\System32\WTMKM.exe [7325184 2011-04-12] ()
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix)
HKLM-x32\...\Run: [tsnp2uvc] - C:\Windows\tsnp2uvc.exe [320512 2009-12-11] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CloneCDTray] - C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.)
HKLM-x32\...\Run: [RoccatKova+] - C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe [539688 2011-03-17] (Roccat GmbH)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-04] (Geek Software GmbH)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3077528 2011-10-19] ()
HKCU\...\Run: [GAINWARD] - C:\Program Files (x86)\EXPERTool\TBPANEL.exe [2273608 2011-08-02] (Gainward Co.)
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)
HKCU\...\Run: [AudialsNotifier] - C:\Program Files (x86)\Audials\Audials 11\AudialsNotifier.exe [473352 2013-11-27] ()
AppInit_DLLs:  [ ] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5765A900BFCBCB01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKCU - {44219366-4C90-49F2-B082-3F7B238E29B9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=302398&p={searchTerms}
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
ShellExecuteHooks-x32:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 62.109.121.2 62.109.121.1

FireFox:
========
FF ProfilePath: C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.110.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Saturn\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Battlefield Heroes Updater - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\battlefieldheroespatcher@ea.com
FF Extension: ProxTube - Unblock YouTube - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\ich@maltegoetz.de
FF Extension: YouTube Unblocker - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\youtubeunblocker@unblocker.yt
FF Extension: Flagfox - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
FF Extension: Garmin Communicator - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: DownloadHelper - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Simple New Tab - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\snt@dotlabs.co.xpi
FF Extension: TinEye Reverse Image Search - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\tineye@ideeinc.com.xpi
FF Extension: Shockwave Flash Plugin Free - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{18f64064-a482-4fbf-8fd6-3c6e5806565a}.xpi
FF Extension: {43616d3f-8ae4-4351-9b52-74faeeb1a3dc} - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{43616d3f-8ae4-4351-9b52-74faeeb1a3dc}.xpi
FF Extension: Adblock Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Download Statusbar - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
FF Extension: Tab Mix Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.de/", "hxxp://searchqm.com/?channel=sfde203fbdgy21", "hxxp://search.fbdownloader.com/?channel=sfde203fbdgy21", "hxxp://native-search.com/?channel=de", "hxxp://www.google.com"
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll No File
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.486_0\plugin/npUrlAdvisor.dll No File
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.486_0\plugin/npVKPlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll No File
CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (YouTube) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0
CHR Extension: (bloomind ct deepdark) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\djolekdiiojehgfggcjckachfgkkdmjd\1_0
CHR Extension: (Chrome Toolbox (by Google)) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjccknnhdnkbanjilpjddjhmkghmachn\1.0.32_0
CHR Extension: (TinEye Reverse Image Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl\1.1.3_0
CHR Extension: (Safe Money) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0
CHR Extension: (Content Blocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.2.614_0
CHR Extension: (RealDownloader) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0
CHR Extension: (Virtual Keyboard) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.614_0
CHR Extension: (Google Wallet) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (YouTube Unblocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0
CHR Extension: (Gmail) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR Extension: (Anti-Banner) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0
CHR Extension: (Simple New Tab) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmgkeimkiojpjcoiiipekfjaopchhjga\1.0.0_0
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx
CHR StartMenuInternet: Google Chrome - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
S3 DAUpdaterSvc; C:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-12-11] (BioWare)
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] ()
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [248664 2013-09-12] (Garmin Ltd or its subsidiaries)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.)
S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-01-07] ( )
R2 lxec_device; C:\Windows\SysWow64\lxeccoms.exe [598696 2010-01-07] ( )
S2 MSSQL$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe [9150464 2005-05-03] (Microsoft Corporation)
S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [73728 2005-05-03] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4005936 2011-06-06] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-05] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2008-12-31] ()
S3 SQLAgent$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE [323584 2005-05-03] (Microsoft Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-30] (TuneUp Software)
S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
R2 WTService; C:\Windows\system32\atwtusb.exe [916992 2011-04-27] ()

==================== Drivers (Whitelisted) ====================

S3 AF9035HB; C:\Windows\System32\Drivers\AF9035HB.sys [907904 2010-05-15] (ITE Technologies         )
S3 busbcrw; C:\Windows\System32\Drivers\bucrw64.sys [25600 2006-10-27] (Brother Industries, Ltd.)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
R3 ElbyCDFL; C:\Windows\SysWow64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
S3 ezplay; C:\Windows\System32\Drivers\ezplay.sys [118400 2011-10-08] (VSO Software)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-18] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-10-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-15] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-07-15] (Kaspersky Lab ZAO)
R3 KovaPlusFltr; C:\Windows\System32\drivers\KovaPlusFltr.sys [15104 2010-01-25] (ROCCAT Development, Inc.)
R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2005-01-02] (INCA Internet Co., Ltd.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
S1 PCLEPCI; C:\Windows\SysWow64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-11-27] (Audials AG)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552512 2009-12-18] ()
S3 TBPanel; No ImagePath
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
R3 vhidmini; C:\Windows\System32\DRIVERS\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S1 bnqstsgk; \??\C:\Windows\system32\drivers\bnqstsgk.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 cpuz130; \??\C:\Users\Saturn\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
S1 dfhtpxsf; \??\C:\Windows\system32\drivers\dfhtpxsf.sys [x]
S3 dump_wmimmc; \??\c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S1 evkomlpb; \??\C:\Windows\system32\drivers\evkomlpb.sys [x]
S1 exghbnub; \??\C:\Windows\system32\drivers\exghbnub.sys [x]
S1 flnvtwiu; \??\C:\Windows\system32\drivers\flnvtwiu.sys [x]
S1 ggplayov; \??\C:\Windows\system32\drivers\ggplayov.sys [x]
S1 glhbzrdp; \??\C:\Windows\system32\drivers\glhbzrdp.sys [x]
S1 hjgequpo; \??\C:\Windows\system32\drivers\hjgequpo.sys [x]
S1 ibrmytkv; \??\C:\Windows\system32\drivers\ibrmytkv.sys [x]
S1 ihpczvzt; \??\C:\Windows\system32\drivers\ihpczvzt.sys [x]
S1 iwxgprso; \??\C:\Windows\system32\drivers\iwxgprso.sys [x]
S1 jhostfze; \??\C:\Windows\system32\drivers\jhostfze.sys [x]
S1 kiaqjrtf; \??\C:\Windows\system32\drivers\kiaqjrtf.sys [x]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-10-18] (Kaspersky Lab ZAO)
S1 kpqjothk; \??\C:\Windows\system32\drivers\kpqjothk.sys [x]
S1 mozosloe; \??\C:\Windows\system32\drivers\mozosloe.sys [x]
S1 mwtafrhe; \??\C:\Windows\system32\drivers\mwtafrhe.sys [x]
S1 nijxcfnj; \??\C:\Windows\system32\drivers\nijxcfnj.sys [x]
S1 njlwenqt; \??\C:\Windows\system32\drivers\njlwenqt.sys [x]
S1 nrmqgeaq; \??\C:\Windows\system32\drivers\nrmqgeaq.sys [x]
S1 olekorua; \??\C:\Windows\system32\drivers\olekorua.sys [x]
S1 pddbwrxt; \??\C:\Windows\system32\drivers\pddbwrxt.sys [x]
S1 pkijmgtn; \??\C:\Windows\system32\drivers\pkijmgtn.sys [x]
S1 ptvuibnd; \??\C:\Windows\system32\drivers\ptvuibnd.sys [x]
S1 qlnvkvlz; \??\C:\Windows\system32\drivers\qlnvkvlz.sys [x]
S1 qqfmmntb; \??\C:\Windows\system32\drivers\qqfmmntb.sys [x]
S1 qyyteedz; \??\C:\Windows\system32\drivers\qyyteedz.sys [x]
S1 reiphzej; \??\C:\Windows\system32\drivers\reiphzej.sys [x]
S1 rkispkye; \??\C:\Windows\system32\drivers\rkispkye.sys [x]
S1 rqxvktor; \??\C:\Windows\system32\drivers\rqxvktor.sys [x]
S1 rsnvucpt; \??\C:\Windows\system32\drivers\rsnvucpt.sys [x]
S1 sljolomf; \??\C:\Windows\system32\drivers\sljolomf.sys [x]
S1 tpioqxek; \??\C:\Windows\system32\drivers\tpioqxek.sys [x]
S1 trdhienr; \??\C:\Windows\system32\drivers\trdhienr.sys [x]
S1 txvztkiq; \??\C:\Windows\system32\drivers\txvztkiq.sys [x]
S1 tzjkmdvf; \??\C:\Windows\system32\drivers\tzjkmdvf.sys [x]
S1 uguzijuk; \??\C:\Windows\system32\drivers\uguzijuk.sys [x]
S1 vgrfszla; \??\C:\Windows\system32\drivers\vgrfszla.sys [x]
S1 vtxmuojc; \??\C:\Windows\system32\drivers\vtxmuojc.sys [x]
S1 wrsxqila; \??\C:\Windows\system32\drivers\wrsxqila.sys [x]
S1 xeshofoi; \??\C:\Windows\system32\drivers\xeshofoi.sys [x]
S1 xhbipmbk; \??\C:\Windows\system32\drivers\xhbipmbk.sys [x]
S1 ybmjedft; \??\C:\Windows\system32\drivers\ybmjedft.sys [x]
S1 ydnwlbze; \??\C:\Windows\system32\drivers\ydnwlbze.sys [x]
S1 yrxzjdal; \??\C:\Windows\system32\drivers\yrxzjdal.sys [x]
S1 yssdrnbz; \??\C:\Windows\system32\drivers\yssdrnbz.sys [x]
S1 yvzmfhna; \??\C:\Windows\system32\drivers\yvzmfhna.sys [x]
S1 zirtwuoe; \??\C:\Windows\system32\drivers\zirtwuoe.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-26 13:44 - 2013-12-26 13:44 - 00377856 _____ C:\Users\Saturn\Desktop\gmer_2.1.19163.exe
2013-12-26 13:43 - 2013-12-26 13:45 - 00042847 _____ C:\Users\Saturn\Desktop\FRST.txt
2013-12-26 13:43 - 2013-12-26 13:43 - 01928716 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe
2013-12-26 13:43 - 2013-12-26 13:43 - 00000000 ____D C:\FRST
2013-12-26 13:42 - 2013-12-26 13:42 - 00050477 _____ C:\Users\Saturn\Desktop\Defogger.exe
2013-12-26 13:42 - 2013-12-26 13:42 - 00000474 _____ C:\Users\Saturn\Desktop\defogger_disable.log
2013-12-26 13:42 - 2013-12-26 13:42 - 00000000 _____ C:\Users\Saturn\defogger_reenable
2013-12-26 13:36 - 2013-12-26 13:36 - 00000022 _____ C:\Windows\S.dirmngr
2013-12-26 13:33 - 2013-12-26 13:34 - 00000000 ____D C:\AdwCleaner
2013-12-26 13:33 - 2013-12-26 13:33 - 01233962 _____ C:\Users\Saturn\Desktop\adwcleaner_3.016.exe
2013-12-26 08:55 - 2013-12-26 13:38 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 08:55 - 2013-12-26 13:38 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-23 15:47 - 2013-12-23 15:48 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u
2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses
2013-12-23 15:33 - 2013-12-23 15:39 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler
2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2013-12-23 15:32 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D
2013-12-22 14:51 - 2013-12-22 15:02 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate
2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights
2013-12-21 18:35 - 2013-12-21 18:37 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2
2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url
2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url
2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log
2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url
2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url
2013-12-17 18:31 - 2013-12-23 15:01 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014
2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014
2013-12-15 20:04 - 2013-10-30 10:45 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-12-15 20:04 - 2013-10-30 10:45 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll
2013-12-15 20:03 - 2013-12-15 20:04 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2013-12-15 20:03 - 2013-10-30 10:45 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-12-15 20:03 - 2013-10-30 10:45 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-15 20:03 - 2013-10-30 10:45 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
2013-12-15 20:02 - 2013-12-15 20:14 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories
2013-12-15 12:06 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-15 12:06 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-15 12:06 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-15 12:06 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-15 12:04 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-15 12:04 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-15 12:04 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 12:04 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-15 12:04 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-15 12:04 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-15 12:04 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-15 12:04 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-15 12:04 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-15 12:04 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-15 12:04 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-15 12:04 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-15 12:04 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-15 12:04 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-15 12:04 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-15 12:04 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-15 12:04 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-15 12:04 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-15 12:04 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-15 12:04 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-15 12:04 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-15 12:04 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-15 12:04 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-15 12:04 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-15 12:04 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-15 12:04 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-15 12:04 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-15 12:04 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-15 12:04 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-15 12:04 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-15 12:04 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-12 20:35 - 2013-12-26 13:37 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn
2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-12 17:48 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 17:48 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 17:48 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 17:48 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 17:48 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 17:48 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 17:48 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 17:48 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 17:48 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 17:48 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 17:48 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 17:48 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 17:48 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 17:48 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 17:48 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 17:48 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 17:48 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 17:48 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 17:48 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url
2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe
2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot
2013-12-07 20:26 - 2013-12-07 21:31 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part
2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp
2013-12-07 14:06 - 2013-12-07 20:26 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar
2013-12-07 14:03 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar
2013-12-07 13:59 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar
2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url
2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe
2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf
2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk
2013-12-05 19:13 - 2013-12-23 15:01 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk
2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet
2013-12-03 19:58 - 2013-12-03 22:04 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet
2013-12-03 19:52 - 2013-12-03 19:53 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2013-12-03 19:51 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-03 19:51 - 2013-12-03 19:55 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2013-12-03 19:50 - 2013-12-03 19:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion
2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe
2013-12-03 19:17 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation
2013-12-03 19:15 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-03 19:15 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-03 19:14 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA
2013-12-03 18:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url
2013-12-01 19:55 - 2013-12-11 21:58 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server
2013-12-01 19:53 - 2013-12-01 19:52 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar
2013-11-30 17:53 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar
2013-11-30 17:50 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar
2013-11-30 17:46 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar
2013-11-30 17:43 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar
2013-11-30 17:40 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar
2013-11-30 17:37 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar
2013-11-30 17:33 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar
2013-11-30 17:30 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar
2013-11-30 17:27 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar
2013-11-30 17:24 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar
2013-11-30 17:20 - 2013-11-30 17:23 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar
2013-11-30 17:17 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar
2013-11-30 17:14 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar
2013-11-30 17:12 - 2013-11-30 17:14 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar
2013-11-30 17:09 - 2013-11-30 17:12 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar
2013-11-30 17:06 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar
2013-11-30 17:02 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar
2013-11-30 16:59 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar
2013-11-30 16:56 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar
2013-11-30 16:53 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar
2013-11-30 16:49 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar
2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar
2013-11-30 16:46 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar
2013-11-30 16:43 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar
2013-11-30 16:40 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar
2013-11-30 16:36 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar
2013-11-30 16:33 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar
2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar
2013-11-28 19:54 - 2013-11-29 17:56 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-28 19:54 - 2013-11-29 17:56 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-28 19:54 - 2013-11-28 19:54 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-28 19:50 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-28 19:50 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-28 19:50 - 2013-10-30 18:02 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-11-28 19:37 - 2013-11-30 15:31 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part09.rar
2013-11-27 18:46 - 2013-11-27 18:46 - 02244104 _____ C:\Users\Saturn\Desktop\mcpatcher-4.3.0-beta4 (1).exe
2013-11-27 18:41 - 2013-11-27 18:41 - 00675988 _____ C:\Users\Saturn\Desktop\Minecraft (1.7.2).exe
2013-11-27 10:20 - 2013-11-27 10:20 - 00047240 _____ (RapidSolution Software AG) C:\Windows\system32\Drivers\tbhsd.sys
2013-11-27 10:20 - 2013-11-27 10:20 - 00024744 _____ (Audials AG) C:\Windows\system32\Drivers\RrNetCapFilterDriver.sys
2013-11-26 17:49 - 2013-11-26 17:49 - 00001456 _____ C:\Users\Saturn\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2013-11-26 17:31 - 2013-12-03 18:51 - 00024584 _____ C:\Windows\IE11_main.log

==================== One Month Modified Files and Folders =======

2013-12-26 13:45 - 2013-12-26 13:43 - 00042847 _____ C:\Users\Saturn\Desktop\FRST.txt
2013-12-26 13:45 - 2011-06-30 11:00 - 00000000 ____D C:\Users\Saturn\AppData\Local\PMB Files
2013-12-26 13:44 - 2013-12-26 13:44 - 00377856 _____ C:\Users\Saturn\Desktop\gmer_2.1.19163.exe
2013-12-26 13:44 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-26 13:44 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-26 13:43 - 2013-12-26 13:43 - 01928716 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe
2013-12-26 13:43 - 2013-12-26 13:43 - 00000000 ____D C:\FRST
2013-12-26 13:42 - 2013-12-26 13:42 - 00050477 _____ C:\Users\Saturn\Desktop\Defogger.exe
2013-12-26 13:42 - 2013-12-26 13:42 - 00000474 _____ C:\Users\Saturn\Desktop\defogger_disable.log
2013-12-26 13:42 - 2013-12-26 13:42 - 00000000 _____ C:\Users\Saturn\defogger_reenable
2013-12-26 13:42 - 2010-04-06 18:20 - 00000000 ____D C:\Users\Saturn
2013-12-26 13:41 - 2010-04-06 19:01 - 02022132 _____ C:\Windows\WindowsUpdate.log
2013-12-26 13:38 - 2013-12-26 08:55 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 13:38 - 2013-12-26 08:55 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 13:38 - 2013-05-10 16:51 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-12-26 13:37 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi
2013-12-26 13:37 - 2012-06-17 13:57 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA.job
2013-12-26 13:37 - 2012-04-07 18:18 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-26 13:37 - 2009-07-14 05:51 - 26545281 _____ C:\Windows\setupact.log
2013-12-26 13:37 - 2006-11-02 13:34 - 00000292 _____ C:\Windows\win.ini
2013-12-26 13:36 - 2013-12-26 13:36 - 00000022 _____ C:\Windows\S.dirmngr
2013-12-26 13:36 - 2009-09-07 15:11 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-26 13:36 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-26 13:35 - 2010-04-06 18:33 - 00928034 _____ C:\Windows\PFRO.log
2013-12-26 13:34 - 2013-12-26 13:33 - 00000000 ____D C:\AdwCleaner
2013-12-26 13:34 - 2013-06-13 17:19 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Common
2013-12-26 13:34 - 2012-04-01 20:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-26 13:33 - 2013-12-26 13:33 - 01233962 _____ C:\Users\Saturn\Desktop\adwcleaner_3.016.exe
2013-12-26 13:13 - 2012-04-07 18:18 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-26 11:01 - 2011-02-28 17:09 - 01183744 ___SH C:\Users\Saturn\Thumbs.db
2013-12-26 09:00 - 2010-03-06 14:16 - 00000000 ____D C:\Users\Saturn\AppData\Local\Adobe
2013-12-23 20:37 - 2012-06-17 13:57 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core.job
2013-12-23 17:27 - 2010-04-06 20:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\vlc
2013-12-23 15:48 - 2013-12-23 15:47 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u
2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses
2013-12-23 15:39 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler
2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2013-12-23 15:33 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D
2013-12-23 15:32 - 2013-09-14 14:14 - 00000000 ____D C:\ProgramData\Package Cache
2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\ProgramData\RapidSolution
2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\Program Files (x86)\Audials
2013-12-23 15:29 - 2013-06-13 17:15 - 00000000 ____D C:\Users\Saturn\AppData\Local\RapidSolution
2013-12-23 15:01 - 2013-12-17 18:31 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-23 15:01 - 2013-12-05 19:13 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-22 23:51 - 2013-05-30 11:17 - 00000000 ____D C:\Users\Saturn\Desktop\lustige Bilder
2013-12-22 21:48 - 2013-01-02 19:22 - 00000000 ____D C:\JDownloader 2
2013-12-22 21:47 - 2012-03-13 13:25 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner
2013-12-22 21:43 - 2012-04-06 18:05 - 00000000 ____D C:\Users\Saturn\Desktop\filme
2013-12-22 15:02 - 2013-12-22 14:51 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate
2013-12-22 15:01 - 2011-10-10 18:59 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI
2013-12-22 14:39 - 2010-04-08 16:47 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights
2013-12-21 18:37 - 2013-12-21 18:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2
2013-12-21 18:34 - 2010-04-06 20:18 - 00558241 _____ C:\Windows\DirectX.log
2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url
2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url
2013-12-19 20:54 - 2009-07-14 18:58 - 00728016 _____ C:\Windows\system32\perfh007.dat
2013-12-19 20:54 - 2009-07-14 18:58 - 00162238 _____ C:\Windows\system32\perfc007.dat
2013-12-19 20:54 - 2009-07-14 06:13 - 01702976 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Origin
2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Local\Origin
2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\ProgramData\Origin
2013-12-19 18:20 - 2011-10-26 09:42 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log
2013-12-19 18:18 - 2013-04-20 19:08 - 00000000 ____D C:\Users\Saturn\Documents\BioWare
2013-12-19 18:16 - 2012-04-22 22:24 - 00002216 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 18:15 - 2012-04-07 18:18 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url
2013-12-19 10:20 - 2012-08-04 17:38 - 00000000 ____D C:\Users\Saturn\Desktop\Canon Programme
2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url
2013-12-17 18:53 - 2013-10-25 08:35 - 00000000 ____D C:\Users\Saturn\Desktop\Lisa Master
2013-12-17 18:51 - 2013-06-02 21:22 - 00000000 ____D C:\Users\Saturn\Desktop\Stick zeug
2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-12-16 19:59 - 2013-08-17 13:01 - 00000000 ____D C:\Windows\system32\MRT
2013-12-16 19:56 - 2010-04-15 14:07 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-16 00:29 - 2009-09-08 09:08 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-12-16 00:28 - 2012-08-04 17:27 - 00000000 ____D C:\Program Files (x86)\Canon
2013-12-16 00:28 - 2010-04-16 13:02 - 00000000 ____D C:\Program Files (x86)\Trillian
2013-12-16 00:26 - 2009-09-07 15:02 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-15 22:09 - 2010-04-21 15:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-15 20:53 - 2010-03-05 19:23 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Mozilla
2013-12-15 20:32 - 2012-06-17 13:57 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA
2013-12-15 20:32 - 2012-06-17 13:57 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core
2013-12-15 20:14 - 2013-12-15 20:02 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-12-15 20:14 - 2012-02-25 09:52 - 00003756 _____ C:\Windows\System32\Tasks\Real Player-Online-Aktualisierungsprogramm
2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014
2013-12-15 20:06 - 2012-02-25 09:43 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014
2013-12-15 20:04 - 2013-12-15 20:03 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2013-12-15 20:03 - 2012-02-25 09:43 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\TuneUp Software
2013-12-15 17:02 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-15 16:25 - 2009-07-14 05:45 - 05459720 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories
2013-12-15 12:06 - 2009-09-08 08:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn
2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-12 18:00 - 2012-09-02 22:09 - 00000000 ____D C:\Users\Saturn\Documents\stories
2013-12-11 21:58 - 2013-12-01 19:55 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server
2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url
2013-12-10 20:34 - 2012-04-01 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-10 20:34 - 2012-04-01 20:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-10 20:34 - 2011-05-14 10:43 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-10 20:27 - 2010-04-27 13:49 - 00000000 ____D C:\Users\Saturn\Documents\My Games
2013-12-09 23:32 - 2010-05-28 22:36 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Audacity
2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe
2013-12-08 17:35 - 2013-08-20 20:00 - 00000000 ____D C:\Users\Saturn\Desktop\2011-09-26
2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot
2013-12-07 21:31 - 2013-12-07 20:26 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part
2013-12-07 20:26 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar
2013-12-07 17:00 - 2010-05-11 21:50 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Skype
2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp
2013-12-07 15:08 - 2012-04-07 18:18 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-07 15:08 - 2012-04-07 18:18 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-07 14:06 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar
2013-12-07 14:03 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar
2013-12-07 13:59 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar
2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url
2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe
2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf
2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk
2013-12-05 19:50 - 2010-12-05 20:42 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-12-03 22:04 - 2013-12-03 19:58 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013
2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk
2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet
2013-12-03 19:57 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-03 19:57 - 2011-10-10 19:11 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2013-12-03 19:57 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-12-03 19:56 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2013-12-03 19:55 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2013-12-03 19:53 - 2013-12-03 19:52 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2013-12-03 19:51 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-12-03 19:50 - 2011-07-26 01:04 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-12-03 19:49 - 2010-05-18 22:36 - 01676320 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion
2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe
2013-12-03 19:18 - 2013-12-03 19:17 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation
2013-12-03 19:18 - 2013-12-03 19:14 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA
2013-12-03 19:18 - 2011-10-28 12:16 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-03 19:15 - 2011-10-28 12:17 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-03 19:15 - 2011-10-28 12:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-03 19:05 - 2010-04-06 19:15 - 00001425 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-03 18:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-03 18:51 - 2013-11-26 17:31 - 00024584 _____ C:\Windows\IE11_main.log
2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-01 23:34 - 2011-10-25 08:16 - 00000000 ____D C:\Users\Saturn\Desktop\Rollenspiele
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url
2013-12-01 19:52 - 2013-12-01 19:53 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar
2013-12-01 18:24 - 2013-05-24 17:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\.minecraft
2013-11-30 20:53 - 2013-01-08 19:22 - 00000000 ____D C:\Users\Saturn\Downloads\mov-world.net
2013-11-30 17:53 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar
2013-11-30 17:50 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar
2013-11-30 17:46 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar
2013-11-30 17:43 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar
2013-11-30 17:40 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar
2013-11-30 17:37 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar
2013-11-30 17:33 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar
2013-11-30 17:30 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar
2013-11-30 17:27 - 2013-11-30 17:24 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar
2013-11-30 17:23 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar
2013-11-30 17:20 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar
2013-11-30 17:17 - 2013-11-30 17:14 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar
2013-11-30 17:14 - 2013-11-30 17:12 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar
2013-11-30 17:12 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar
2013-11-30 17:09 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar
2013-11-30 17:06 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar
2013-11-30 17:02 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar
2013-11-30 16:59 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar
2013-11-30 16:56 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar
2013-11-30 16:53 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar
2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar
2013-11-30 16:49 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar
2013-11-30 16:46 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar
2013-11-30 16:43 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar
2013-11-30 16:40 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar
2013-11-30 16:36 - 2013-11-30 16:33 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar
2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar
2013-11-30 15:31 - 2013-11-28 19:37 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part09.rar
2013-11-29 17:56 - 2013-11-28 19:54 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-29 17:56 - 2013-11-28 19:54 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-28 20:04 - 2012-02-28 22:19 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner (6)
2013-11-28 20:01 - 2010-04-09 14:13 - 00000000 ____D C:\Users\Saturn\Desktop\Games
2013-11-28 19:54 - 2013-11-28 19:54 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-28 19:37 - 2013-11-25 19:30 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part08.rar
2013-11-27 18:46 - 2013-11-27 18:46 - 02244104 _____ C:\Users\Saturn\Desktop\mcpatcher-4.3.0-beta4 (1).exe
2013-11-27 18:41 - 2013-11-27 18:41 - 00675988 _____ C:\Users\Saturn\Desktop\Minecraft (1.7.2).exe
2013-11-27 10:20 - 2013-11-27 10:20 - 00047240 _____ (RapidSolution Software AG) C:\Windows\system32\Drivers\tbhsd.sys
2013-11-27 10:20 - 2013-11-27 10:20 - 00024744 _____ (Audials AG) C:\Windows\system32\Drivers\RrNetCapFilterDriver.sys
2013-11-26 17:49 - 2013-11-26 17:49 - 00001456 _____ C:\Users\Saturn\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2013-11-26 17:48 - 2010-03-05 19:38 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Adobe
2013-11-26 17:45 - 2013-10-23 17:27 - 00000132 _____ C:\Users\Saturn\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2013-11-26 12:54 - 2013-12-15 12:04 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 11:19 - 2013-12-15 12:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 11:18 - 2013-12-15 12:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 11:11 - 2013-12-15 12:04 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-26 10:48 - 2013-12-15 12:04 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 10:46 - 2013-12-15 12:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 10:41 - 2013-12-15 12:04 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 10:29 - 2013-12-15 12:04 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 10:27 - 2013-12-15 12:04 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 10:23 - 2013-12-15 12:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-26 10:21 - 2013-12-15 12:04 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 10:18 - 2013-12-15 12:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 10:18 - 2013-12-15 12:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 10:16 - 2013-12-15 12:04 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:57 - 2013-12-15 12:04 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 09:38 - 2013-12-15 12:04 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-26 09:38 - 2013-12-15 12:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-26 09:35 - 2013-12-15 12:04 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:32 - 2013-12-15 12:04 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-26 09:28 - 2013-12-15 12:04 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-26 09:16 - 2013-12-15 12:04 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-26 09:02 - 2013-12-15 12:04 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:48 - 2013-12-15 12:04 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 08:32 - 2013-12-15 12:04 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-26 08:26 - 2013-12-15 12:04 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-26 08:07 - 2013-12-15 12:04 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:40 - 2013-12-15 12:04 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-26 07:34 - 2013-12-15 12:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:34 - 2013-12-15 12:04 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-26 07:33 - 2013-12-15 12:04 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-26 07:27 - 2013-12-15 12:04 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

Files to move or delete:
====================
C:\ProgramData\hash.dat
C:\Users\Saturn\DoorKickersAlpha_0031_Setup.exe
C:\Users\Saturn\jagex_runescape_preferences.dat
C:\Users\Saturn\jagex_runescape_preferences2.dat
C:\Users\Saturn\jagex__preferences3.dat
C:\Users\Saturn\RocketDock-v1.3.5.exe
C:\Users\Saturn\SafariSetup-5.1.7.exe
C:\Users\Saturn\setup2.5.0.exe


Some content of TEMP:
====================
C:\Users\Saturn\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-20 00:22

==================== End Of Log ============================
         
--- --- ---
__________________

Alt 26.12.2013, 14:46   #4
Ravenwing
 
Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



Addition.txt:

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-12-2013
Ran by Saturn at 2013-12-26 13:45:58
Running from C:\Users\Saturn\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky PURE 3.0 (Enabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
AS: Kaspersky PURE 3.0 (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky PURE 3.0 (Enabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}

==================== Installed Programs ======================

Activation Assistant for the 2007 Microsoft Office suites (x32 Version: 1.0)
Adobe Acrobat X Pro - English, Français, Deutsch (x32 Version: 10.0.0)
Adobe AIR (x32 Version: 3.4.0.2540)
Adobe Creative Suite 6 Master Collection (x32 Version: 6)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)
Adobe Help Manager (x32 Version: 4.0.244)
Adobe Reader X (10.1.1) - Deutsch (x32 Version: 10.1.1)
Apple Application Support (x32 Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
Ashampoo Burning Studio 2013 v.11.0.5 (x32 Version: 11.0.5)
Audacity 1.3.12 (Unicode) (x32)
Audials (x32 Version: 11.0.45100.0)
AuthenTec TrueSuite (Version: 2.0.0.57)
AutoCAD 2011 - Deutsch (Version: 18.1.49.0)
AutoCAD 2011 Language Pack - Deutsch (Version: 18.1.49.0)
Autodesk Material Library 2011 (x32 Version: 2.0.0.49)
Autodesk Material Library 2011 Base Image library (x32 Version: 2.0.0.49)
BIAS SoundSoap PE 2.1 (x32 Version: 2.1.1)
BioShock (x32)
Blitzkrieg Mod (x32 Version: 4.7.0.0)
Blood Knights (x32)
Bonjour (Version: 3.0.0.10)
Build Tools - amd64 (Version: 12.0.21005)
Build Tools - x86 (x32 Version: 12.0.21005)
Buildtools-Sprachressourcen - amd64 (Version: 12.0.21005)
Buildtools-Sprachressourcen - x86 (x32 Version: 12.0.21005)
BulletStorm (x32 Version: 1.0.0005.130)
Call of Duty Black Ops - Remote Console (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.1 Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32)
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32)
Call of Duty: Black Ops II - Multiplayer (x32)
Call of Duty: Black Ops II - Zombies (x32)
Call of Duty: Black Ops II (x32)
Call of Duty: Ghosts - Multiplayer (x32)
Call of Duty: Ghosts (x32)
CANON iMAGE GATEWAY MyCamera Download Plugin (x32 Version: 3.1.1.2)
Canon MOV Decoder (x32 Version: 1.8.0.7)
Canon MOV Encoder (x32 Version: 1.6.0.1)
Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 3.7.0.4)
Canon Utilities EOS Sample Music (x32 Version: 1.0.0.204)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (x32 Version: 1.0.0.10)
Canon Utilities ZoomBrowser EX (x32 Version: 6.7.0.24)
CCleaner (Version: 3.06)
CDBurnerXP (x32 Version: 4.5.0.3661)
ClearProg 1.6.1 Beta 1 (x32 Version: 1.6.1 Beta 1)
CloneCD (x32)
CloneDVD2 (x32 Version: 2.9.3.0)
Company of Heroes (New Steam Version) (x32)
Company of Heroes 2 (x32)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)
CyberLink PhotoNow (x32 Version: 1.1.6904)
CyberLink Power2Go (x32 Version: 6.1.2806)
CyberLink PowerDirector (x32 Version: 7.0.4020)
D3DX10 (x32 Version: 15.4.2368.0902)
Dawn of War - Dark Crusade (x32 Version: 1.00.0000)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Dexpot (HKCU Version: 1.5.15)
DivX (x32 Version: 5.2.1)
Doctor Who: The Eternity Clock (x32)
Door Kickers (x32)
Dragon Age: Origins - Ultimate Edition (x32)
Dragon Age™ II (x32 Version: 1.04.8524.0)
Dropbox (HKCU Version: 2.0.22)
DVD Bibliothek 2.33 (x32 Version: 2.33)
Elevated Installer (x32 Version: 2.3.12.0)
EmRegSysSetup (x32 Version: 1.6.0.1306)
Entity Framework Tools for Visual Studio 2013 (x32 Version: 12.0.20912.0)
Erforderliche Komponenten für SSDT  (x32 Version: 11.1.3000.0)
ESN Sonar (x32 Version: 0.70.4)
EXPERTool 7.21 (x32)
ffdshow v1.1.3800 [2011-03-28] (x32 Version: 1.1.3800.0)
Formatwandler 2014 (x32 Version: 6.0.5060.20182)
Formatwandler2014Setup (x32 Version: 6.0.0.1311)
Futuremark SystemInfo (x32 Version: 3.21.2.1)
Garmin Communicator Plugin (x32 Version: 4.0.4)
Garmin Communicator Plugin x64 (Version: 4.0.1)
Garmin Communicator Plugin x64 (Version: 4.0.4)
Garmin Express (x32 Version: 2.3.12.0)
Garmin Express Tray (x32 Version: 2.3.12.0)
Garmin Training Center (x32 Version: 3.6.5)
Garmin USB Drivers (x32 Version: 2.3.0.0)
GeForce Experience NvStream Client Components (Version: 1.6.28)
Google Chrome (HKCU Version: 31.0.1650.63)
Google Earth (x32 Version: 7.1.2.2041)
Google Talk Plugin (x32 Version: 4.9.1.16010)
Google Update Helper (x32 Version: 1.3.22.3)
Gpg4win (2.2.1) (x32 Version: 2.2.1)
Haali Media Splitter (x32)
Hacker Evolution (x32)
HDX4DirectShowFilter (x32 Version: 1.0.0.1305)
iCloud (Version: 3.0.2.163)
Intel® Matrix Storage Manager
iTunes (Version: 11.1.3.8)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Java(TM) 6 Update 25 (64-bit) (Version: 6.0.250)
Java(TM) 6 Update 31 (x32 Version: 6.0.310)
JavaFX 2.1.1 (x32 Version: 2.1.1)
JDownloader (x32 Version: 0.89)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kaspersky PURE 3.0 (x32 Version: 13.0.2.558)
LAME v3.98.2 for Audacity (x32)
League of Legends (x32 Version: 1.02.0000)
Lexmark Pro800-Pro900 Series
LogMeIn Hamachi (x32 Version: 2.2.0.109)
Luminance HDR 2.3.0
Lyrics Plugin for Winamp (x32 Version: 0.4) <==== ATTENTION
Macro Key Manager (Version: 4.13)
Magic 2014  (x32)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 1.1 (x32)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50710)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50710)
Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50710)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938)
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (x32 Version: 4.5.50932)
Microsoft .NET Framework 4.5.1 SDK (Deutsch) (x32 Version: 4.5.51641)
Microsoft .NET Framework 4.5.1 SDK (x32 Version: 4.5.51641)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft C++ REST SDK for Visual Studio 2013 (x32 Version: 1.0)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (x32 Version: 3.5.30730.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Help Viewer 2.1 (x32 Version: 2.1.21005)
Microsoft Help Viewer 2.1 Sprachpaket - DEU (x32 Version: 2.1.21005)
Microsoft IntelliPoint 8.0 (Version: 8.0.225.0)
Microsoft NuGet - Visual Studio Express 2013 for Windows Desktop (x32 Version: 2.7.40911.287)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft SQL Server 2012 Command Line Utilities  (Version: 11.1.3000.0)
Microsoft SQL Server 2012 Data-Tier App Framework  (x32 Version: 11.1.2902.0)
Microsoft SQL Server 2012 Data-Tier App Framework  (x64) (Version: 11.1.2902.0)
Microsoft SQL Server 2012 Express LocalDB  (Version: 11.1.3000.0)
Microsoft SQL Server 2012 Management Objects (x32 Version: 11.1.3000.0)
Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.1.3000.0)
Microsoft SQL Server 2012 Native Client  (Version: 11.1.3000.0)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (Version: 11.1.3000.0)
Microsoft SQL Server 2012 T-SQL-Sprachdienst  (x32 Version: 11.1.3000.0)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (Version: 4.0.8876.1)
Microsoft SQL Server Data Tools - DEU (12.0.30919.1) (x32 Version: 12.0.30919.1)
Microsoft SQL Server Data Tools Build Utilities - DEU (12.0.30919.1) (x32 Version: 12.0.30919.1)
Microsoft SQL Server Desktop Engine (PINNACLESYS) (x32 Version: 8.00.2039)
Microsoft Team Foundation Server 2013 Object Model (x64) (Version: 12.0.21005)
Microsoft Team Foundation Server 2013-Objektmodell Sprachpaket (x64) - DEU (Version: 12.0.21005)
Microsoft Visual C++  x64 Libraries (x32 Version: 12.0.21005)
Microsoft Visual C++  x86 Libraries (x32 Version: 12.0.21005)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual C++ 2013 32bit Compilers - DEU Resources (x32 Version: 12.0.21005)
Microsoft Visual C++ 2013 Core Libraries (x32 Version: 12.0.21005)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005)
Microsoft Visual C++ 2013 x64 Debug Runtime - 12.0.21005 (Version: 12.0.21005)
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005)
Microsoft Visual C++ 2013 x86 Debug Runtime - 12.0.21005 (x32 Version: 12.0.21005)
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005)
Microsoft Visual C++ 2013 x86-x64 Compilers (x32 Version: 12.0.21005)
Microsoft Visual Studio 2013 Express Prerequisites x64 - DEU (Version: 12.0.21005)
Microsoft Visual Studio 2013 Shell (Minimum) (x32 Version: 12.0.21005)
Microsoft Visual Studio 2013 Shell (Minimum) Interop Assemblies (x32 Version: 12.0.21005)
Microsoft Visual Studio 2013 Shell-(Mindest)-Ressourcen (x32 Version: 12.0.21005)
Microsoft Visual Studio 2013 Team Explorer Sprachpaket - DEU (x32 Version: 12.0.21005)
Microsoft Visual Studio 2013-Vorbereitung (x32 Version: 12.0.21005)
Microsoft Visual Studio Express 2013 for Windows Desktop (x32 Version: 12.0.21005)
Microsoft Visual Studio Express 2013 für Windows Desktop - DEU (x32 Version: 12.0.21005)
Microsoft Visual Studio Express 2013 für Windows Desktop - DEU (x32 Version: 12.0.21005.13)
Microsoft Visual Studio Ultimate 2013 XAML UI Designer Core (x32 Version: 12.0.21005)
Microsoft Visual Studio Ultimate 2013 XAML UI Designer deu Resources (x32 Version: 12.0.21005)
Microsoft Works (x32 Version: 9.7.0621)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Microsoft Xbox 360 Accessories 1.2 (Version: 1.20.146.0)
Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0)
Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.1.3366.16)
Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.1.3366.16)
Minutor (x32 Version: 1.6.3)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.1.0)
Mozilla Thunderbird 24.1.0 (x86 de) (x32 Version: 24.1.0)
Mp3tag v2.48 (x32 Version: v2.48)
MSVC80_x64_v2 (Version: 1.0.3.0)
MSVC80_x86_v2 (x32 Version: 1.0.3.0)
MSVC90_x64 (Version: 1.0.1.2)
MSVC90_x86 (x32 Version: 1.0.1.2)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB927978) (x32 Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MTX (x32 Version: 1.0.0)
No23 Recorder (x32 Version: 2.1.0.3)
NVIDIA 3D Vision Controller Driver (x32 Version: 280.19)
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82)
NVIDIA GeForce Experience 1.8 (Version: 1.8)
NVIDIA Grafiktreiber 331.82 (Version: 331.82)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.142.992)
NVIDIA LED Visualizer 1.0 (Version: 1.0)
NVIDIA Network Service (Version: 1.0)
NVIDIA PhysX (x32 Version: 9.13.0725)
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725)
NVIDIA ShadowPlay 10.10.5 (Version: 10.10.5)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182)
NVIDIA Systemsteuerung 331.82 (Version: 331.82)
NVIDIA Update 10.10.5 (Version: 10.10.5)
NVIDIA Update Core (Version: 10.10.5)
NVIDIA Virtual Audio 1.2.12 (Version: 1.2.12)
OpenAL (x32)
Opera 12.16 (x32 Version: 12.16.1860)
Orcs Must Die! (x32)
Orcs Must Die! 2 (x32)
Origin (x32 Version: 8.5.0.4550)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 (Deutsch) (x32 Version: 4.5.50932)
Pando Media Booster (x32 Version: 2.3.6.0)
PAYDAY 2 (x32)
PC Connectivity Solution (x32 Version: 11.4.21.0)
PDF Settings CS6 (x32 Version: 11.0)
PDF24 Creator 6.1.0 (x32)
PDFCanvas V1.5 (x32)
PDFCreator (x32 Version: 1.2.3)
pDRAW32 (x32)
PE-DESIGN Lite (x32 Version: 1.00.0000)
Plants vs. Zombies: Game of the Year (x32)
PowerISO (x32 Version: 4.8)
Prison Architect (x32)
proDAD Vitascene 1.0 (x32)
PunkBuster Services (x32 Version: 0.989)
QuickTime (x32 Version: 7.74.80.86)
RealDownloader (x32 Version: 1.3.3)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0)
RealPlayer (x32 Version: 16.0.3)
Realtek 8136 8168 8169 Ethernet Driver (x32 Version: 1.00.0007)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5910)
RealUpgrade 1.1 (x32 Version: 1.1.0)
Recuva (Version: 1.43)
ROCCAT Kova[+] Mouse Driver (x32 Version: 1.10)
Safari (x32 Version: 5.34.57.2)
Samsung SPP-2040 Series (x32)
Scrolls (x32 Version: 1.0.0)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32)
SHIELD Streaming (Version: 1.6.75)
SimVector 2.0 (x32)
SimVector 4.6 (x32 Version: 4.6)
Skype™ 6.6 (x32 Version: 6.6.106)
Stardock Software (x32 Version: 1.00)
Steam (x32 Version: 1.0.0.0)
Streamripper (Remove only) (x32)
Studio Ultimate (x32 Version: 11.00.0013)
SUPER © +Recorder.2013.55 (Mar 7, 2013) Version +Recorder.2013. (x32 Version: +Recorder.2013.55)
Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005)
TeamSpeak 3 Client (HKCU Version: 3.0.10.1)
TeamViewer 8 (x32 Version: 8.0.20202)
Torchlight II (x32)
Trine 2 (x32)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.169)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.169)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4600.4)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.4000.179)
Unity Web Player (HKCU Version: )
Update for  (KB2504637) (x32 Version: 1)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2494150) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32)
USB Video Device (x32 Version: 5.8.48205.104)
Video Grabber (x32 Version: 1.00.0000)
VirtualCloneDrive (x32)
VLC media player 2.0.1 (x32 Version: 2.0.1)
Warhammer® 40,000®: Dawn of War® II – Retribution™ Beta (x32)
WebM Project Directshow Filters (HKCU)
Winamp (x32 Version: 5.623 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (Version: 06/03/2009 2.3.0.0)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Movie Maker 2.6 (x32 Version: 2.6.4037.0)
Windows Software Development Kit (x32 Version: 8.100.25984)
Windows Software Development Kit (x32 Version: 8.59.29989)
Windows Software Development Kit DirectX x64 Remote (Version: 8.100.25984)
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.29989)
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.100.25984)
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.29989)
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.100.25984)
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.100.25984)
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.100.25984)
Windows XP Targeting with C++ (x32 Version: 11.0.51106)
Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0) (Version: 08/22/2008 7.0.0.0)
WinRAR
Xiph.Org Open Codecs 0.85.17777 (x32 Version: 0.85.17777)
Xvid 1.2.2 final uninstall (x32 Version: 1.2)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2006-11-02 13:34 - 2012-09-29 10:43 - 00006608 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 3dns-2.adobe.com #192.150.22.22
127.0.0.1 3dns-3.adobe.com #192.150.14.21
127.0.0.1 3dns-4.adobe.com #192.150.18.247
127.0.0.1 3dns-5.adobe.com #192.150.22.46
127.0.0.1 adobe-dns.adobe.com #192.150.11.30
127.0.0.1 adobe-dns-2.adobe.com #192.150.11.247
127.0.0.1 adobe-dns-3.adobe.com #192.150.22.30
127.0.0.1 adobe.activate.com #69.175.22.26
127.0.0.1 activate.adobe.com #192.150.22.40
127.0.0.1 activate.wip3.adobe.com #192.150.22.40
127.0.0.1 activate.wip4.adobe.com #192.150.22.40
127.0.0.1 activate-sea.adobe.com #192.150.22.40
127.0.0.1 activate-sjc0.adobe.com #192.150.14.69
127.0.0.1 ereg.adobe.com #192.150.18.103
127.0.0.1 ereg.wip3.adobe.com #192.150.18.63
127.0.0.1 ereg.wip4.adobe.com #192.150.18.103
127.0.0.1 practivate.adobe.com #192.150.18.54
127.0.0.1 www.wip3.adobe.com #192.150.8.60
127.0.0.1 www.wip4.adobe.com #192.150.18.200
127.0.0.1 www.adobeereg.com #75.125.24.83
127.0.0.1 adobeereg.com #207.66.2.10
127.0.0.1 hl2rcv.adobe.com #192.150.14.174
127.0.0.1 wwis-dubc1-vip30.adobe.com #192.150.8.30
127.0.0.1 wwis-dubc1-vip31.adobe.com #192.150.8.31
127.0.0.1 wwis-dubc1-vip32.adobe.com #192.150.8.32
127.0.0.1 wwis-dubc1-vip33.adobe.com #192.150.8.33
127.0.0.1 wwis-dubc1-vip34.adobe.com #192.150.8.34
127.0.0.1 wwis-dubc1-vip35.adobe.com #192.150.8.35
127.0.0.1 wwis-dubc1-vip36.adobe.com #192.150.8.36

There are 105 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {0391F325-EEE3-45BA-BF56-99FD519AA6A2} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {0AEAFAF6-F116-4A60-AFB4-C8B755A6E975} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {0D30E5BF-ED40-4091-AECE-7965FBBF7B4D} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-10-30] (TuneUp Software)
Task: {436855EE-1BED-4312-AC87-D825507DF371} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {4D605A75-3153-4310-983F-9ECEE3CB6B28} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {56E1894B-25A1-435C-AFED-E732E1F21286} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {5CE032EF-0BB6-49F0-846F-143D146FC82C} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {6B3B370E-B356-4C6F-96F1-A3C5A6AF1BFF} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {6BAC24E7-748B-41D1-BD32-BD9845000389} - System32\Tasks\{B734321D-1D84-4724-AE20-1A98B1C916F9} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {6C3CB3C0-6052-42E8-BD25-7C52815C5798} - System32\Tasks\Google Updater and Installer => C:\Users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-17] (Google Inc.)
Task: {712C6861-2B14-4E72-92BA-22B6921FE2B7} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {71BB4441-40B7-40D5-AD5C-2A61420A8117} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA => C:\Users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-17] (Google Inc.)
Task: {72E6E58C-3DEF-4B5D-A1D3-9B8E77E33FA2} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [2013-09-30] (RealNetworks, Inc.)
Task: {7DBAF4EC-81F2-4830-B9F7-D8C736F0A742} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {8108CB2C-AAE1-4651-90B3-BCED3C158789} - \Software Updater Ui No Task File
Task: {AFD79A5C-F000-4681-A8F7-15287C6A8BB0} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {B1324958-0973-4662-867B-F86DAC6FBE7F} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06] (Adobe Systems Incorporated)
Task: {B9F5DFE3-3E12-480C-8B6B-0C822D82D0FB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-07] (Google Inc.)
Task: {C74BC520-BA36-4658-8E95-B5EA54DAC1AB} - System32\Tasks\AdobeAAMUpdater-1.0-RAVENHOME-Saturn => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {CAAE9414-F4F3-4129-B376-3CD4826ACDA6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated)
Task: {D4966FBF-E80C-480C-8D19-1EDDE188C296} - \Software Updater No Task File
Task: {D51726B2-B034-4E34-87EA-441AC5478715} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {D54B9BE1-DD12-4AE6-A5D3-B081C3BB4C19} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2010-07-21] (Microsoft Corporation)
Task: {DB98B526-822B-400F-BFEB-4C91782A65EB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-07] (Google Inc.)
Task: {E91D6474-70CC-42BE-80FF-8BED8AF557ED} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {F6E1045F-CA4E-4014-81ED-C82C6B72B9CB} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {FFB0F86C-24E9-4058-A0F9-982D51D81FB9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core => C:\Users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-17] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core.job => C:\Users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA.job => C:\Users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-03-22 13:36 - 2010-03-15 11:28 - 00166400 _____ () C:\Program Files\WinRAR\rarext.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 00087328 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 01241888 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-12-20 17:19 - 2012-12-20 17:19 - 00479752 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\dblite.dll
2012-12-20 17:19 - 2012-12-20 17:19 - 01310728 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\kpcengine.2.2.dll
2013-10-07 15:49 - 2013-10-07 15:49 - 00221184 _____ () C:\Program Files (x86)\GNU\GnuPG\libksba-8.dll
2013-10-07 15:47 - 2013-10-07 15:47 - 00037888 _____ () C:\Program Files (x86)\GNU\GnuPG\libgpg-error-0.dll
2013-10-07 15:44 - 2013-10-07 15:44 - 00050176 _____ () C:\Program Files (x86)\GNU\GnuPG\libw32pth-0.dll
2013-10-07 15:49 - 2013-10-07 15:49 - 00069632 _____ () C:\Program Files (x86)\GNU\GnuPG\libassuan-0.dll
2013-10-07 15:49 - 2013-10-07 15:49 - 00628224 _____ () C:\Program Files (x86)\GNU\GnuPG\libgcrypt-11.dll
2012-02-09 19:48 - 1998-10-31 10:55 - 00005120 _____ () C:\Program Files (x86)\EXPERTool\TBManage.dll
2013-09-14 00:51 - 2013-09-14 00:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 00:50 - 2013-09-14 00:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2013-11-27 10:20 - 2013-11-27 10:20 - 00046080 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_thread-vc90-mt-1_39.dll
2013-11-27 10:20 - 2013-11-27 10:20 - 00045056 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_date_time-vc90-mt-1_39.dll
2013-11-27 10:20 - 2013-11-27 10:20 - 00545032 _____ () C:\Program Files (x86)\Audials\Audials 11\StreamingClient.dll
2013-11-27 10:20 - 2013-11-27 10:20 - 00012800 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_system-vc90-mt-1_39.dll
2013-11-27 10:20 - 2013-11-27 10:20 - 00068360 _____ () C:\Program Files (x86)\Audials\Audials 11\CrashRpt.dll
2013-11-27 10:20 - 2013-11-27 10:20 - 00409352 _____ () C:\Program Files (x86)\Audials\Audials 11\SQLite3.dll
2013-11-27 10:20 - 2013-11-27 10:20 - 00614912 _____ () C:\Program Files (x86)\Audials\Audials 11\boost_regex-vc90-mt-1_39.dll
2013-12-23 15:30 - 2013-12-23 15:30 - 00290304 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Utils\b7c10796273ed29a0e437b1bb32d1a30\Utils.ni.dll
2013-12-23 15:30 - 2013-12-23 15:30 - 00580096 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ManagedInterfaces\88a1b2862a92b8502c23801c0135abdb\ManagedInterfaces.ni.dll
2013-12-23 15:30 - 2013-12-23 15:30 - 02921984 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\AudialsComponents\cfef2f7bc31f8ea1e6239c4e148ee4f8\AudialsComponents.ni.dll
2013-12-23 15:30 - 2013-12-23 15:30 - 00178688 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\fastJSON\57f79304aeca7969c43a34a60d2dea2f\fastJSON.ni.dll
2013-01-04 13:31 - 2010-05-29 14:57 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\hiddriver.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-06-17 14:16 - 2012-06-17 14:16 - 00206336 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjccknnhdnkbanjilpjddjhmkghmachn\1.0.32_0\plugin\convenience.dll
2013-12-15 20:44 - 2013-12-04 03:47 - 00702416 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-15 20:44 - 2013-12-04 03:47 - 00099792 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-15 20:44 - 2013-12-04 03:48 - 04055504 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-15 20:44 - 2013-12-04 03:48 - 00399312 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-15 20:44 - 2013-12-04 03:47 - 01619408 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-15 20:44 - 2013-12-04 03:48 - 13586896 _____ () C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Saturn\Achmed the Dead Terrorist.avi:TOC.WMV
AlternateDataStreams: C:\Users\Saturn\Cookies:A0aqdbUKErwC9lz63atV
AlternateDataStreams: C:\Users\Saturn\AppData\Local\Temp:gFWXbYbSeYeNSTyoEy9aZcH

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/26/2013 01:37:20 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/26/2013 01:36:54 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (12/26/2013 01:36:54 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (12/26/2013 01:36:54 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (12/26/2013 09:39:51 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58"1".
Die abhängige Assemblierung "FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/26/2013 08:53:20 AM) (Source: MsiInstaller) (User: RAVENHOME)
Description: Product: Google Chrome Frame -- Error 1925. You do not have sufficient privileges to complete this installation for all users of the machine.  Log on as administrator and then retry this installation.

Error: (12/26/2013 08:50:55 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/23/2013 07:52:02 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58"1".
Die abhängige Assemblierung "FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/23/2013 03:01:32 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/23/2013 00:04:06 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]


System errors:
=============
Error: (12/26/2013 01:37:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (12/26/2013 01:37:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (12/26/2013 01:37:23 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
PCLEPCI

Error: (12/26/2013 01:37:23 PM) (Source: Service Control Manager) (User: )
Description: Dienst "MSSQL$PINNACLESYS" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (12/26/2013 01:36:45 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (12/26/2013 01:36:45 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (60000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.

Error: (12/26/2013 01:35:47 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Windows\SysWow64\drivers\pclepci.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (12/26/2013 08:56:16 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (12/26/2013 08:55:13 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (60000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (12/26/2013 08:51:51 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058


Microsoft Office Sessions:
=========================
Error: (12/26/2013 01:37:20 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/26/2013 01:36:54 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (12/26/2013 01:36:54 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (12/26/2013 01:36:54 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (12/26/2013 09:39:51 AM) (Source: SideBySide)(User: )
Description: FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58"C:\Program Files\Autodesk\AutoCAD 2011\FaroImporter.exe

Error: (12/26/2013 08:53:20 AM) (Source: MsiInstaller)(User: RAVENHOME)
Description: Product: Google Chrome Frame -- Error 1925. You do not have sufficient privileges to complete this installation for all users of the machine.  Log on as administrator and then retry this installation.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (12/26/2013 08:50:55 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/23/2013 07:52:02 PM) (Source: SideBySide)(User: )
Description: FARO.LS,processorArchitecture="x86",publicKeyToken="1d23f5635ba800ab",type="win32",version="1.1.406.58"C:\Program Files\Autodesk\AutoCAD 2011\FaroImporter.exe

Error: (12/23/2013 03:01:32 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/23/2013 00:04:06 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]


CodeIntegrity Errors:
===================================
  Date: 2012-02-09 20:24:44.757
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\Saturn\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-02-09 20:24:44.726
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\Saturn\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-02-09 20:24:44.445
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-02-09 20:24:44.414
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-06-27 20:37:19.235
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Steam\SteamApps\common\ava\Binaries\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-06-27 20:37:19.213
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Steam\SteamApps\common\ava\Binaries\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-06-27 18:08:37.107
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Steam\SteamApps\common\ava\Binaries\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-06-27 18:08:37.084
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Steam\SteamApps\common\ava\Binaries\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-06-27 18:05:36.526
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Steam\SteamApps\common\ava\Binaries\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2011-06-27 18:05:36.503
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Steam\SteamApps\common\ava\Binaries\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 37%
Total physical RAM: 8183.11 MB
Available physical RAM: 5136.03 MB
Total Pagefile: 16364.41 MB
Available Pagefile: 12915.78 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: (BOOT) (Fixed) (Total:901.24 GB) (Free:116.2 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVER) (Fixed) (Total:30.26 GB) (Free:19.22 GB) FAT32
Drive i: (HD-HSU2) (Fixed) (Total:465.65 GB) (Free:99.93 GB) FAT32
Drive j: (Volume) (Fixed) (Total:1397.26 GB) (Free:185.87 GB) NTFS
Drive k: (TREKSTOR) (Fixed) (Total:698.64 GB) (Free:197.7 GB) NTFS
Drive l: (Volume) (Fixed) (Total:1863.01 GB) (Free:1100.4 GB) NTFS
Drive m: (USB-HDD) (Fixed) (Total:1863.01 GB) (Free:167.19 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 2BAB359D)
Partition 1: (Active) - (Size=901 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=30 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 699 GB) (Disk ID: 13070461)
Partition 1: (Not Active) - (Size=699 GB) - (Type=07 NTFS)

========================================================
Disk: 5 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: DAD933CE)
Partition 1: (Not Active) - (Size=-698723860480) - (Type=07 NTFS)

========================================================
Disk: 6 (Size: 466 GB) (Disk ID: CCC68C61)
Partition 1: (Not Active) - (Size=466 GB) - (Type=0C)

========================================================
Disk: 7 (Size: 1863 GB) (Disk ID: 0C40E8F1)
Partition 1: (Not Active) - (Size=-198626966528) - (Type=07 NTFS)

========================================================
Disk: 8 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 39A04C21)
Partition 1: (Not Active) - (Size=-198626508800) - (Type=07 NTFS)

==================== End Of Log ============================
         

Alt 27.12.2013, 10:40   #5
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 27.12.2013, 11:28   #6
Ravenwing
 
Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



Combo-Fix ist durchgelaufen.

hier das log-file:

Code:
ATTFilter
ComboFix 13-12-26.01 - Saturn 27.12.2013  11:13:16.2.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8183.5315 [GMT 1:00]
ausgeführt von:: c:\users\Saturn\Desktop\ComboFix.exe
AV: Kaspersky PURE 3.0 *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
FW: Kaspersky PURE 3.0 *Disabled* {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}
SP: Kaspersky PURE 3.0 *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Saturn\AppData\Roaming\inst.exe
c:\users\Saturn\SafariSetup-5.1.7.exe
J:\Autorun.inf
J:\install.exe
M:\install.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-11-27 bis 2013-12-27  ))))))))))))))))))))))))))))))
.
.
2013-12-27 10:22 . 2013-12-27 10:22	--------	d-----w-	c:\users\Public\AppData\Local\temp
2013-12-27 10:22 . 2013-12-27 10:22	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-12-27 10:14 . 2013-12-27 10:14	75888	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{FF6C5ECD-3AA2-439D-9DC9-067D2045FA19}\offreg.dll
2013-12-26 16:50 . 2013-12-26 16:50	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2013-12-26 12:43 . 2013-12-26 12:43	--------	d-----w-	C:\FRST
2013-12-26 12:33 . 2013-12-26 14:03	--------	d-----w-	C:\AdwCleaner
2013-12-26 08:01 . 2013-12-04 03:28	10315576	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{FF6C5ECD-3AA2-439D-9DC9-067D2045FA19}\mpengine.dll
2013-12-23 14:39 . 2013-12-23 14:39	--------	d-----w-	c:\programdata\Licenses
2013-12-23 14:33 . 2013-12-23 14:33	--------	d-----w-	c:\program files (x86)\Common Files\WebM Project
2013-12-23 14:33 . 2013-12-23 14:33	--------	d-----w-	c:\program files (x86)\Common Files\HDX4
2013-12-23 14:32 . 2013-12-23 14:32	--------	d-----w-	c:\users\Saturn\AppData\Roaming\Engelmann Media
2013-12-23 14:32 . 2013-12-23 14:32	--------	d-----w-	c:\programdata\Engelmann Media
2013-12-23 14:32 . 2013-12-23 14:32	--------	d-----w-	c:\program files (x86)\S.A.D
2013-12-22 13:51 . 2013-12-22 14:02	--------	d--h--w-	c:\users\Saturn\AppData\Roaming\RPPrivate
2013-12-21 17:35 . 2013-12-21 17:37	--------	d-----w-	c:\users\Saturn\AppData\Roaming\Trine2
2013-12-18 15:28 . 2013-09-15 23:03	361119	----a-w-	c:\windows\mod_frst.exe
2013-12-15 19:11 . 2013-12-15 19:11	--------	d-----w-	c:\users\Saturn\AppData\Local\Avg2014
2013-12-15 19:04 . 2013-12-15 19:04	--------	d-----w-	c:\users\Saturn\TuneUp 2014
2013-12-15 19:04 . 2013-10-30 09:45	43320	----a-w-	c:\windows\system32\uxtuneup.dll
2013-12-15 19:04 . 2013-10-30 09:45	36152	----a-w-	c:\windows\SysWow64\uxtuneup.dll
2013-12-15 19:03 . 2013-10-30 09:45	40760	----a-w-	c:\windows\system32\TURegOpt.exe
2013-12-15 19:03 . 2013-10-30 09:45	29496	----a-w-	c:\windows\system32\authuitu.dll
2013-12-15 19:03 . 2013-10-30 09:45	25400	----a-w-	c:\windows\SysWow64\authuitu.dll
2013-12-15 19:03 . 2013-12-15 19:04	--------	d-----w-	c:\program files (x86)\TuneUp Utilities 2014
2013-12-15 19:02 . 2013-12-15 19:14	--------	d-sh--w-	c:\programdata\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-12-15 12:38 . 2013-12-15 12:38	--------	d-----w-	c:\program files\Microsoft Xbox 360 Accessories
2013-12-15 11:06 . 2013-05-10 04:30	167424	----a-w-	c:\program files\Windows Media Player\wmplayer.exe
2013-12-15 11:06 . 2013-05-10 03:48	164864	----a-w-	c:\program files (x86)\Windows Media Player\wmplayer.exe
2013-12-15 11:06 . 2013-05-10 05:56	12625920	----a-w-	c:\windows\system32\wmploc.DLL
2013-12-15 11:06 . 2013-05-10 04:56	12625408	----a-w-	c:\windows\SysWow64\wmploc.DLL
2013-12-15 11:06 . 2013-05-10 05:56	14631424	----a-w-	c:\windows\system32\wmp.dll
2013-12-12 19:35 . 2013-12-27 10:06	--------	d-----w-	c:\users\Saturn\AppData\Local\LogMeIn Hamachi
2013-12-12 19:35 . 2013-12-12 19:35	--------	d-----w-	c:\users\Saturn\AppData\Local\LogMeIn
2013-12-12 19:35 . 2013-12-12 19:35	--------	d-----w-	c:\programdata\LogMeIn
2013-12-12 17:37 . 2013-12-12 17:37	--------	d-----w-	c:\program files (x86)\LogMeIn Hamachi
2013-12-07 14:08 . 2013-12-07 14:08	--------	d-----w-	c:\program files (x86)\GUM1C5.tmp
2013-12-03 19:29 . 2013-12-03 19:29	--------	d-----w-	c:\users\Saturn\AppData\Roaming\NuGet
2013-12-03 18:58 . 2013-12-03 18:58	1139040	----a-w-	c:\programdata\Microsoft\WDExpress\12.0\1031\ResourceCache.dll
2013-12-03 18:57 . 2013-12-03 18:57	--------	d-----w-	c:\programdata\NuGet
2013-12-03 18:57 . 2013-12-03 18:57	--------	d-----w-	c:\program files (x86)\NuGet
2013-12-03 18:55 . 2013-12-03 18:55	--------	d-----w-	c:\program files (x86)\Common Files\Merge Modules
2013-12-03 18:52 . 2013-12-03 18:53	--------	d-----w-	c:\program files (x86)\Windows Kits
2013-12-03 18:52 . 2013-12-03 18:52	--------	d-----w-	c:\program files (x86)\Common Files\Microsoft
2013-12-03 18:51 . 2013-12-03 18:51	--------	d-----w-	c:\program files (x86)\Microsoft Help Viewer
2013-12-03 18:51 . 2013-12-03 18:55	--------	d-----w-	c:\program files (x86)\Microsoft SDKs
2013-12-03 18:51 . 2013-12-03 18:51	--------	d-----w-	c:\windows\SysWow64\1033
2013-12-03 18:51 . 2013-12-03 18:51	--------	d-----w-	c:\windows\SysWow64\1031
2013-12-03 18:51 . 2013-12-03 18:51	--------	d-----w-	c:\windows\system32\1033
2013-12-03 18:51 . 2013-12-03 18:51	--------	d-----w-	c:\windows\system32\1031
2013-12-03 18:51 . 2013-12-03 18:57	--------	d-----w-	c:\program files\Microsoft SQL Server
2013-12-03 18:50 . 2013-12-03 18:50	--------	d-----w-	c:\program files\Microsoft SQL Server Compact Edition
2013-12-03 18:50 . 2013-12-03 18:56	--------	d-----w-	c:\program files (x86)\Microsoft Visual Studio 12.0
2013-12-03 18:44 . 2013-12-03 18:44	--------	d-----w-	c:\windows\Migration
2013-12-03 18:43 . 2013-12-03 18:43	--------	d-----w-	c:\users\Saturn\AppData\Local\Introversion
2013-12-03 18:41 . 2013-12-03 18:41	--------	d-----w-	c:\programdata\regid.1991-06.com.microsoft
2013-12-03 18:17 . 2013-12-03 18:18	--------	d-----w-	c:\users\Saturn\AppData\Local\NVIDIA Corporation
2013-12-03 18:15 . 2013-10-30 17:03	39200	----a-w-	c:\windows\system32\drivers\nvvad64v.sys
2013-12-03 18:15 . 2013-10-30 17:02	32544	----a-w-	c:\windows\SysWow64\nvaudcap32v.dll
2013-12-03 18:14 . 2013-12-03 18:18	--------	d-----w-	c:\users\Saturn\AppData\Local\NVIDIA
2013-12-03 17:51 . 2013-10-14 17:00	28368	----a-w-	c:\windows\system32\IEUDINIT.EXE
2013-11-28 18:54 . 2013-11-29 16:56	1096480	----a-w-	c:\windows\system32\nvspcap64.dll
2013-11-28 18:54 . 2013-11-29 16:56	979744	----a-w-	c:\windows\SysWow64\nvspcap.dll
2013-11-28 18:54 . 2013-11-28 18:54	--------	d-----w-	c:\program files (x86)\AGEIA Technologies
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-16 18:56 . 2010-04-15 13:07	90708896	----a-w-	c:\windows\system32\MRT.exe
2013-12-10 19:34 . 2012-04-01 19:49	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-10 19:34 . 2011-05-14 09:43	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-11-27 09:20 . 2013-11-27 09:20	47240	----a-w-	c:\windows\system32\drivers\tbhsd.sys
2013-11-27 09:20 . 2013-11-27 09:20	24744	----a-w-	c:\windows\system32\drivers\RrNetCapFilterDriver.sys
2013-11-19 02:33 . 2010-03-06 09:02	267936	------w-	c:\windows\system32\MpSigStub.exe
2013-11-14 11:56 . 2012-02-09 18:39	18293608	----a-w-	c:\windows\system32\nvwgf2umx.dll
2013-11-14 11:56 . 2012-02-21 18:07	1436528	----a-w-	c:\windows\system32\nvumdshimx.dll
2013-11-14 11:56 . 2012-02-09 18:39	2697248	----a-w-	c:\windows\SysWow64\nvapi.dll
2013-11-14 11:56 . 2009-09-17 06:51	3069608	----a-w-	c:\windows\system32\nvapi64.dll
2013-11-11 15:02 . 2009-08-17 01:39	6674208	----a-w-	c:\windows\system32\nvcpl.dll
2013-11-11 15:02 . 2009-08-17 01:39	3490080	----a-w-	c:\windows\system32\nvsvc64.dll
2013-11-11 15:01 . 2009-08-17 01:39	922912	----a-w-	c:\windows\system32\nvvsvc.exe
2013-11-11 15:01 . 2009-08-17 01:39	2559776	----a-w-	c:\windows\system32\nvsvcr.dll
2013-11-11 15:01 . 2009-08-17 01:39	219424	----a-w-	c:\windows\system32\nvmctray.dll
2013-11-11 15:01 . 2009-07-23 01:06	63776	----a-w-	c:\windows\system32\nvshext.dll
2013-11-11 15:01 . 2012-02-21 18:09	3467927	----a-w-	c:\windows\system32\nvcoproc.bin
2013-11-11 07:59 . 2013-11-11 07:59	590112	----a-w-	c:\windows\SysWow64\nvStreaming.exe
2013-10-27 08:12 . 2013-10-27 08:12	31520	----a-w-	c:\windows\system32\nvhdap64.dll
2013-10-27 08:12 . 2013-10-27 08:12	196384	----a-w-	c:\windows\system32\drivers\nvhda64v.sys
2013-10-27 08:12 . 2013-10-27 08:12	1884448	----a-w-	c:\windows\system32\nvdispco6433165.dll
2013-10-27 08:12 . 2013-10-27 08:12	1511712	----a-w-	c:\windows\system32\nvdispgenco6433165.dll
2013-10-27 08:12 . 2013-10-27 08:12	1510176	----a-w-	c:\windows\system32\nvhdagenco64.dll
2013-10-18 15:48 . 2013-05-10 15:51	626272	----a-w-	c:\windows\system32\drivers\klif.sys
2013-10-18 15:48 . 2012-09-03 16:23	29280	----a-w-	c:\windows\system32\drivers\klmouflt.sys
2013-10-18 15:48 . 2012-09-03 15:57	29280	----a-w-	c:\windows\system32\drivers\klkbdflt.sys
2013-10-18 15:48 . 2013-05-10 15:51	90208	----a-w-	c:\windows\system32\drivers\klflt.sys
2013-10-18 15:48 . 2012-06-19 15:28	7717984	----a-w-	c:\windows\system32\drivers\kl1.sys
2013-10-12 02:30 . 2013-11-14 20:08	830464	----a-w-	c:\windows\system32\nshwfp.dll
2013-10-12 02:29 . 2013-11-14 20:08	859648	----a-w-	c:\windows\system32\IKEEXT.DLL
2013-10-12 02:29 . 2013-11-14 20:08	324096	----a-w-	c:\windows\system32\FWPUCLNT.DLL
2013-10-12 02:03 . 2013-11-14 20:08	656896	----a-w-	c:\windows\SysWow64\nshwfp.dll
2013-10-12 02:01 . 2013-11-14 20:08	216576	----a-w-	c:\windows\SysWow64\FWPUCLNT.DLL
2013-10-08 05:50 . 2013-10-21 17:41	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-10-06 18:36 . 2010-04-07 08:38	298280	----a-w-	c:\windows\SysWow64\PnkBstrB.xtr
2013-10-06 18:36 . 2010-04-06 19:33	298280	----a-w-	c:\windows\SysWow64\PnkBstrB.exe
2013-10-06 18:25 . 2010-04-06 19:33	298280	----a-w-	c:\windows\SysWow64\PnkBstrB.ex0
2013-10-05 20:25 . 2013-11-14 20:08	1474048	----a-w-	c:\windows\system32\crypt32.dll
2013-10-05 19:57 . 2013-11-14 20:08	1168384	----a-w-	c:\windows\SysWow64\crypt32.dll
2013-10-05 16:25 . 2010-04-06 19:33	76888	----a-w-	c:\windows\SysWow64\PnkBstrA.exe
2013-10-05 15:35 . 2010-05-18 21:35	3360624	----a-w-	c:\windows\SysWow64\pbsvc.exe
2013-10-05 01:38 . 2013-10-05 01:38	97440	----a-w-	c:\windows\SysWow64\mfcm120d.dll
2013-10-05 01:38 . 2013-10-05 01:38	970912	----a-w-	c:\windows\SysWow64\msvcr120.dll
2013-10-05 01:38 . 2013-10-05 01:38	96936	----a-w-	c:\windows\SysWow64\mfcm120ud.dll
2013-10-05 01:38 . 2013-10-05 01:38	912552	----a-w-	c:\windows\SysWow64\vcamp120d.dll
2013-10-05 01:38 . 2013-10-05 01:38	83104	----a-w-	c:\windows\SysWow64\mfcm120u.dll
2013-10-05 01:38 . 2013-10-05 01:38	83104	----a-w-	c:\windows\SysWow64\mfcm120.dll
2013-10-05 01:38 . 2013-10-05 01:38	8282784	----a-w-	c:\windows\SysWow64\mfc120ud.dll
2013-10-05 01:38 . 2013-10-05 01:38	8212640	----a-w-	c:\windows\SysWow64\mfc120d.dll
2013-10-05 01:38 . 2013-10-05 01:38	815272	----a-w-	c:\windows\SysWow64\msvcp120d.dll
2013-10-05 01:38 . 2013-10-05 01:38	772784	----a-w-	c:\windows\SysWow64\vccorlib120d.dll
2013-10-05 01:38 . 2013-10-05 01:38	74920	----a-w-	c:\windows\SysWow64\mfc120fra.dll
2013-10-05 01:38 . 2013-10-05 01:38	74920	----a-w-	c:\windows\SysWow64\mfc120deu.dll
2013-10-05 01:38 . 2013-10-05 01:38	73896	----a-w-	c:\windows\SysWow64\mfc120esn.dll
2013-10-05 01:38 . 2013-10-05 01:38	72872	----a-w-	c:\windows\SysWow64\mfc120ita.dll
2013-10-05 01:38 . 2013-10-05 01:38	70824	----a-w-	c:\windows\SysWow64\mfc120rus.dll
2013-10-05 01:38 . 2013-10-05 01:38	65192	----a-w-	c:\windows\SysWow64\mfc120enu.dll
2013-10-05 01:38 . 2013-10-05 01:38	53928	----a-w-	c:\windows\SysWow64\mfc120jpn.dll
2013-10-05 01:38 . 2013-10-05 01:38	53416	----a-w-	c:\windows\SysWow64\mfc120kor.dll
2013-10-05 01:38 . 2013-10-05 01:38	46248	----a-w-	c:\windows\SysWow64\mfc120cht.dll
2013-10-05 01:38 . 2013-10-05 01:38	46248	----a-w-	c:\windows\SysWow64\mfc120chs.dll
2013-10-05 01:38 . 2013-10-05 01:38	455328	----a-w-	c:\windows\SysWow64\msvcp120.dll
2013-10-05 01:38 . 2013-10-05 01:38	4449952	----a-w-	c:\windows\SysWow64\mfc120u.dll
2013-10-05 01:38 . 2013-10-05 01:38	4424344	----a-w-	c:\windows\SysWow64\mfc120.dll
2013-10-05 01:38 . 2013-10-05 01:38	339616	----a-w-	c:\windows\SysWow64\vcamp120.dll
2013-10-05 01:38 . 2013-10-05 01:38	247984	----a-w-	c:\windows\SysWow64\vccorlib120.dll
2013-10-05 01:38 . 2013-10-05 01:38	1824424	----a-w-	c:\windows\SysWow64\msvcr120d.dll
2013-10-05 01:38 . 2013-10-05 01:38	149672	----a-w-	c:\windows\SysWow64\vcomp120d.dll
2013-10-05 01:38 . 2013-10-05 01:38	119456	----a-w-	c:\windows\SysWow64\vcomp120.dll
2013-10-04 22:58 . 2013-10-04 22:58	963232	----a-w-	c:\windows\system32\msvcr120.dll
2013-10-04 22:58 . 2013-10-04 22:58	91808	----a-w-	c:\windows\system32\mfcm120u.dll
2013-10-04 22:58 . 2013-10-04 22:58	91808	----a-w-	c:\windows\system32\mfcm120.dll
2013-10-04 22:58 . 2013-10-04 22:58	74920	----a-w-	c:\windows\system32\mfc120fra.dll
2013-10-04 22:58 . 2013-10-04 22:58	74920	----a-w-	c:\windows\system32\mfc120deu.dll
2013-10-04 22:58 . 2013-10-04 22:58	73896	----a-w-	c:\windows\system32\mfc120esn.dll
2013-10-04 22:58 . 2013-10-04 22:58	72872	----a-w-	c:\windows\system32\mfc120ita.dll
2013-10-04 22:58 . 2013-10-04 22:58	70824	----a-w-	c:\windows\system32\mfc120rus.dll
2013-10-04 22:58 . 2013-10-04 22:58	660128	----a-w-	c:\windows\system32\msvcp120.dll
2013-10-04 22:58 . 2013-10-04 22:58	65192	----a-w-	c:\windows\system32\mfc120enu.dll
2013-10-04 22:58 . 2013-10-04 22:58	5634720	----a-w-	c:\windows\system32\mfc120u.dll
2013-10-04 22:58 . 2013-10-04 22:58	5608088	----a-w-	c:\windows\system32\mfc120.dll
2013-10-04 22:58 . 2013-10-04 22:58	53928	----a-w-	c:\windows\system32\mfc120jpn.dll
2013-10-04 22:58 . 2013-10-04 22:58	53416	----a-w-	c:\windows\system32\mfc120kor.dll
2013-10-04 22:58 . 2013-10-04 22:58	481952	----a-w-	c:\windows\system32\vcamp120.dll
2013-10-04 22:58 . 2013-10-04 22:58	46248	----a-w-	c:\windows\system32\mfc120cht.dll
2013-10-04 22:58 . 2013-10-04 22:58	46248	----a-w-	c:\windows\system32\mfc120chs.dll
2013-10-04 22:58 . 2013-10-04 22:58	356528	----a-w-	c:\windows\system32\vccorlib120.dll
2013-10-04 22:58 . 2013-10-04 22:58	2150568	----a-w-	c:\windows\system32\msvcr120d.dll
2013-10-04 22:58 . 2013-10-04 22:58	168616	----a-w-	c:\windows\system32\vcomp120d.dll
2013-10-04 22:58 . 2013-10-04 22:58	137376	----a-w-	c:\windows\system32\vcomp120.dll
2013-10-04 22:58 . 2013-10-04 22:58	1241256	----a-w-	c:\windows\system32\vcamp120d.dll
2013-10-04 22:58 . 2013-10-04 22:58	1101480	----a-w-	c:\windows\system32\msvcp120d.dll
2013-10-04 22:58 . 2013-10-04 22:58	10973344	----a-w-	c:\windows\system32\mfc120ud.dll
2013-10-04 22:58 . 2013-10-04 22:58	10901152	----a-w-	c:\windows\system32\mfc120d.dll
2013-10-04 22:58 . 2013-10-04 22:58	107680	----a-w-	c:\windows\system32\mfcm120d.dll
2013-10-04 22:58 . 2013-10-04 22:58	107176	----a-w-	c:\windows\system32\mfcm120ud.dll
2013-10-04 22:58 . 2013-10-04 22:58	1023664	----a-w-	c:\windows\system32\vccorlib120d.dll
2013-10-04 02:28 . 2013-11-14 20:08	190464	----a-w-	c:\windows\system32\SmartcardCredentialProvider.dll
2013-10-04 02:25 . 2013-11-14 20:08	197120	----a-w-	c:\windows\system32\credui.dll
2013-10-04 02:24 . 2013-11-14 20:08	1930752	----a-w-	c:\windows\system32\authui.dll
2006-05-03 09:06	163328	--sha-r-	c:\windows\SysWOW64\flvDX.dll
2007-02-21 10:47	31232	--sha-r-	c:\windows\SysWOW64\msfDX.dll
2008-03-16 12:30	216064	--sha-r-	c:\windows\SysWOW64\nbDX.dll
2010-01-06 21:00	107520	--sha-r-	c:\windows\SysWOW64\TAKDSDecoder.dll
2012-10-05 17:54	188416	--sha-r-	c:\windows\SysWOW64\winDCE32.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{dd230880-495a-11d1-b064-008048ec2fc5}"
[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]
2012-12-20 16:20	459784	----a-w-	c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2011-10-19 3077528]
"GAINWARD"="c:\program files (x86)\EXPERTool\TBPanel.exe" [2011-08-02 2273608]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-09-14 59720]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"snp2uvc"="c:\windows\vsnp2uvc.exe" [2008-08-01 675840]
"tsnp2uvc"="c:\windows\tsnp2uvc.exe" [2009-12-11 320512]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"UpdatePDRShortCut"="c:\program files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"CloneCDTray"="c:\program files (x86)\SlySoft\CloneCD\CloneCDTray.exe" [2009-01-29 57344]
"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe" [2013-10-18 356128]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]
"PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2013-12-04 186408]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-11-29 3806544]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
"FixCamera"=c:\windows\FixCamera.exe
"Samsung Common SM"="c:\windows\Samsung\ComSMMgr\ssmmgr.exe" /autorun
"TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R1 bnqstsgk;bnqstsgk;c:\windows\system32\drivers\bnqstsgk.sys;c:\windows\SYSNATIVE\drivers\bnqstsgk.sys [x]
R1 dfhtpxsf;dfhtpxsf;c:\windows\system32\drivers\dfhtpxsf.sys;c:\windows\SYSNATIVE\drivers\dfhtpxsf.sys [x]
R1 evkomlpb;evkomlpb;c:\windows\system32\drivers\evkomlpb.sys;c:\windows\SYSNATIVE\drivers\evkomlpb.sys [x]
R1 exghbnub;exghbnub;c:\windows\system32\drivers\exghbnub.sys;c:\windows\SYSNATIVE\drivers\exghbnub.sys [x]
R1 flnvtwiu;flnvtwiu;c:\windows\system32\drivers\flnvtwiu.sys;c:\windows\SYSNATIVE\drivers\flnvtwiu.sys [x]
R1 ggplayov;ggplayov;c:\windows\system32\drivers\ggplayov.sys;c:\windows\SYSNATIVE\drivers\ggplayov.sys [x]
R1 glhbzrdp;glhbzrdp;c:\windows\system32\drivers\glhbzrdp.sys;c:\windows\SYSNATIVE\drivers\glhbzrdp.sys [x]
R1 hjgequpo;hjgequpo;c:\windows\system32\drivers\hjgequpo.sys;c:\windows\SYSNATIVE\drivers\hjgequpo.sys [x]
R1 ibrmytkv;ibrmytkv;c:\windows\system32\drivers\ibrmytkv.sys;c:\windows\SYSNATIVE\drivers\ibrmytkv.sys [x]
R1 ihpczvzt;ihpczvzt;c:\windows\system32\drivers\ihpczvzt.sys;c:\windows\SYSNATIVE\drivers\ihpczvzt.sys [x]
R1 iwxgprso;iwxgprso;c:\windows\system32\drivers\iwxgprso.sys;c:\windows\SYSNATIVE\drivers\iwxgprso.sys [x]
R1 jhostfze;jhostfze;c:\windows\system32\drivers\jhostfze.sys;c:\windows\SYSNATIVE\drivers\jhostfze.sys [x]
R1 kiaqjrtf;kiaqjrtf;c:\windows\system32\drivers\kiaqjrtf.sys;c:\windows\SYSNATIVE\drivers\kiaqjrtf.sys [x]
R1 kpqjothk;kpqjothk;c:\windows\system32\drivers\kpqjothk.sys;c:\windows\SYSNATIVE\drivers\kpqjothk.sys [x]
R1 mozosloe;mozosloe;c:\windows\system32\drivers\mozosloe.sys;c:\windows\SYSNATIVE\drivers\mozosloe.sys [x]
R1 mwtafrhe;mwtafrhe;c:\windows\system32\drivers\mwtafrhe.sys;c:\windows\SYSNATIVE\drivers\mwtafrhe.sys [x]
R1 nijxcfnj;nijxcfnj;c:\windows\system32\drivers\nijxcfnj.sys;c:\windows\SYSNATIVE\drivers\nijxcfnj.sys [x]
R1 njlwenqt;njlwenqt;c:\windows\system32\drivers\njlwenqt.sys;c:\windows\SYSNATIVE\drivers\njlwenqt.sys [x]
R1 nrmqgeaq;nrmqgeaq;c:\windows\system32\drivers\nrmqgeaq.sys;c:\windows\SYSNATIVE\drivers\nrmqgeaq.sys [x]
R1 olekorua;olekorua;c:\windows\system32\drivers\olekorua.sys;c:\windows\SYSNATIVE\drivers\olekorua.sys [x]
R1 pddbwrxt;pddbwrxt;c:\windows\system32\drivers\pddbwrxt.sys;c:\windows\SYSNATIVE\drivers\pddbwrxt.sys [x]
R1 pkijmgtn;pkijmgtn;c:\windows\system32\drivers\pkijmgtn.sys;c:\windows\SYSNATIVE\drivers\pkijmgtn.sys [x]
R1 ptvuibnd;ptvuibnd;c:\windows\system32\drivers\ptvuibnd.sys;c:\windows\SYSNATIVE\drivers\ptvuibnd.sys [x]
R1 qlnvkvlz;qlnvkvlz;c:\windows\system32\drivers\qlnvkvlz.sys;c:\windows\SYSNATIVE\drivers\qlnvkvlz.sys [x]
R1 qqfmmntb;qqfmmntb;c:\windows\system32\drivers\qqfmmntb.sys;c:\windows\SYSNATIVE\drivers\qqfmmntb.sys [x]
R1 qyyteedz;qyyteedz;c:\windows\system32\drivers\qyyteedz.sys;c:\windows\SYSNATIVE\drivers\qyyteedz.sys [x]
R1 reiphzej;reiphzej;c:\windows\system32\drivers\reiphzej.sys;c:\windows\SYSNATIVE\drivers\reiphzej.sys [x]
R1 rkispkye;rkispkye;c:\windows\system32\drivers\rkispkye.sys;c:\windows\SYSNATIVE\drivers\rkispkye.sys [x]
R1 rqxvktor;rqxvktor;c:\windows\system32\drivers\rqxvktor.sys;c:\windows\SYSNATIVE\drivers\rqxvktor.sys [x]
R1 rsnvucpt;rsnvucpt;c:\windows\system32\drivers\rsnvucpt.sys;c:\windows\SYSNATIVE\drivers\rsnvucpt.sys [x]
R1 sljolomf;sljolomf;c:\windows\system32\drivers\sljolomf.sys;c:\windows\SYSNATIVE\drivers\sljolomf.sys [x]
R1 tpioqxek;tpioqxek;c:\windows\system32\drivers\tpioqxek.sys;c:\windows\SYSNATIVE\drivers\tpioqxek.sys [x]
R1 trdhienr;trdhienr;c:\windows\system32\drivers\trdhienr.sys;c:\windows\SYSNATIVE\drivers\trdhienr.sys [x]
R1 txvztkiq;txvztkiq;c:\windows\system32\drivers\txvztkiq.sys;c:\windows\SYSNATIVE\drivers\txvztkiq.sys [x]
R1 tzjkmdvf;tzjkmdvf;c:\windows\system32\drivers\tzjkmdvf.sys;c:\windows\SYSNATIVE\drivers\tzjkmdvf.sys [x]
R1 uguzijuk;uguzijuk;c:\windows\system32\drivers\uguzijuk.sys;c:\windows\SYSNATIVE\drivers\uguzijuk.sys [x]
R1 vgrfszla;vgrfszla;c:\windows\system32\drivers\vgrfszla.sys;c:\windows\SYSNATIVE\drivers\vgrfszla.sys [x]
R1 vtxmuojc;vtxmuojc;c:\windows\system32\drivers\vtxmuojc.sys;c:\windows\SYSNATIVE\drivers\vtxmuojc.sys [x]
R1 wrsxqila;wrsxqila;c:\windows\system32\drivers\wrsxqila.sys;c:\windows\SYSNATIVE\drivers\wrsxqila.sys [x]
R1 xeshofoi;xeshofoi;c:\windows\system32\drivers\xeshofoi.sys;c:\windows\SYSNATIVE\drivers\xeshofoi.sys [x]
R1 xhbipmbk;xhbipmbk;c:\windows\system32\drivers\xhbipmbk.sys;c:\windows\SYSNATIVE\drivers\xhbipmbk.sys [x]
R1 ybmjedft;ybmjedft;c:\windows\system32\drivers\ybmjedft.sys;c:\windows\SYSNATIVE\drivers\ybmjedft.sys [x]
R1 ydnwlbze;ydnwlbze;c:\windows\system32\drivers\ydnwlbze.sys;c:\windows\SYSNATIVE\drivers\ydnwlbze.sys [x]
R1 yrxzjdal;yrxzjdal;c:\windows\system32\drivers\yrxzjdal.sys;c:\windows\SYSNATIVE\drivers\yrxzjdal.sys [x]
R1 yssdrnbz;yssdrnbz;c:\windows\system32\drivers\yssdrnbz.sys;c:\windows\SYSNATIVE\drivers\yssdrnbz.sys [x]
R1 yvzmfhna;yvzmfhna;c:\windows\system32\drivers\yvzmfhna.sys;c:\windows\SYSNATIVE\drivers\yvzmfhna.sys [x]
R1 zirtwuoe;zirtwuoe;c:\windows\system32\drivers\zirtwuoe.sys;c:\windows\SYSNATIVE\drivers\zirtwuoe.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 DirMngr;DirMngr;c:\program files (x86)\GNU\GnuPG\dirmngr.exe;c:\program files (x86)\GNU\GnuPG\dirmngr.exe [x]
R2 Garmin Core Update Service;Garmin Core Update Service;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [x]
R2 lxecCATSCustConnectService;lxecCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe;c:\windows\SYSNATIVE\spool\DRIVERS\x64\3\\lxecserv.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AF9035HB;AF9035 Hybrid Device;c:\windows\system32\Drivers\AF9035HB.sys;c:\windows\SYSNATIVE\Drivers\AF9035HB.sys [x]
R3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver;c:\windows\system32\Drivers\ATSwpWDF.sys;c:\windows\SYSNATIVE\Drivers\ATSwpWDF.sys [x]
R3 busbcrw;USB Card Reader Writer driver;c:\windows\system32\Drivers\bucrw64.sys;c:\windows\SYSNATIVE\Drivers\bucrw64.sys [x]
R3 cpuz130;cpuz130;c:\users\Saturn\AppData\Local\Temp\cpuz130\cpuz_x64.sys;c:\users\Saturn\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
R3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;c:\program files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe;c:\program files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [x]
R3 dump_wmimmc;dump_wmimmc;c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys;c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 VsEtwService120;Visual Studio ETW-Ereignisauflistungsdienst;c:\program files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe;c:\program files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 CSCrySec;InfoWatch Encrypt Sector Library driver;c:\windows\system32\DRIVERS\CSCrySec.sys;c:\windows\SYSNATIVE\DRIVERS\CSCrySec.sys [x]
S1 CSVirtualDiskDrv;InfoWatch Virtual Disk driver;c:\windows\system32\DRIVERS\CSVirtualDiskDrv.sys;c:\windows\SYSNATIVE\DRIVERS\CSVirtualDiskDrv.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]
S1 RrNetCapFilterDriver;RadioRip Filter Driver;c:\windows\system32\DRIVERS\RrNetCapFilterDriver.sys;c:\windows\SYSNATIVE\DRIVERS\RrNetCapFilterDriver.sys [x]
S2 CSObjectsSrv;Verwaltungsservice vom CryproStorage-System;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 lxec_device;lxec_device;c:\windows\system32\lxeccoms.exe;c:\windows\SYSNATIVE\lxeccoms.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [x]
S2 WTService;WTService;c:\windows\system32\atwtusb.exe;c:\windows\SYSNATIVE\atwtusb.exe [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]
S3 KovaPlusFltr;ROCCAT Kova[+] Mouse;c:\windows\system32\drivers\KovaPlusFltr.sys;c:\windows\SYSNATIVE\drivers\KovaPlusFltr.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - afw
*Deregistered* - afwcore
*Deregistered* - avgntflt
*Deregistered* - BdFileSpy
.
Inhalt des "geplante Tasks" Ordners
.
2013-12-27 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 19:34]
.
2013-12-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-07 17:18]
.
2013-12-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-07 17:18]
.
2013-12-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core.job
- c:\users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-17 12:57]
.
2013-12-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA.job
- c:\users\Saturn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-17 12:57]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{dd230880-495a-11d1-b064-008048ec2fc5}"
[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]
2012-12-20 16:22	492040	----a-w-	c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-08-04 8060960]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2010-07-21 2327952]
"snp2uvc"="c:\windows\vsnp2uvc.exe" [2008-08-01 675840]
"MacrokeyManager"="WTMKM.exe" [2011-04-12 7325184]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-11-14 1028384]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-11-29 1096480]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2013-11-29 2273056]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-09-30 825184]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{1984D045-52CF-49cd-DB77-08F378FEA4DB}"= "c:\program files (x86)\Stardock\ObjectDockPlus2\ODMenu64.dll" [2010-03-24 633200]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: An OneNote s&enden - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105
IE: Hinzufügen zu Anti-Banner - c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ie_banner_deny.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\
FF - ExtSQL: 2013-11-01 17:55; {43616d3f-8ae4-4351-9b52-74faeeb1a3dc}; c:\users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\extensions\{43616d3f-8ae4-4351-9b52-74faeeb1a3dc}.xpi
FF - ExtSQL: 2013-11-13 17:30; snt@dotlabs.co; c:\users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\extensions\snt@dotlabs.co.xpi
FF - ExtSQL: 2013-11-20 17:14; om@offermosquito.com; c:\users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\extensions\om@offermosquito.com.xpi
FF - ExtSQL: 2013-12-22 14:54; {18f64064-a482-4fbf-8fd6-3c6e5806565a}; c:\users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\extensions\{18f64064-a482-4fbf-8fd6-3c6e5806565a}.xpi
FF - ExtSQL: !HIDDEN! 2010-04-06 19:25; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-{CF91A5A9-F10D-433D-A677-9505B84EAF1B} - c:\programdata\{0F4A7EFE-5950-4389-BF36-1E625D72456B}\shareware.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*2*6*4*-*A*A*C*)*(Á8\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*b*l*o*g*)ôÄU\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*D*V*kßIP\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3*e%%`\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3*—†É=\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3*ãèÏi\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3*åïÍj\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*4*Vnñ&\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*4*ü~K\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*¸ÊPO]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*¸ÊPO\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*êA'U¼*€»]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*êA'U¼*€»\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*)CÐj]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*)CÐj\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*²Y&ixD*€™b Fb`Eb*Eb*Db@Db€CbàCb CbÀBb*Bb*Ab@Abà@b€@b @b*?b`?bà=b@>b€=b =bÀ<b`<b*<b*;b€:bà:b`9bÀ9b]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*²Y&ixD*€™b Fb`Eb*Eb*Db@Db€CbàCb CbÀBb*Bb*Ab@Abà@b€@b @b*?b`?bà=b@>b€=b =bÀ<b`<b*<b*;b€:bà:b`9bÀ9b\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*áb–.]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*áb–.\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*…u[]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*…u[\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*êÌÝF]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*êÌÝF\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*vêÏi]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*vêÏi\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*ýîÍj]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*ýîÍj\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:13,95,31,d7,8b,66,70,31,f9,5f,f5,8f,a6,ac,40,8b,9d,ae,2e,52,2f,ef,b6,
   f5,d0,c8,00,38,6b,d5,3c,6b,78,77,c2,5f,7d,98,30,6a,50,50,02,ac,30,4a,69,0e,\
"??"=hex:5d,2e,bc,00,9b,07,bc,9c,34,34,87,88,c9,ab,ca,0d
.
[HKEY_USERS\S-1-5-21-2370623705-2617329015-605871245-1000\Software\SecuROM\License information*]
"datasecu"=hex:bb,b2,ed,4d,64,d9,15,7d,4a,ed,d5,4d,89,1f,c9,5f,d8,2a,2f,9e,3a,
   e7,0c,17,c9,d5,1d,fc,26,7e,8f,c4,13,bd,60,6b,8e,21,b5,eb,52,b9,35,61,4a,bb,\
"rkeysecu"=hex:d0,fb,2a,78,2c,a7,1e,f0,05,98,19,d5,16,69,d9,3c
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-12-27  11:24:54
ComboFix-quarantined-files.txt  2013-12-27 10:24
ComboFix2.txt  2011-05-04 13:21
.
Vor Suchlauf: 23 Verzeichnis(se), 112.675.827.712 Bytes frei
Nach Suchlauf: 26 Verzeichnis(se), 112.822.898.688 Bytes frei
.
- - End Of File - - FF14B7CE7E7ED174BDE23A1A736C7A04
A36C5E4F47E84449FF07ED3517B43A31
         

Alt 28.12.2013, 08:27   #7
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 28.12.2013, 15:41   #8
Ravenwing
 
Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



so... hier die log-files:

Malwarebytes Anti-Malware :

Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.28.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Saturn :: RAVENHOME [Administrator]

28.12.2013 11:28:54
mbam-log-2013-12-28 (11-28-54).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 229047
Laufzeit: 11 Minute(n), 17 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         

AdwCleaner:

Code:
ATTFilter
# AdwCleaner v3.016 - Bericht erstellt am 28/12/2013 um 15:13:50
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Saturn - RAVENHOME
# Gestartet von : C:\Users\Saturn\Desktop\Sicherheitsprogramme und logs\adwcleaner_3.016.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v24.0 (de)

[ Datei : C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [11855 octets] - [26/12/2013 13:33:35]
AdwCleaner[R1].txt - [1254 octets] - [26/12/2013 15:02:16]
AdwCleaner[R2].txt - [1344 octets] - [28/12/2013 15:12:05]
AdwCleaner[S0].txt - [11403 octets] - [26/12/2013 13:34:38]
AdwCleaner[S1].txt - [1226 octets] - [28/12/2013 15:13:50]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1286 octets] ##########
         


JRT:

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Saturn on 28.12.2013 at 15:21:32,55
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\Saturn\appdata\local\{0F4D27EC-DDAD-45C8-BEA7-A7884F242A3D}
Successfully deleted: [Empty Folder] C:\Users\Saturn\appdata\local\{3ED3D50D-D913-47EA-97A0-C79A37993845}
Successfully deleted: [Empty Folder] C:\Users\Saturn\appdata\local\{995F100F-0566-46D7-9E82-69C74301601E}



~~~ FireFox

Emptied folder: C:\Users\Saturn\AppData\Roaming\mozilla\firefox\profiles\8ta2xjux.default\minidumps [30 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.12.2013 at 15:27:22,55
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
hier noch das neue log-file von FRST:


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-12-2013
Ran by Saturn (administrator) on RAVENHOME on 28-12-2013 15:37:22
Running from C:\Users\Saturn\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Sonix) C:\Windows\vsnp2uvc.exe
() C:\Windows\System32\WTMKM.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(Gainward Co.) C:\Program Files (x86)\EXPERTool\TBPANEL.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
() C:\Windows\tsnp2uvc.exe
(Roccat GmbH) C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
( ) C:\Windows\System32\lxeccoms.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Windows\System32\atwtusb.exe
() C:\Windows\System32\atwtusb.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Safari.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-04] (Realtek Semiconductor)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation)
HKLM\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix)
HKLM\...\Run: [MacrokeyManager] - C:\Windows\System32\WTMKM.exe [7325184 2011-04-12] ()
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix)
HKLM-x32\...\Run: [tsnp2uvc] - C:\Windows\tsnp2uvc.exe [320512 2009-12-11] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CloneCDTray] - C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.)
HKLM-x32\...\Run: [RoccatKova+] - C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe [539688 2011-03-17] (Roccat GmbH)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-04] (Geek Software GmbH)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3077528 2011-10-19] ()
HKCU\...\Run: [GAINWARD] - C:\Program Files (x86)\EXPERTool\TBPANEL.exe [2273608 2011-08-02] (Gainward Co.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5765A900BFCBCB01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKCU - {44219366-4C90-49F2-B082-3F7B238E29B9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=302398&p={searchTerms}
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
ShellExecuteHooks-x32:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 62.109.121.2 62.109.121.1

FireFox:
========
FF ProfilePath: C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default
FF Homepage: www.google.de
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.110.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Saturn\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Battlefield Heroes Updater - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\battlefieldheroespatcher@ea.com
FF Extension: ProxTube - Unblock YouTube - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\ich@maltegoetz.de
FF Extension: YouTube Unblocker - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\youtubeunblocker@unblocker.yt
FF Extension: Flagfox - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
FF Extension: Garmin Communicator - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: DownloadHelper - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Simple New Tab - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\snt@dotlabs.co.xpi
FF Extension: TinEye Reverse Image Search - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\tineye@ideeinc.com.xpi
FF Extension: Shockwave Flash Plugin Free - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{18f64064-a482-4fbf-8fd6-3c6e5806565a}.xpi
FF Extension: {43616d3f-8ae4-4351-9b52-74faeeb1a3dc} - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{43616d3f-8ae4-4351-9b52-74faeeb1a3dc}.xpi
FF Extension: Adblock Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Download Statusbar - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
FF Extension: Tab Mix Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll No File
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.486_0\plugin/npUrlAdvisor.dll No File
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.486_0\plugin/npVKPlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll No File
CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (YouTube) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0
CHR Extension: (bloomind ct deepdark) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\djolekdiiojehgfggcjckachfgkkdmjd\1_0
CHR Extension: (Chrome Toolbox (by Google)) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjccknnhdnkbanjilpjddjhmkghmachn\1.0.32_0
CHR Extension: (TinEye Reverse Image Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl\1.1.3_0
CHR Extension: (Safe Money) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0
CHR Extension: (Content Blocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.2.614_0
CHR Extension: (RealDownloader) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0
CHR Extension: (Virtual Keyboard) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.614_0
CHR Extension: (Google Wallet) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (YouTube Unblocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0
CHR Extension: (Gmail) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR Extension: (Anti-Banner) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0
CHR Extension: (Simple New Tab) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmgkeimkiojpjcoiiipekfjaopchhjga\1.0.0_0
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx
CHR StartMenuInternet: Google Chrome - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
S3 DAUpdaterSvc; C:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-12-11] (BioWare)
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] ()
S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [248664 2013-09-12] (Garmin Ltd or its subsidiaries)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.)
S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-01-07] ( )
R2 lxec_device; C:\Windows\SysWow64\lxeccoms.exe [598696 2010-01-07] ( )
S2 MSSQL$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe [9150464 2005-05-03] (Microsoft Corporation)
S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [73728 2005-05-03] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4005936 2011-06-06] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-05] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2008-12-31] ()
S3 SQLAgent$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE [323584 2005-05-03] (Microsoft Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-30] (TuneUp Software)
S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
R2 WTService; C:\Windows\system32\atwtusb.exe [916992 2011-04-27] ()

==================== Drivers (Whitelisted) ====================

S3 AF9035HB; C:\Windows\System32\Drivers\AF9035HB.sys [907904 2010-05-15] (ITE Technologies         )
S3 busbcrw; C:\Windows\System32\Drivers\bucrw64.sys [25600 2006-10-27] (Brother Industries, Ltd.)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
R3 ElbyCDFL; C:\Windows\SysWow64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
S3 ezplay; C:\Windows\System32\Drivers\ezplay.sys [118400 2011-10-08] (VSO Software)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-18] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-10-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-15] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-07-15] (Kaspersky Lab ZAO)
R3 KovaPlusFltr; C:\Windows\System32\drivers\KovaPlusFltr.sys [15104 2010-01-25] (ROCCAT Development, Inc.)
R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2005-01-02] (INCA Internet Co., Ltd.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
S1 PCLEPCI; C:\Windows\SysWow64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-11-27] (Audials AG)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552512 2009-12-18] ()
S3 TBPanel; No ImagePath
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
R3 vhidmini; C:\Windows\System32\DRIVERS\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S1 bnqstsgk; \??\C:\Windows\system32\drivers\bnqstsgk.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 cpuz130; \??\C:\Users\Saturn\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
S1 dfhtpxsf; \??\C:\Windows\system32\drivers\dfhtpxsf.sys [x]
S3 dump_wmimmc; \??\c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S1 evkomlpb; \??\C:\Windows\system32\drivers\evkomlpb.sys [x]
S1 exghbnub; \??\C:\Windows\system32\drivers\exghbnub.sys [x]
S1 flnvtwiu; \??\C:\Windows\system32\drivers\flnvtwiu.sys [x]
S1 ggplayov; \??\C:\Windows\system32\drivers\ggplayov.sys [x]
S1 glhbzrdp; \??\C:\Windows\system32\drivers\glhbzrdp.sys [x]
S1 hjgequpo; \??\C:\Windows\system32\drivers\hjgequpo.sys [x]
S1 ibrmytkv; \??\C:\Windows\system32\drivers\ibrmytkv.sys [x]
S1 ihpczvzt; \??\C:\Windows\system32\drivers\ihpczvzt.sys [x]
S1 iwxgprso; \??\C:\Windows\system32\drivers\iwxgprso.sys [x]
S1 jhostfze; \??\C:\Windows\system32\drivers\jhostfze.sys [x]
S1 kiaqjrtf; \??\C:\Windows\system32\drivers\kiaqjrtf.sys [x]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-10-18] (Kaspersky Lab ZAO)
S1 kpqjothk; \??\C:\Windows\system32\drivers\kpqjothk.sys [x]
S1 mozosloe; \??\C:\Windows\system32\drivers\mozosloe.sys [x]
S1 mwtafrhe; \??\C:\Windows\system32\drivers\mwtafrhe.sys [x]
S1 nijxcfnj; \??\C:\Windows\system32\drivers\nijxcfnj.sys [x]
S1 njlwenqt; \??\C:\Windows\system32\drivers\njlwenqt.sys [x]
S1 nrmqgeaq; \??\C:\Windows\system32\drivers\nrmqgeaq.sys [x]
S1 olekorua; \??\C:\Windows\system32\drivers\olekorua.sys [x]
S1 pddbwrxt; \??\C:\Windows\system32\drivers\pddbwrxt.sys [x]
S1 pkijmgtn; \??\C:\Windows\system32\drivers\pkijmgtn.sys [x]
S1 ptvuibnd; \??\C:\Windows\system32\drivers\ptvuibnd.sys [x]
S1 qlnvkvlz; \??\C:\Windows\system32\drivers\qlnvkvlz.sys [x]
S1 qqfmmntb; \??\C:\Windows\system32\drivers\qqfmmntb.sys [x]
S1 qyyteedz; \??\C:\Windows\system32\drivers\qyyteedz.sys [x]
S1 reiphzej; \??\C:\Windows\system32\drivers\reiphzej.sys [x]
S1 rkispkye; \??\C:\Windows\system32\drivers\rkispkye.sys [x]
S1 rqxvktor; \??\C:\Windows\system32\drivers\rqxvktor.sys [x]
S1 rsnvucpt; \??\C:\Windows\system32\drivers\rsnvucpt.sys [x]
S1 sljolomf; \??\C:\Windows\system32\drivers\sljolomf.sys [x]
S1 tpioqxek; \??\C:\Windows\system32\drivers\tpioqxek.sys [x]
S1 trdhienr; \??\C:\Windows\system32\drivers\trdhienr.sys [x]
S1 txvztkiq; \??\C:\Windows\system32\drivers\txvztkiq.sys [x]
S1 tzjkmdvf; \??\C:\Windows\system32\drivers\tzjkmdvf.sys [x]
S1 uguzijuk; \??\C:\Windows\system32\drivers\uguzijuk.sys [x]
S1 vgrfszla; \??\C:\Windows\system32\drivers\vgrfszla.sys [x]
S1 vtxmuojc; \??\C:\Windows\system32\drivers\vtxmuojc.sys [x]
S1 wrsxqila; \??\C:\Windows\system32\drivers\wrsxqila.sys [x]
S1 xeshofoi; \??\C:\Windows\system32\drivers\xeshofoi.sys [x]
S1 xhbipmbk; \??\C:\Windows\system32\drivers\xhbipmbk.sys [x]
S1 ybmjedft; \??\C:\Windows\system32\drivers\ybmjedft.sys [x]
S1 ydnwlbze; \??\C:\Windows\system32\drivers\ydnwlbze.sys [x]
S1 yrxzjdal; \??\C:\Windows\system32\drivers\yrxzjdal.sys [x]
S1 yssdrnbz; \??\C:\Windows\system32\drivers\yssdrnbz.sys [x]
S1 yvzmfhna; \??\C:\Windows\system32\drivers\yvzmfhna.sys [x]
S1 zirtwuoe; \??\C:\Windows\system32\drivers\zirtwuoe.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-28 15:37 - 2013-12-28 15:37 - 00040505 _____ C:\Users\Saturn\Desktop\FRST.txt
2013-12-28 15:27 - 2013-12-28 15:27 - 00001150 _____ C:\Users\Saturn\Desktop\JRT.txt
2013-12-28 15:21 - 2013-12-28 15:21 - 00000000 ____D C:\Windows\ERUNT
2013-12-28 15:17 - 2013-12-28 15:18 - 00000000 ____D C:\Users\Saturn\Desktop\wisersearch
2013-12-28 15:17 - 2013-12-28 15:17 - 00001366 _____ C:\Users\Saturn\Desktop\AdwCleaner[S1].txt
2013-12-28 15:15 - 2013-12-28 15:15 - 00000022 _____ C:\Windows\S.dirmngr
2013-12-27 18:08 - 2013-12-27 18:08 - 00000000 ____D C:\ffmpeg
2013-12-26 23:43 - 2013-12-27 17:59 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 23:43 - 2013-12-27 17:59 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 19:44 - 2013-12-26 19:44 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-12-26 19:41 - 2013-12-28 15:16 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 19:41 - 2013-12-28 15:16 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 19:36 - 2013-12-26 19:36 - 00488320 _____ C:\Windows\Minidump\122613-27518-01.dmp
2013-12-26 17:50 - 2013-12-26 17:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-26 13:43 - 2013-12-26 13:43 - 01928716 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe
2013-12-26 13:43 - 2013-12-26 13:43 - 00000000 ____D C:\FRST
2013-12-26 13:33 - 2013-12-28 15:13 - 00000000 ____D C:\AdwCleaner
2013-12-23 15:47 - 2013-12-23 15:48 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u
2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses
2013-12-23 15:33 - 2013-12-23 15:39 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler
2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2013-12-23 15:32 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D
2013-12-22 14:51 - 2013-12-22 15:02 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate
2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights
2013-12-21 18:35 - 2013-12-21 18:37 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2
2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url
2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url
2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log
2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url
2013-12-18 16:28 - 2013-09-16 00:03 - 00361119 _____ (Farbar) C:\Windows\mod_frst.exe
2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url
2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014
2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014
2013-12-15 20:04 - 2013-10-30 10:45 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-12-15 20:04 - 2013-10-30 10:45 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll
2013-12-15 20:03 - 2013-12-15 20:04 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2013-12-15 20:03 - 2013-10-30 10:45 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-12-15 20:03 - 2013-10-30 10:45 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-15 20:03 - 2013-10-30 10:45 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
2013-12-15 20:02 - 2013-12-15 20:14 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories
2013-12-15 12:06 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-15 12:06 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-15 12:06 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-15 12:06 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-15 12:04 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-15 12:04 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-15 12:04 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 12:04 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-15 12:04 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-15 12:04 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-15 12:04 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-15 12:04 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-15 12:04 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-15 12:04 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-15 12:04 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-15 12:04 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-15 12:04 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-15 12:04 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-15 12:04 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-15 12:04 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-15 12:04 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-15 12:04 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-15 12:04 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-15 12:04 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-15 12:04 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-15 12:04 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-15 12:04 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-15 12:04 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-15 12:04 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-15 12:04 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-15 12:04 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-15 12:04 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-15 12:04 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-15 12:04 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-15 12:04 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-12 20:35 - 2013-12-28 15:17 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn
2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-12 17:48 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 17:48 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 17:48 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 17:48 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 17:48 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 17:48 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 17:48 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 17:48 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 17:48 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 17:48 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 17:48 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 17:48 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 17:48 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 17:48 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 17:48 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 17:48 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 17:48 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 17:48 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 17:48 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url
2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe
2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot
2013-12-07 20:26 - 2013-12-07 21:31 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part
2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp
2013-12-07 14:06 - 2013-12-07 20:26 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar
2013-12-07 14:03 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar
2013-12-07 13:59 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar
2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url
2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe
2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf
2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk
2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk
2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet
2013-12-03 19:58 - 2013-12-03 22:04 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet
2013-12-03 19:52 - 2013-12-03 19:53 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2013-12-03 19:51 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-03 19:51 - 2013-12-03 19:55 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2013-12-03 19:50 - 2013-12-03 19:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion
2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe
2013-12-03 19:17 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation
2013-12-03 19:15 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-03 19:15 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-03 19:14 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA
2013-12-03 18:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url
2013-12-01 19:55 - 2013-12-11 21:58 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server
2013-12-01 19:53 - 2013-12-01 19:52 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar
2013-11-30 17:53 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar
2013-11-30 17:50 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar
2013-11-30 17:46 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar
2013-11-30 17:43 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar
2013-11-30 17:40 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar
2013-11-30 17:37 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar
2013-11-30 17:33 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar
2013-11-30 17:30 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar
2013-11-30 17:27 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar
2013-11-30 17:24 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar
2013-11-30 17:20 - 2013-11-30 17:23 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar
2013-11-30 17:17 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar
2013-11-30 17:14 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar
2013-11-30 17:12 - 2013-11-30 17:14 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar
2013-11-30 17:09 - 2013-11-30 17:12 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar
2013-11-30 17:06 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar
2013-11-30 17:02 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar
2013-11-30 16:59 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar
2013-11-30 16:56 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar
2013-11-30 16:53 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar
2013-11-30 16:49 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar
2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar
2013-11-30 16:46 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar
2013-11-30 16:43 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar
2013-11-30 16:40 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar
2013-11-30 16:36 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar
2013-11-30 16:33 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar
2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar
2013-11-28 19:54 - 2013-11-29 17:56 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-28 19:54 - 2013-11-29 17:56 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-28 19:54 - 2013-11-28 19:54 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-28 19:50 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-28 19:50 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-28 19:50 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-28 19:50 - 2013-10-30 18:02 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-11-28 19:37 - 2013-11-30 15:31 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part09.rar

==================== One Month Modified Files and Folders =======

2013-12-28 15:38 - 2013-12-28 15:37 - 00040505 _____ C:\Users\Saturn\Desktop\FRST.txt
2013-12-28 15:38 - 2011-06-30 11:00 - 00000000 ____D C:\Users\Saturn\AppData\Local\PMB Files
2013-12-28 15:37 - 2012-06-17 13:57 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA.job
2013-12-28 15:34 - 2012-04-01 20:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-28 15:27 - 2013-12-28 15:27 - 00001150 _____ C:\Users\Saturn\Desktop\JRT.txt
2013-12-28 15:24 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-28 15:24 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-28 15:21 - 2013-12-28 15:21 - 00000000 ____D C:\Windows\ERUNT
2013-12-28 15:18 - 2013-12-28 15:17 - 00000000 ____D C:\Users\Saturn\Desktop\wisersearch
2013-12-28 15:18 - 2013-05-10 16:51 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-12-28 15:17 - 2013-12-28 15:17 - 00001366 _____ C:\Users\Saturn\Desktop\AdwCleaner[S1].txt
2013-12-28 15:17 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi
2013-12-28 15:17 - 2006-11-02 13:34 - 00000292 _____ C:\Windows\win.ini
2013-12-28 15:16 - 2013-12-26 19:41 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-28 15:16 - 2013-12-26 19:41 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-28 15:16 - 2009-07-14 05:51 - 27083805 _____ C:\Windows\setupact.log
2013-12-28 15:15 - 2013-12-28 15:15 - 00000022 _____ C:\Windows\S.dirmngr
2013-12-28 15:15 - 2012-04-07 18:18 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-28 15:15 - 2009-09-07 15:11 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-28 15:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-28 15:14 - 2010-04-06 19:01 - 01059280 _____ C:\Windows\WindowsUpdate.log
2013-12-28 15:13 - 2013-12-26 13:33 - 00000000 ____D C:\AdwCleaner
2013-12-28 15:13 - 2012-04-07 18:18 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-28 10:27 - 2010-04-06 20:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\vlc
2013-12-28 09:31 - 2010-03-06 14:16 - 00000000 ____D C:\Users\Saturn\AppData\Local\Adobe
2013-12-28 09:21 - 2010-04-06 18:33 - 00937318 _____ C:\Windows\PFRO.log
2013-12-27 20:37 - 2012-06-17 13:57 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core.job
2013-12-27 19:40 - 2010-05-28 22:36 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Audacity
2013-12-27 19:39 - 2012-04-06 18:05 - 00000000 ____D C:\Users\Saturn\Desktop\filme
2013-12-27 18:28 - 2013-01-02 19:22 - 00000000 ____D C:\JDownloader 2
2013-12-27 18:27 - 2012-03-13 13:25 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner
2013-12-27 18:08 - 2013-12-27 18:08 - 00000000 ____D C:\ffmpeg
2013-12-27 17:59 - 2013-12-26 23:43 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-27 17:59 - 2013-12-26 23:43 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-27 17:33 - 2013-10-30 17:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-27 11:24 - 2011-05-04 13:57 - 00000000 ____D C:\Qoobox
2013-12-27 11:22 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-27 11:21 - 2010-04-06 18:20 - 00000000 ____D C:\Users\Saturn
2013-12-26 19:44 - 2013-12-26 19:44 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-12-26 19:44 - 2011-05-05 15:50 - 00000000 ____D C:\Program Files\CCleaner
2013-12-26 19:36 - 2013-12-26 19:36 - 00488320 _____ C:\Windows\Minidump\122613-27518-01.dmp
2013-12-26 19:36 - 2011-01-11 01:00 - 738757377 _____ C:\Windows\MEMORY.DMP
2013-12-26 19:36 - 2011-01-11 01:00 - 00000000 ____D C:\Windows\Minidump
2013-12-26 17:50 - 2013-12-26 17:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-26 13:43 - 2013-12-26 13:43 - 01928716 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe
2013-12-26 13:43 - 2013-12-26 13:43 - 00000000 ____D C:\FRST
2013-12-26 13:34 - 2013-06-13 17:19 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Common
2013-12-26 11:01 - 2011-02-28 17:09 - 01183744 ___SH C:\Users\Saturn\Thumbs.db
2013-12-23 15:48 - 2013-12-23 15:47 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u
2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses
2013-12-23 15:39 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler
2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2013-12-23 15:33 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D
2013-12-23 15:32 - 2013-09-14 14:14 - 00000000 ____D C:\ProgramData\Package Cache
2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\ProgramData\RapidSolution
2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\Program Files (x86)\Audials
2013-12-23 15:29 - 2013-06-13 17:15 - 00000000 ____D C:\Users\Saturn\AppData\Local\RapidSolution
2013-12-22 23:51 - 2013-05-30 11:17 - 00000000 ____D C:\Users\Saturn\Desktop\lustige Bilder
2013-12-22 15:02 - 2013-12-22 14:51 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate
2013-12-22 15:01 - 2011-10-10 18:59 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI
2013-12-22 14:39 - 2010-04-08 16:47 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights
2013-12-21 18:37 - 2013-12-21 18:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2
2013-12-21 18:34 - 2010-04-06 20:18 - 00558241 _____ C:\Windows\DirectX.log
2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url
2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url
2013-12-19 20:54 - 2009-07-14 18:58 - 00728016 _____ C:\Windows\system32\perfh007.dat
2013-12-19 20:54 - 2009-07-14 18:58 - 00162238 _____ C:\Windows\system32\perfc007.dat
2013-12-19 20:54 - 2009-07-14 06:13 - 01702976 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Origin
2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Local\Origin
2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\ProgramData\Origin
2013-12-19 18:20 - 2011-10-26 09:42 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log
2013-12-19 18:18 - 2013-04-20 19:08 - 00000000 ____D C:\Users\Saturn\Documents\BioWare
2013-12-19 18:16 - 2012-04-22 22:24 - 00002216 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 18:15 - 2012-04-07 18:18 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url
2013-12-19 10:20 - 2012-08-04 17:38 - 00000000 ____D C:\Users\Saturn\Desktop\Canon Programme
2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url
2013-12-17 18:53 - 2013-10-25 08:35 - 00000000 ____D C:\Users\Saturn\Desktop\Lisa Master
2013-12-17 18:51 - 2013-06-02 21:22 - 00000000 ____D C:\Users\Saturn\Desktop\Stick zeug
2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-12-16 19:59 - 2013-08-17 13:01 - 00000000 ____D C:\Windows\system32\MRT
2013-12-16 19:56 - 2010-04-15 14:07 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-16 00:29 - 2009-09-08 09:08 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-12-16 00:28 - 2012-08-04 17:27 - 00000000 ____D C:\Program Files (x86)\Canon
2013-12-16 00:28 - 2010-04-16 13:02 - 00000000 ____D C:\Program Files (x86)\Trillian
2013-12-16 00:26 - 2009-09-07 15:02 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-15 22:09 - 2010-04-21 15:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-15 20:53 - 2010-03-05 19:23 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Mozilla
2013-12-15 20:32 - 2012-06-17 13:57 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA
2013-12-15 20:32 - 2012-06-17 13:57 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core
2013-12-15 20:14 - 2013-12-15 20:02 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-12-15 20:14 - 2012-02-25 09:52 - 00003756 _____ C:\Windows\System32\Tasks\Real Player-Online-Aktualisierungsprogramm
2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014
2013-12-15 20:06 - 2012-02-25 09:43 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014
2013-12-15 20:04 - 2013-12-15 20:03 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2013-12-15 20:03 - 2012-02-25 09:43 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\TuneUp Software
2013-12-15 17:02 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-15 16:25 - 2009-07-14 05:45 - 05459720 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories
2013-12-15 12:06 - 2009-09-08 08:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn
2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-12 18:00 - 2012-09-02 22:09 - 00000000 ____D C:\Users\Saturn\Documents\stories
2013-12-11 21:58 - 2013-12-01 19:55 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server
2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url
2013-12-10 20:34 - 2012-04-01 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-10 20:34 - 2012-04-01 20:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-10 20:34 - 2011-05-14 10:43 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-10 20:27 - 2010-04-27 13:49 - 00000000 ____D C:\Users\Saturn\Documents\My Games
2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe
2013-12-08 17:35 - 2013-08-20 20:00 - 00000000 ____D C:\Users\Saturn\Desktop\2011-09-26
2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot
2013-12-07 21:31 - 2013-12-07 20:26 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part
2013-12-07 20:26 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar
2013-12-07 17:00 - 2010-05-11 21:50 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Skype
2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp
2013-12-07 15:08 - 2012-04-07 18:18 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-07 15:08 - 2012-04-07 18:18 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-07 14:06 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar
2013-12-07 14:03 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar
2013-12-07 13:59 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar
2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url
2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe
2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf
2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk
2013-12-05 19:50 - 2010-12-05 20:42 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-12-03 22:04 - 2013-12-03 19:58 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013
2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk
2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet
2013-12-03 19:57 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-03 19:57 - 2011-10-10 19:11 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2013-12-03 19:57 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-12-03 19:56 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2013-12-03 19:55 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2013-12-03 19:53 - 2013-12-03 19:52 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2013-12-03 19:51 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-12-03 19:50 - 2011-07-26 01:04 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-12-03 19:49 - 2010-05-18 22:36 - 01676320 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion
2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe
2013-12-03 19:18 - 2013-12-03 19:17 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation
2013-12-03 19:18 - 2013-12-03 19:14 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA
2013-12-03 19:18 - 2011-10-28 12:16 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-03 19:15 - 2011-10-28 12:17 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-03 19:15 - 2011-10-28 12:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-03 19:05 - 2010-04-06 19:15 - 00001425 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-03 18:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-03 18:51 - 2013-11-26 17:31 - 00024584 _____ C:\Windows\IE11_main.log
2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-01 23:34 - 2011-10-25 08:16 - 00000000 ____D C:\Users\Saturn\Desktop\Rollenspiele
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url
2013-12-01 19:52 - 2013-12-01 19:53 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar
2013-12-01 18:24 - 2013-05-24 17:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\.minecraft
2013-11-30 20:53 - 2013-01-08 19:22 - 00000000 ____D C:\Users\Saturn\Downloads\mov-world.net
2013-11-30 17:53 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar
2013-11-30 17:50 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar
2013-11-30 17:46 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar
2013-11-30 17:43 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar
2013-11-30 17:40 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar
2013-11-30 17:37 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar
2013-11-30 17:33 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar
2013-11-30 17:30 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar
2013-11-30 17:27 - 2013-11-30 17:24 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar
2013-11-30 17:23 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar
2013-11-30 17:20 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar
2013-11-30 17:17 - 2013-11-30 17:14 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar
2013-11-30 17:14 - 2013-11-30 17:12 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar
2013-11-30 17:12 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar
2013-11-30 17:09 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar
2013-11-30 17:06 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar
2013-11-30 17:02 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar
2013-11-30 16:59 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar
2013-11-30 16:56 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar
2013-11-30 16:53 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar
2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar
2013-11-30 16:49 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar
2013-11-30 16:46 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar
2013-11-30 16:43 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar
2013-11-30 16:40 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar
2013-11-30 16:36 - 2013-11-30 16:33 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar
2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar
2013-11-30 15:31 - 2013-11-28 19:37 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part09.rar
2013-11-29 17:56 - 2013-11-28 19:54 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-29 17:56 - 2013-11-28 19:54 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-28 20:04 - 2012-02-28 22:19 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner (6)
2013-11-28 20:01 - 2010-04-09 14:13 - 00000000 ____D C:\Users\Saturn\Desktop\Games
2013-11-28 19:54 - 2013-11-28 19:54 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-28 19:37 - 2013-11-25 19:30 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part08.rar

Files to move or delete:
====================
C:\ProgramData\hash.dat
C:\Users\Saturn\DoorKickersAlpha_0031_Setup.exe
C:\Users\Saturn\jagex_runescape_preferences.dat
C:\Users\Saturn\jagex_runescape_preferences2.dat
C:\Users\Saturn\jagex__preferences3.dat
C:\Users\Saturn\RocketDock-v1.3.5.exe
C:\Users\Saturn\setup2.5.0.exe


Some content of TEMP:
====================
C:\Users\Saturn\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-20 00:22

==================== End Of Log ============================
         
--- --- ---

--- --- ---

Alt 29.12.2013, 12:25   #9
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 30.12.2013, 08:29   #10
Ravenwing
 
Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



hier die neuen logs:

ESET-log:

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=11c4e7bb732002408ea941ba34eb173f
# engine=16442
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-30 03:16:52
# local_time=2013-12-30 04:16:52 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 33226 140003262 0 0
# scanned=862751
# found=2
# cleaned=0
# scan_time=28464
sh=E5620CAACD2BF0B4F20A75CBD7131644989B41EA ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2008-5353.F trojan" ac=I fn="C:\Users\Saturn\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\7061701b-2c3f4dba"
sh=2C94CC36BF25B9914BD9979501DAFA56243363F9 ft=1 fh=ca84b168bd913bd9 vn="Win32/Packed.Themida.D trojan" ac=I fn="K:\alles wichtige\fraps\Fraps v.2.98.exe"
         

Checkup:

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.77  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Kaspersky PURE 3.0   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Call of Duty: Ghosts  
 Call of Duty: Ghosts - Multiplayer 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 TuneUp Utilities 2014   
 TuneUp Utilities Language Pack (de-DE) 
 TuneUp Utilities 2014 (de-DE)  
 TuneUp Utilities Language Pack (de-DE) 
 TuneUp Utilities 2014   
 JavaFX 2.1.1    
 Java(TM) 6 Update 31  
 Java 7 Update 45  
 Adobe Flash Player 11.9.900.170  
 Adobe Reader 10.1.1 Adobe Reader out of Date!  
 Mozilla Firefox (26.0) 
 Mozilla Thunderbird (24.1.0) 
 Google Chrome 29.0.1547.62  
 Google Chrome 31.0.1650.63  
````````Process Check: objlist.exe by Laurent````````  
 Kaspersky Lab Kaspersky PURE 3.0 avp.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         


FRST:


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013 01
Ran by Saturn (administrator) on RAVENHOME on 30-12-2013 08:25:19
Running from C:\Users\Saturn\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Sonix) C:\Windows\vsnp2uvc.exe
() C:\Windows\System32\WTMKM.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Gainward Co.) C:\Program Files (x86)\EXPERTool\TBPANEL.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
() C:\Windows\tsnp2uvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Roccat GmbH) C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
( ) C:\Windows\System32\lxeccoms.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
() C:\Windows\System32\atwtusb.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Windows\System32\atwtusb.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Safari.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-04] (Realtek Semiconductor)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation)
HKLM\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix)
HKLM\...\Run: [MacrokeyManager] - C:\Windows\System32\WTMKM.exe [7325184 2011-04-12] ()
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix)
HKLM-x32\...\Run: [tsnp2uvc] - C:\Windows\tsnp2uvc.exe [320512 2009-12-11] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CloneCDTray] - C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.)
HKLM-x32\...\Run: [RoccatKova+] - C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe [539688 2011-03-17] (Roccat GmbH)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-04] (Geek Software GmbH)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3077528 2011-10-19] ()
HKCU\...\Run: [GAINWARD] - C:\Program Files (x86)\EXPERTool\TBPANEL.exe [2273608 2011-08-02] (Gainward Co.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5765A900BFCBCB01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKCU - {44219366-4C90-49F2-B082-3F7B238E29B9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=302398&p={searchTerms}
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
ShellExecuteHooks-x32:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 62.109.121.2 62.109.121.1

FireFox:
========
FF ProfilePath: C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default
FF Homepage: www.google.de
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.110.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Saturn\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Battlefield Heroes Updater - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\battlefieldheroespatcher@ea.com
FF Extension: ProxTube - Unblock YouTube - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\ich@maltegoetz.de
FF Extension: YouTube Unblocker - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\youtubeunblocker@unblocker.yt
FF Extension: Flagfox - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
FF Extension: Garmin Communicator - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: DownloadHelper - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Simple New Tab - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\snt@dotlabs.co.xpi
FF Extension: TinEye Reverse Image Search - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\tineye@ideeinc.com.xpi
FF Extension: Shockwave Flash Plugin Free - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{18f64064-a482-4fbf-8fd6-3c6e5806565a}.xpi
FF Extension: {43616d3f-8ae4-4351-9b52-74faeeb1a3dc} - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{43616d3f-8ae4-4351-9b52-74faeeb1a3dc}.xpi
FF Extension: Adblock Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Download Statusbar - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
FF Extension: Tab Mix Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll No File
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.486_0\plugin/npUrlAdvisor.dll No File
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.486_0\plugin/npVKPlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll No File
CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (YouTube) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0
CHR Extension: (bloomind ct deepdark) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\djolekdiiojehgfggcjckachfgkkdmjd\1_0
CHR Extension: (Chrome Toolbox (by Google)) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjccknnhdnkbanjilpjddjhmkghmachn\1.0.32_0
CHR Extension: (TinEye Reverse Image Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl\1.1.3_0
CHR Extension: (Safe Money) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0
CHR Extension: (Content Blocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.2.614_0
CHR Extension: (RealDownloader) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0
CHR Extension: (Virtual Keyboard) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.614_0
CHR Extension: (Google Wallet) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (YouTube Unblocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0
CHR Extension: (Gmail) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR Extension: (Anti-Banner) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0
CHR Extension: (Simple New Tab) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmgkeimkiojpjcoiiipekfjaopchhjga\1.0.0_0
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx
CHR StartMenuInternet: Google Chrome - C:\Users\Saturn\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
S3 DAUpdaterSvc; C:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-12-11] (BioWare)
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] ()
S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [248664 2013-09-12] (Garmin Ltd or its subsidiaries)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.)
S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-01-07] ( )
R2 lxec_device; C:\Windows\SysWow64\lxeccoms.exe [598696 2010-01-07] ( )
S2 MSSQL$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe [9150464 2005-05-03] (Microsoft Corporation)
S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [73728 2005-05-03] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4005936 2011-06-06] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-05] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2008-12-31] ()
S3 SQLAgent$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE [323584 2005-05-03] (Microsoft Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-30] (TuneUp Software)
S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
R2 WTService; C:\Windows\system32\atwtusb.exe [916992 2011-04-27] ()

==================== Drivers (Whitelisted) ====================

S3 AF9035HB; C:\Windows\System32\Drivers\AF9035HB.sys [907904 2010-05-15] (ITE Technologies         )
S3 busbcrw; C:\Windows\System32\Drivers\bucrw64.sys [25600 2006-10-27] (Brother Industries, Ltd.)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
R3 ElbyCDFL; C:\Windows\SysWow64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
S3 ezplay; C:\Windows\System32\Drivers\ezplay.sys [118400 2011-10-08] (VSO Software)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-18] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-10-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-15] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-07-15] (Kaspersky Lab ZAO)
R3 KovaPlusFltr; C:\Windows\System32\drivers\KovaPlusFltr.sys [15104 2010-01-25] (ROCCAT Development, Inc.)
R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2005-01-02] (INCA Internet Co., Ltd.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
S1 PCLEPCI; C:\Windows\SysWow64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-11-27] (Audials AG)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552512 2009-12-18] ()
S3 TBPanel; No ImagePath
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
R3 vhidmini; C:\Windows\System32\DRIVERS\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S1 bnqstsgk; \??\C:\Windows\system32\drivers\bnqstsgk.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 cpuz130; \??\C:\Users\Saturn\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
S1 dfhtpxsf; \??\C:\Windows\system32\drivers\dfhtpxsf.sys [x]
S3 dump_wmimmc; \??\c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S1 evkomlpb; \??\C:\Windows\system32\drivers\evkomlpb.sys [x]
S1 exghbnub; \??\C:\Windows\system32\drivers\exghbnub.sys [x]
S1 flnvtwiu; \??\C:\Windows\system32\drivers\flnvtwiu.sys [x]
S1 ggplayov; \??\C:\Windows\system32\drivers\ggplayov.sys [x]
S1 glhbzrdp; \??\C:\Windows\system32\drivers\glhbzrdp.sys [x]
S1 hjgequpo; \??\C:\Windows\system32\drivers\hjgequpo.sys [x]
S1 ibrmytkv; \??\C:\Windows\system32\drivers\ibrmytkv.sys [x]
S1 ihpczvzt; \??\C:\Windows\system32\drivers\ihpczvzt.sys [x]
S1 iwxgprso; \??\C:\Windows\system32\drivers\iwxgprso.sys [x]
S1 jhostfze; \??\C:\Windows\system32\drivers\jhostfze.sys [x]
S1 kiaqjrtf; \??\C:\Windows\system32\drivers\kiaqjrtf.sys [x]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-10-18] (Kaspersky Lab ZAO)
S1 kpqjothk; \??\C:\Windows\system32\drivers\kpqjothk.sys [x]
S1 mozosloe; \??\C:\Windows\system32\drivers\mozosloe.sys [x]
S1 mwtafrhe; \??\C:\Windows\system32\drivers\mwtafrhe.sys [x]
S1 nijxcfnj; \??\C:\Windows\system32\drivers\nijxcfnj.sys [x]
S1 njlwenqt; \??\C:\Windows\system32\drivers\njlwenqt.sys [x]
S1 nrmqgeaq; \??\C:\Windows\system32\drivers\nrmqgeaq.sys [x]
S1 olekorua; \??\C:\Windows\system32\drivers\olekorua.sys [x]
S1 pddbwrxt; \??\C:\Windows\system32\drivers\pddbwrxt.sys [x]
S1 pkijmgtn; \??\C:\Windows\system32\drivers\pkijmgtn.sys [x]
S1 ptvuibnd; \??\C:\Windows\system32\drivers\ptvuibnd.sys [x]
S1 qlnvkvlz; \??\C:\Windows\system32\drivers\qlnvkvlz.sys [x]
S1 qqfmmntb; \??\C:\Windows\system32\drivers\qqfmmntb.sys [x]
S1 qyyteedz; \??\C:\Windows\system32\drivers\qyyteedz.sys [x]
S1 reiphzej; \??\C:\Windows\system32\drivers\reiphzej.sys [x]
S1 rkispkye; \??\C:\Windows\system32\drivers\rkispkye.sys [x]
S1 rqxvktor; \??\C:\Windows\system32\drivers\rqxvktor.sys [x]
S1 rsnvucpt; \??\C:\Windows\system32\drivers\rsnvucpt.sys [x]
S1 sljolomf; \??\C:\Windows\system32\drivers\sljolomf.sys [x]
S1 tpioqxek; \??\C:\Windows\system32\drivers\tpioqxek.sys [x]
S1 trdhienr; \??\C:\Windows\system32\drivers\trdhienr.sys [x]
S1 txvztkiq; \??\C:\Windows\system32\drivers\txvztkiq.sys [x]
S1 tzjkmdvf; \??\C:\Windows\system32\drivers\tzjkmdvf.sys [x]
S1 uguzijuk; \??\C:\Windows\system32\drivers\uguzijuk.sys [x]
S1 vgrfszla; \??\C:\Windows\system32\drivers\vgrfszla.sys [x]
S1 vtxmuojc; \??\C:\Windows\system32\drivers\vtxmuojc.sys [x]
S1 wrsxqila; \??\C:\Windows\system32\drivers\wrsxqila.sys [x]
S1 xeshofoi; \??\C:\Windows\system32\drivers\xeshofoi.sys [x]
S1 xhbipmbk; \??\C:\Windows\system32\drivers\xhbipmbk.sys [x]
S1 ybmjedft; \??\C:\Windows\system32\drivers\ybmjedft.sys [x]
S1 ydnwlbze; \??\C:\Windows\system32\drivers\ydnwlbze.sys [x]
S1 yrxzjdal; \??\C:\Windows\system32\drivers\yrxzjdal.sys [x]
S1 yssdrnbz; \??\C:\Windows\system32\drivers\yssdrnbz.sys [x]
S1 yvzmfhna; \??\C:\Windows\system32\drivers\yvzmfhna.sys [x]
S1 zirtwuoe; \??\C:\Windows\system32\drivers\zirtwuoe.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-30 08:25 - 2013-12-30 08:25 - 00040673 _____ C:\Users\Saturn\Desktop\FRST.txt
2013-12-30 08:24 - 2013-12-30 08:24 - 00001196 _____ C:\Users\Saturn\Desktop\checkup.txt
2013-12-29 19:52 - 2013-12-29 20:09 - 00000022 _____ C:\Windows\S.dirmngr
2013-12-28 20:27 - 2013-12-28 20:32 - 00000000 ____D C:\Users\Saturn\Downloads\Lena
2013-12-28 20:20 - 2013-12-28 20:27 - 00000000 ____D C:\Users\Saturn\Downloads\Cosi
2013-12-28 15:21 - 2013-12-28 15:21 - 00000000 ____D C:\Windows\ERUNT
2013-12-27 18:08 - 2013-12-27 18:08 - 00000000 ____D C:\ffmpeg
2013-12-27 17:33 - 2013-12-27 17:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-26 23:43 - 2013-12-29 20:09 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 23:43 - 2013-12-29 20:09 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 19:44 - 2013-12-26 19:44 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-12-26 19:41 - 2013-12-29 19:53 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 19:41 - 2013-12-29 19:53 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 19:36 - 2013-12-26 19:36 - 00488320 _____ C:\Windows\Minidump\122613-27518-01.dmp
2013-12-26 17:50 - 2013-12-26 17:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-26 13:43 - 2013-12-30 08:25 - 01931302 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe
2013-12-26 13:43 - 2013-12-30 08:25 - 00000000 ____D C:\FRST
2013-12-26 13:33 - 2013-12-28 15:13 - 00000000 ____D C:\AdwCleaner
2013-12-23 15:47 - 2013-12-23 15:48 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u
2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses
2013-12-23 15:33 - 2013-12-23 15:39 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler
2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2013-12-23 15:32 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D
2013-12-22 14:51 - 2013-12-22 15:02 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate
2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights
2013-12-21 18:35 - 2013-12-21 18:37 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2
2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url
2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url
2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log
2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url
2013-12-18 16:28 - 2013-09-16 00:03 - 00361119 _____ (Farbar) C:\Windows\mod_frst.exe
2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url
2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014
2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014
2013-12-15 20:04 - 2013-10-30 10:45 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-12-15 20:04 - 2013-10-30 10:45 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll
2013-12-15 20:03 - 2013-12-15 20:04 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2013-12-15 20:03 - 2013-10-30 10:45 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-12-15 20:03 - 2013-10-30 10:45 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-15 20:03 - 2013-10-30 10:45 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
2013-12-15 20:02 - 2013-12-15 20:14 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories
2013-12-15 12:06 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-15 12:06 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-15 12:06 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-15 12:06 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-15 12:04 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-15 12:04 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-15 12:04 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 12:04 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-15 12:04 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-15 12:04 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-15 12:04 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-15 12:04 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-15 12:04 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-15 12:04 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-15 12:04 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-15 12:04 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-15 12:04 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-15 12:04 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-15 12:04 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-15 12:04 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-15 12:04 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-15 12:04 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-15 12:04 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-15 12:04 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-15 12:04 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-15 12:04 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-15 12:04 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-15 12:04 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-15 12:04 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-15 12:04 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-15 12:04 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-15 12:04 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-15 12:04 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-15 12:04 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-15 12:04 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-12 20:35 - 2013-12-29 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn
2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-12 17:48 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 17:48 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 17:48 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 17:48 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 17:48 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 17:48 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 17:48 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 17:48 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 17:48 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 17:48 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 17:48 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 17:48 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 17:48 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 17:48 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 17:48 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 17:48 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 17:48 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 17:48 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 17:48 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url
2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe
2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot
2013-12-07 20:26 - 2013-12-07 21:31 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part
2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp
2013-12-07 14:06 - 2013-12-07 20:26 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar
2013-12-07 14:03 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar
2013-12-07 13:59 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar
2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url
2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe
2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf
2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk
2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk
2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet
2013-12-03 19:58 - 2013-12-03 22:04 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet
2013-12-03 19:52 - 2013-12-03 19:53 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2013-12-03 19:51 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-03 19:51 - 2013-12-03 19:55 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2013-12-03 19:50 - 2013-12-03 19:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion
2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe
2013-12-03 19:17 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation
2013-12-03 19:15 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-03 19:15 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-03 19:14 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA
2013-12-03 18:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url
2013-12-01 19:55 - 2013-12-11 21:58 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server
2013-12-01 19:53 - 2013-12-01 19:52 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar
2013-11-30 17:53 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar
2013-11-30 17:50 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar
2013-11-30 17:46 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar
2013-11-30 17:43 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar
2013-11-30 17:40 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar
2013-11-30 17:37 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar
2013-11-30 17:33 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar
2013-11-30 17:30 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar
2013-11-30 17:27 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar
2013-11-30 17:24 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar
2013-11-30 17:20 - 2013-11-30 17:23 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar
2013-11-30 17:17 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar
2013-11-30 17:14 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar
2013-11-30 17:12 - 2013-11-30 17:14 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar
2013-11-30 17:09 - 2013-11-30 17:12 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar
2013-11-30 17:06 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar
2013-11-30 17:02 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar
2013-11-30 16:59 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar
2013-11-30 16:56 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar
2013-11-30 16:53 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar
2013-11-30 16:49 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar
2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar
2013-11-30 16:46 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar
2013-11-30 16:43 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar
2013-11-30 16:40 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar
2013-11-30 16:36 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar
2013-11-30 16:33 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar
2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar

==================== One Month Modified Files and Folders =======

2013-12-30 08:25 - 2013-12-30 08:25 - 00040673 _____ C:\Users\Saturn\Desktop\FRST.txt
2013-12-30 08:25 - 2013-12-26 13:43 - 01931302 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe
2013-12-30 08:25 - 2013-12-26 13:43 - 00000000 ____D C:\FRST
2013-12-30 08:24 - 2013-12-30 08:24 - 00001196 _____ C:\Users\Saturn\Desktop\checkup.txt
2013-12-30 08:13 - 2012-04-07 18:18 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-30 07:37 - 2012-06-17 13:57 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA.job
2013-12-30 07:34 - 2012-04-01 20:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-30 06:36 - 2013-05-10 16:51 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-12-30 05:16 - 2010-04-06 19:01 - 01097198 _____ C:\Windows\WindowsUpdate.log
2013-12-30 02:00 - 2010-03-06 14:16 - 00000000 ____D C:\Users\Saturn\AppData\Local\Adobe
2013-12-29 20:40 - 2011-06-30 11:00 - 00000000 ____D C:\Users\Saturn\AppData\Local\PMB Files
2013-12-29 20:37 - 2012-06-17 13:57 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core.job
2013-12-29 20:19 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-29 20:19 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-29 20:11 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi
2013-12-29 20:11 - 2009-07-14 05:51 - 27383517 _____ C:\Windows\setupact.log
2013-12-29 20:11 - 2006-11-02 13:34 - 00000292 _____ C:\Windows\win.ini
2013-12-29 20:09 - 2013-12-29 19:52 - 00000022 _____ C:\Windows\S.dirmngr
2013-12-29 20:09 - 2013-12-26 23:43 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-29 20:09 - 2013-12-26 23:43 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-29 20:09 - 2012-04-07 18:18 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-29 20:09 - 2009-09-07 15:11 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-29 20:09 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-29 19:56 - 2012-06-15 17:10 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-12-29 19:53 - 2013-12-26 19:41 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-29 19:53 - 2013-12-26 19:41 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-29 12:25 - 2011-10-25 08:16 - 00000000 ____D C:\Users\Saturn\Desktop\Rollenspiele
2013-12-29 11:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-29 11:00 - 2013-07-23 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-28 20:44 - 2011-02-28 17:09 - 01183744 ___SH C:\Users\Saturn\Thumbs.db
2013-12-28 20:32 - 2013-12-28 20:27 - 00000000 ____D C:\Users\Saturn\Downloads\Lena
2013-12-28 20:27 - 2013-12-28 20:20 - 00000000 ____D C:\Users\Saturn\Downloads\Cosi
2013-12-28 20:19 - 2011-08-26 20:42 - 00242064 ____H C:\Windows\SysWOW64\mlfcache.dat
2013-12-28 20:18 - 2010-05-28 22:36 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Audacity
2013-12-28 16:32 - 2013-01-02 19:22 - 00000000 ____D C:\JDownloader 2
2013-12-28 16:32 - 2012-03-13 13:25 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner
2013-12-28 16:25 - 2012-04-06 18:05 - 00000000 ____D C:\Users\Saturn\Desktop\filme
2013-12-28 15:21 - 2013-12-28 15:21 - 00000000 ____D C:\Windows\ERUNT
2013-12-28 15:13 - 2013-12-26 13:33 - 00000000 ____D C:\AdwCleaner
2013-12-28 10:27 - 2010-04-06 20:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\vlc
2013-12-28 09:21 - 2010-04-06 18:33 - 00937318 _____ C:\Windows\PFRO.log
2013-12-27 18:08 - 2013-12-27 18:08 - 00000000 ____D C:\ffmpeg
2013-12-27 17:33 - 2013-12-27 17:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-27 11:24 - 2011-05-04 13:57 - 00000000 ____D C:\Qoobox
2013-12-27 11:22 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-27 11:21 - 2010-04-06 18:20 - 00000000 ____D C:\Users\Saturn
2013-12-26 19:44 - 2013-12-26 19:44 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-12-26 19:44 - 2011-05-05 15:50 - 00000000 ____D C:\Program Files\CCleaner
2013-12-26 19:36 - 2013-12-26 19:36 - 00488320 _____ C:\Windows\Minidump\122613-27518-01.dmp
2013-12-26 19:36 - 2011-01-11 01:00 - 738757377 _____ C:\Windows\MEMORY.DMP
2013-12-26 19:36 - 2011-01-11 01:00 - 00000000 ____D C:\Windows\Minidump
2013-12-26 17:50 - 2013-12-26 17:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-26 13:34 - 2013-06-13 17:19 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Common
2013-12-23 15:48 - 2013-12-23 15:47 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u
2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses
2013-12-23 15:39 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler
2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2013-12-23 15:33 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D
2013-12-23 15:32 - 2013-09-14 14:14 - 00000000 ____D C:\ProgramData\Package Cache
2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\ProgramData\RapidSolution
2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\Program Files (x86)\Audials
2013-12-23 15:29 - 2013-06-13 17:15 - 00000000 ____D C:\Users\Saturn\AppData\Local\RapidSolution
2013-12-22 23:51 - 2013-05-30 11:17 - 00000000 ____D C:\Users\Saturn\Desktop\lustige Bilder
2013-12-22 15:02 - 2013-12-22 14:51 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate
2013-12-22 15:01 - 2011-10-10 18:59 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI
2013-12-22 14:39 - 2010-04-08 16:47 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights
2013-12-21 18:37 - 2013-12-21 18:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2
2013-12-21 18:34 - 2010-04-06 20:18 - 00558241 _____ C:\Windows\DirectX.log
2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url
2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url
2013-12-19 20:54 - 2009-07-14 18:58 - 00728016 _____ C:\Windows\system32\perfh007.dat
2013-12-19 20:54 - 2009-07-14 18:58 - 00162238 _____ C:\Windows\system32\perfc007.dat
2013-12-19 20:54 - 2009-07-14 06:13 - 01702976 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Origin
2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Local\Origin
2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\ProgramData\Origin
2013-12-19 18:20 - 2011-10-26 09:42 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log
2013-12-19 18:18 - 2013-04-20 19:08 - 00000000 ____D C:\Users\Saturn\Documents\BioWare
2013-12-19 18:16 - 2012-04-22 22:24 - 00002216 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 18:15 - 2012-04-07 18:18 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url
2013-12-19 10:20 - 2012-08-04 17:38 - 00000000 ____D C:\Users\Saturn\Desktop\Canon Programme
2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url
2013-12-17 18:53 - 2013-10-25 08:35 - 00000000 ____D C:\Users\Saturn\Desktop\Lisa Master
2013-12-17 18:51 - 2013-06-02 21:22 - 00000000 ____D C:\Users\Saturn\Desktop\Stick zeug
2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-12-16 19:59 - 2013-08-17 13:01 - 00000000 ____D C:\Windows\system32\MRT
2013-12-16 19:56 - 2010-04-15 14:07 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-16 00:29 - 2009-09-08 09:08 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-12-16 00:28 - 2012-08-04 17:27 - 00000000 ____D C:\Program Files (x86)\Canon
2013-12-16 00:28 - 2010-04-16 13:02 - 00000000 ____D C:\Program Files (x86)\Trillian
2013-12-16 00:26 - 2009-09-07 15:02 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-15 22:09 - 2010-04-21 15:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-15 20:53 - 2010-03-05 19:23 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Mozilla
2013-12-15 20:32 - 2012-06-17 13:57 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA
2013-12-15 20:32 - 2012-06-17 13:57 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core
2013-12-15 20:14 - 2013-12-15 20:02 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-12-15 20:14 - 2012-02-25 09:52 - 00003756 _____ C:\Windows\System32\Tasks\Real Player-Online-Aktualisierungsprogramm
2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014
2013-12-15 20:06 - 2012-02-25 09:43 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014
2013-12-15 20:04 - 2013-12-15 20:03 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2013-12-15 20:03 - 2012-02-25 09:43 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\TuneUp Software
2013-12-15 17:02 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-15 16:25 - 2009-07-14 05:45 - 05459720 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories
2013-12-15 12:06 - 2009-09-08 08:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn
2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-12 18:00 - 2012-09-02 22:09 - 00000000 ____D C:\Users\Saturn\Documents\stories
2013-12-11 21:58 - 2013-12-01 19:55 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server
2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url
2013-12-10 20:34 - 2012-04-01 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-10 20:34 - 2012-04-01 20:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-10 20:34 - 2011-05-14 10:43 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-10 20:27 - 2010-04-27 13:49 - 00000000 ____D C:\Users\Saturn\Documents\My Games
2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe
2013-12-08 17:35 - 2013-08-20 20:00 - 00000000 ____D C:\Users\Saturn\Desktop\2011-09-26
2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot
2013-12-07 21:31 - 2013-12-07 20:26 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part
2013-12-07 20:26 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar
2013-12-07 17:00 - 2010-05-11 21:50 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Skype
2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp
2013-12-07 15:08 - 2012-04-07 18:18 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-07 15:08 - 2012-04-07 18:18 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-07 14:06 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar
2013-12-07 14:03 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar
2013-12-07 13:59 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar
2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url
2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe
2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf
2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk
2013-12-05 19:50 - 2010-12-05 20:42 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-12-03 22:04 - 2013-12-03 19:58 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013
2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk
2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet
2013-12-03 19:57 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-03 19:57 - 2011-10-10 19:11 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2013-12-03 19:57 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-12-03 19:56 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2013-12-03 19:55 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2013-12-03 19:53 - 2013-12-03 19:52 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2013-12-03 19:51 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-12-03 19:50 - 2011-07-26 01:04 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-12-03 19:49 - 2010-05-18 22:36 - 01676320 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion
2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe
2013-12-03 19:18 - 2013-12-03 19:17 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation
2013-12-03 19:18 - 2013-12-03 19:14 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA
2013-12-03 19:18 - 2011-10-28 12:16 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-03 19:15 - 2011-10-28 12:17 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-03 19:15 - 2011-10-28 12:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-03 19:05 - 2010-04-06 19:15 - 00001425 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-03 18:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-03 18:51 - 2013-11-26 17:31 - 00024584 _____ C:\Windows\IE11_main.log
2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url
2013-12-01 19:52 - 2013-12-01 19:53 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar
2013-12-01 18:24 - 2013-05-24 17:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\.minecraft
2013-11-30 20:53 - 2013-01-08 19:22 - 00000000 ____D C:\Users\Saturn\Downloads\mov-world.net
2013-11-30 17:53 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar
2013-11-30 17:50 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar
2013-11-30 17:46 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar
2013-11-30 17:43 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar
2013-11-30 17:40 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar
2013-11-30 17:37 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar
2013-11-30 17:33 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar
2013-11-30 17:30 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar
2013-11-30 17:27 - 2013-11-30 17:24 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar
2013-11-30 17:23 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar
2013-11-30 17:20 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar
2013-11-30 17:17 - 2013-11-30 17:14 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar
2013-11-30 17:14 - 2013-11-30 17:12 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar
2013-11-30 17:12 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar
2013-11-30 17:09 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar
2013-11-30 17:06 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar
2013-11-30 17:02 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar
2013-11-30 16:59 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar
2013-11-30 16:56 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar
2013-11-30 16:53 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar
2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar
2013-11-30 16:49 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar
2013-11-30 16:46 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar
2013-11-30 16:43 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar
2013-11-30 16:40 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar
2013-11-30 16:36 - 2013-11-30 16:33 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar
2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar
2013-11-30 15:31 - 2013-11-28 19:37 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part09.rar

Files to move or delete:
====================
C:\ProgramData\hash.dat
C:\Users\Saturn\DoorKickersAlpha_0031_Setup.exe
C:\Users\Saturn\jagex_runescape_preferences.dat
C:\Users\Saturn\jagex_runescape_preferences2.dat
C:\Users\Saturn\jagex__preferences3.dat
C:\Users\Saturn\RocketDock-v1.3.5.exe
C:\Users\Saturn\setup2.5.0.exe


Some content of TEMP:
====================
C:\Users\Saturn\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-30 04:51

==================== End Of Log ============================
         
--- --- ---

--- --- ---




Leider besteht das Problem zumindest in Chrome weiterhin. In Firefox ist es weg.

Geändert von Ravenwing (30.12.2013 um 08:34 Uhr) Grund: genauere Beschreibung

Alt 30.12.2013, 18:04   #11
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



Chrome deinstallieren, keine Daten behalten, neu installieren.

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.


frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 30.12.2013, 22:08   #12
Ravenwing
 
Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



Alles wie gefordert gemacht,

hier das neue FRST-log file:


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013 01
Ran by Saturn (administrator) on RAVENHOME on 30-12-2013 21:58:05
Running from C:\Users\Saturn\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
( ) C:\Windows\System32\lxeccoms.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Windows\System32\atwtusb.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Windows\System32\atwtusb.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
() C:\Windows\System32\WTMKM.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Safari.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Safari.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-04] (Realtek Semiconductor)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation)
HKLM\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix)
HKLM\...\Run: [MacrokeyManager] - C:\Windows\System32\WTMKM.exe [7325184 2011-04-12] ()
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [675840 2008-08-01] (Sonix)
HKLM-x32\...\Run: [tsnp2uvc] - C:\Windows\tsnp2uvc.exe [320512 2009-12-11] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CloneCDTray] - C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.)
HKLM-x32\...\Run: [RoccatKova+] - C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe [539688 2011-03-17] (Roccat GmbH)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-04] (Geek Software GmbH)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3077528 2011-10-19] ()
HKCU\...\Run: [GAINWARD] - C:\Program Files (x86)\EXPERTool\TBPANEL.exe [2273608 2011-08-02] (Gainward Co.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5765A900BFCBCB01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKCU - {44219366-4C90-49F2-B082-3F7B238E29B9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=302398&p={searchTerms}
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
ShellExecuteHooks-x32:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 62.109.121.2 62.109.121.1

FireFox:
========
FF ProfilePath: C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default
FF Homepage: www.google.de
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.110.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Saturn\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Saturn\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Saturn\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Battlefield Heroes Updater - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\battlefieldheroespatcher@ea.com
FF Extension: ProxTube - Unblock YouTube - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\ich@maltegoetz.de
FF Extension: YouTube Unblocker - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\youtubeunblocker@unblocker.yt
FF Extension: Flagfox - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
FF Extension: Garmin Communicator - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: DownloadHelper - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Simple New Tab - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\snt@dotlabs.co.xpi
FF Extension: TinEye Reverse Image Search - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\tineye@ideeinc.com.xpi
FF Extension: Shockwave Flash Plugin Free - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{18f64064-a482-4fbf-8fd6-3c6e5806565a}.xpi
FF Extension: {43616d3f-8ae4-4351-9b52-74faeeb1a3dc} - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{43616d3f-8ae4-4351-9b52-74faeeb1a3dc}.xpi
FF Extension: Adblock Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Download Statusbar - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
FF Extension: Tab Mix Plus - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\8ta2xjux.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

Chrome: 
=======
CHR Extension: (Docs) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0
CHR Extension: (bloomind ct deepdark) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\djolekdiiojehgfggcjckachfgkkdmjd\1_0
CHR Extension: (Chrome Toolbox (by Google)) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjccknnhdnkbanjilpjddjhmkghmachn\1.0.32_0
CHR Extension: (TinEye Reverse Image Search) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl\1.1.3_0
CHR Extension: (Safe Money) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0
CHR Extension: (Content Blocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.2.614_0
CHR Extension: (RealDownloader) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0
CHR Extension: (Virtual Keyboard) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.614_0
CHR Extension: (Google Wallet) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (YouTube Unblocker) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0
CHR Extension: (Gmail) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR Extension: (Anti-Banner) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0
CHR Extension: (Simple New Tab) - C:\Users\Saturn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmgkeimkiojpjcoiiipekfjaopchhjga\1.0.0_0
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-18] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
S3 DAUpdaterSvc; C:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-12-11] (BioWare)
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] ()
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [248664 2013-09-12] (Garmin Ltd or its subsidiaries)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.)
S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-01-07] ( )
R2 lxec_device; C:\Windows\SysWow64\lxeccoms.exe [598696 2010-01-07] ( )
S2 MSSQL$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe [9150464 2005-05-03] (Microsoft Corporation)
S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [73728 2005-05-03] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4005936 2011-06-06] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-05] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2008-12-31] ()
S3 SQLAgent$PINNACLESYS; C:\Program Files (x86)\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE [323584 2005-05-03] (Microsoft Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-30] (TuneUp Software)
S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
R2 WTService; C:\Windows\system32\atwtusb.exe [916992 2011-04-27] ()

==================== Drivers (Whitelisted) ====================

S3 AF9035HB; C:\Windows\System32\Drivers\AF9035HB.sys [907904 2010-05-15] (ITE Technologies         )
S3 busbcrw; C:\Windows\System32\Drivers\bucrw64.sys [25600 2006-10-27] (Brother Industries, Ltd.)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
R3 ElbyCDFL; C:\Windows\SysWow64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
S3 ezplay; C:\Windows\System32\Drivers\ezplay.sys [118400 2011-10-08] (VSO Software)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-18] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-10-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-18] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-15] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-07-15] (Kaspersky Lab ZAO)
R3 KovaPlusFltr; C:\Windows\System32\drivers\KovaPlusFltr.sys [15104 2010-01-25] (ROCCAT Development, Inc.)
R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2005-01-02] (INCA Internet Co., Ltd.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
S1 PCLEPCI; C:\Windows\SysWow64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH)
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-11-27] (Audials AG)
S3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552512 2009-12-18] ()
S3 TBPanel; No ImagePath
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
R3 vhidmini; C:\Windows\System32\DRIVERS\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S1 bnqstsgk; \??\C:\Windows\system32\drivers\bnqstsgk.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 cpuz130; \??\C:\Users\Saturn\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
S1 dfhtpxsf; \??\C:\Windows\system32\drivers\dfhtpxsf.sys [x]
S3 dump_wmimmc; \??\c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S1 evkomlpb; \??\C:\Windows\system32\drivers\evkomlpb.sys [x]
S1 exghbnub; \??\C:\Windows\system32\drivers\exghbnub.sys [x]
S1 flnvtwiu; \??\C:\Windows\system32\drivers\flnvtwiu.sys [x]
S1 ggplayov; \??\C:\Windows\system32\drivers\ggplayov.sys [x]
S1 glhbzrdp; \??\C:\Windows\system32\drivers\glhbzrdp.sys [x]
S1 hjgequpo; \??\C:\Windows\system32\drivers\hjgequpo.sys [x]
S1 ibrmytkv; \??\C:\Windows\system32\drivers\ibrmytkv.sys [x]
S1 ihpczvzt; \??\C:\Windows\system32\drivers\ihpczvzt.sys [x]
S1 iwxgprso; \??\C:\Windows\system32\drivers\iwxgprso.sys [x]
S1 jhostfze; \??\C:\Windows\system32\drivers\jhostfze.sys [x]
S1 kiaqjrtf; \??\C:\Windows\system32\drivers\kiaqjrtf.sys [x]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-10-18] (Kaspersky Lab ZAO)
S1 kpqjothk; \??\C:\Windows\system32\drivers\kpqjothk.sys [x]
S1 mozosloe; \??\C:\Windows\system32\drivers\mozosloe.sys [x]
S1 mwtafrhe; \??\C:\Windows\system32\drivers\mwtafrhe.sys [x]
S1 nijxcfnj; \??\C:\Windows\system32\drivers\nijxcfnj.sys [x]
S1 njlwenqt; \??\C:\Windows\system32\drivers\njlwenqt.sys [x]
S1 nrmqgeaq; \??\C:\Windows\system32\drivers\nrmqgeaq.sys [x]
S1 olekorua; \??\C:\Windows\system32\drivers\olekorua.sys [x]
S1 pddbwrxt; \??\C:\Windows\system32\drivers\pddbwrxt.sys [x]
S1 pkijmgtn; \??\C:\Windows\system32\drivers\pkijmgtn.sys [x]
S1 ptvuibnd; \??\C:\Windows\system32\drivers\ptvuibnd.sys [x]
S1 qlnvkvlz; \??\C:\Windows\system32\drivers\qlnvkvlz.sys [x]
S1 qqfmmntb; \??\C:\Windows\system32\drivers\qqfmmntb.sys [x]
S1 qyyteedz; \??\C:\Windows\system32\drivers\qyyteedz.sys [x]
S1 reiphzej; \??\C:\Windows\system32\drivers\reiphzej.sys [x]
S1 rkispkye; \??\C:\Windows\system32\drivers\rkispkye.sys [x]
S1 rqxvktor; \??\C:\Windows\system32\drivers\rqxvktor.sys [x]
S1 rsnvucpt; \??\C:\Windows\system32\drivers\rsnvucpt.sys [x]
S1 sljolomf; \??\C:\Windows\system32\drivers\sljolomf.sys [x]
S1 tpioqxek; \??\C:\Windows\system32\drivers\tpioqxek.sys [x]
S1 trdhienr; \??\C:\Windows\system32\drivers\trdhienr.sys [x]
S1 txvztkiq; \??\C:\Windows\system32\drivers\txvztkiq.sys [x]
S1 tzjkmdvf; \??\C:\Windows\system32\drivers\tzjkmdvf.sys [x]
S1 uguzijuk; \??\C:\Windows\system32\drivers\uguzijuk.sys [x]
S1 vgrfszla; \??\C:\Windows\system32\drivers\vgrfszla.sys [x]
S1 vtxmuojc; \??\C:\Windows\system32\drivers\vtxmuojc.sys [x]
S1 wrsxqila; \??\C:\Windows\system32\drivers\wrsxqila.sys [x]
S1 xeshofoi; \??\C:\Windows\system32\drivers\xeshofoi.sys [x]
S1 xhbipmbk; \??\C:\Windows\system32\drivers\xhbipmbk.sys [x]
S1 ybmjedft; \??\C:\Windows\system32\drivers\ybmjedft.sys [x]
S1 ydnwlbze; \??\C:\Windows\system32\drivers\ydnwlbze.sys [x]
S1 yrxzjdal; \??\C:\Windows\system32\drivers\yrxzjdal.sys [x]
S1 yssdrnbz; \??\C:\Windows\system32\drivers\yssdrnbz.sys [x]
S1 yvzmfhna; \??\C:\Windows\system32\drivers\yvzmfhna.sys [x]
S1 zirtwuoe; \??\C:\Windows\system32\drivers\zirtwuoe.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-30 21:58 - 2013-12-30 21:58 - 00035680 _____ C:\Users\Saturn\Desktop\FRST.txt
2013-12-30 21:50 - 2013-12-30 21:50 - 00819144 _____ (Google Inc.) C:\Users\Saturn\Desktop\chrome_installer_31.0.1650.63.exe
2013-12-30 21:49 - 2013-12-30 21:49 - 00448512 _____ (OldTimer Tools) C:\Users\Saturn\Desktop\TFC.exe
2013-12-30 21:40 - 2013-12-30 21:40 - 00000022 _____ C:\Windows\S.dirmngr
2013-12-30 12:24 - 2013-12-30 12:25 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner (4)
2013-12-28 20:27 - 2013-12-28 20:32 - 00000000 ____D C:\Users\Saturn\Downloads\Lena
2013-12-28 20:20 - 2013-12-28 20:27 - 00000000 ____D C:\Users\Saturn\Downloads\Cosi
2013-12-28 15:21 - 2013-12-28 15:21 - 00000000 ____D C:\Windows\ERUNT
2013-12-27 18:08 - 2013-12-27 18:08 - 00000000 ____D C:\ffmpeg
2013-12-27 17:33 - 2013-12-27 17:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-26 23:43 - 2013-12-29 20:09 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 23:43 - 2013-12-29 20:09 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 19:44 - 2013-12-26 19:44 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-12-26 19:41 - 2013-12-30 21:47 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 19:41 - 2013-12-30 21:47 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-26 19:36 - 2013-12-26 19:36 - 00488320 _____ C:\Windows\Minidump\122613-27518-01.dmp
2013-12-26 17:50 - 2013-12-26 17:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-26 13:43 - 2013-12-30 08:25 - 01931302 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe
2013-12-26 13:43 - 2013-12-30 08:25 - 00000000 ____D C:\FRST
2013-12-26 13:33 - 2013-12-28 15:13 - 00000000 ____D C:\AdwCleaner
2013-12-23 15:47 - 2013-12-23 15:48 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u
2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses
2013-12-23 15:33 - 2013-12-23 15:39 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler
2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2013-12-23 15:32 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D
2013-12-22 14:51 - 2013-12-22 15:02 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate
2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights
2013-12-21 18:35 - 2013-12-21 18:37 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2
2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url
2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url
2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log
2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url
2013-12-18 16:28 - 2013-09-16 00:03 - 00361119 _____ (Farbar) C:\Windows\mod_frst.exe
2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url
2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014
2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014
2013-12-15 20:04 - 2013-10-30 10:45 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-12-15 20:04 - 2013-10-30 10:45 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll
2013-12-15 20:03 - 2013-12-15 20:04 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2013-12-15 20:03 - 2013-10-30 10:45 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-12-15 20:03 - 2013-10-30 10:45 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-15 20:03 - 2013-10-30 10:45 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
2013-12-15 20:02 - 2013-12-15 20:14 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories
2013-12-15 12:06 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-15 12:06 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-15 12:06 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-15 12:06 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-15 12:04 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-15 12:04 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-15 12:04 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 12:04 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-15 12:04 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-15 12:04 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-15 12:04 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-15 12:04 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-15 12:04 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-15 12:04 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-15 12:04 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-15 12:04 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-15 12:04 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-15 12:04 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-15 12:04 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-15 12:04 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-15 12:04 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-15 12:04 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-15 12:04 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-15 12:04 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-15 12:04 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-15 12:04 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-15 12:04 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-15 12:04 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-15 12:04 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-15 12:04 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-15 12:04 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-15 12:04 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-15 12:04 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-15 12:04 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-15 12:04 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-12 20:35 - 2013-12-30 21:47 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn
2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-12 17:48 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 17:48 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 17:48 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 17:48 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 17:48 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 17:48 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 17:48 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 17:48 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 17:48 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 17:48 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 17:48 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 17:48 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 17:48 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 17:48 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 17:48 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 17:48 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 17:48 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 17:48 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 17:48 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url
2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe
2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot
2013-12-07 20:26 - 2013-12-07 21:31 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part
2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp
2013-12-07 14:06 - 2013-12-07 20:26 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar
2013-12-07 14:03 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar
2013-12-07 13:59 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar
2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url
2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe
2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf
2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk
2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk
2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet
2013-12-03 19:58 - 2013-12-03 22:04 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet
2013-12-03 19:52 - 2013-12-03 19:53 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2013-12-03 19:51 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-03 19:51 - 2013-12-03 19:55 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2013-12-03 19:50 - 2013-12-03 19:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion
2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe
2013-12-03 19:17 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation
2013-12-03 19:15 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-03 19:15 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-03 19:14 - 2013-12-03 19:18 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA
2013-12-03 18:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url
2013-12-01 19:55 - 2013-12-11 21:58 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server
2013-12-01 19:53 - 2013-12-01 19:52 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar
2013-11-30 17:53 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar
2013-11-30 17:50 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar
2013-11-30 17:46 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar
2013-11-30 17:43 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar
2013-11-30 17:40 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar
2013-11-30 17:37 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar
2013-11-30 17:33 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar
2013-11-30 17:30 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar
2013-11-30 17:27 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar
2013-11-30 17:24 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar
2013-11-30 17:20 - 2013-11-30 17:23 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar
2013-11-30 17:17 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar
2013-11-30 17:14 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar
2013-11-30 17:12 - 2013-11-30 17:14 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar
2013-11-30 17:09 - 2013-11-30 17:12 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar
2013-11-30 17:06 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar
2013-11-30 17:02 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar
2013-11-30 16:59 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar
2013-11-30 16:56 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar
2013-11-30 16:53 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar
2013-11-30 16:49 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar
2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar
2013-11-30 16:46 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar
2013-11-30 16:43 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar
2013-11-30 16:40 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar
2013-11-30 16:36 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar
2013-11-30 16:33 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar
2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar

==================== One Month Modified Files and Folders =======

2013-12-30 21:58 - 2013-12-30 21:58 - 00035680 _____ C:\Users\Saturn\Desktop\FRST.txt
2013-12-30 21:56 - 2011-06-30 11:00 - 00000000 ____D C:\Users\Saturn\AppData\Local\PMB Files
2013-12-30 21:55 - 2013-05-10 16:51 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-12-30 21:54 - 2012-04-07 18:18 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-30 21:50 - 2013-12-30 21:50 - 00819144 _____ (Google Inc.) C:\Users\Saturn\Desktop\chrome_installer_31.0.1650.63.exe
2013-12-30 21:49 - 2013-12-30 21:49 - 00448512 _____ (OldTimer Tools) C:\Users\Saturn\Desktop\TFC.exe
2013-12-30 21:48 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-30 21:48 - 2010-04-06 18:19 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-30 21:47 - 2013-12-26 19:41 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-30 21:47 - 2013-12-26 19:41 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-30 21:47 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi
2013-12-30 21:47 - 2012-04-07 18:18 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-30 21:40 - 2013-12-30 21:40 - 00000022 _____ C:\Windows\S.dirmngr
2013-12-30 21:40 - 2009-09-07 15:11 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-30 21:40 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-30 21:40 - 2009-07-14 05:51 - 27653349 _____ C:\Windows\setupact.log
2013-12-30 21:40 - 2006-11-02 13:34 - 00000292 _____ C:\Windows\win.ini
2013-12-30 12:26 - 2010-04-06 19:01 - 01112996 _____ C:\Windows\WindowsUpdate.log
2013-12-30 12:25 - 2013-12-30 12:24 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner (4)
2013-12-30 08:38 - 2010-04-06 18:33 - 00938152 _____ C:\Windows\PFRO.log
2013-12-30 08:34 - 2012-04-01 20:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-30 08:25 - 2013-12-26 13:43 - 01931302 _____ (Farbar) C:\Users\Saturn\Desktop\FRST64.exe
2013-12-30 08:25 - 2013-12-26 13:43 - 00000000 ____D C:\FRST
2013-12-30 08:13 - 2012-04-07 18:18 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-30 07:37 - 2012-06-17 13:57 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA.job
2013-12-30 02:00 - 2010-03-06 14:16 - 00000000 ____D C:\Users\Saturn\AppData\Local\Adobe
2013-12-29 20:37 - 2012-06-17 13:57 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core.job
2013-12-29 20:09 - 2013-12-26 23:43 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-29 20:09 - 2013-12-26 23:43 - 00003212 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2370623705-2617329015-605871245-1000
2013-12-29 19:56 - 2012-06-15 17:10 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-12-29 12:25 - 2011-10-25 08:16 - 00000000 ____D C:\Users\Saturn\Desktop\Rollenspiele
2013-12-29 11:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-29 11:00 - 2013-07-23 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-28 20:44 - 2011-02-28 17:09 - 01183744 ___SH C:\Users\Saturn\Thumbs.db
2013-12-28 20:32 - 2013-12-28 20:27 - 00000000 ____D C:\Users\Saturn\Downloads\Lena
2013-12-28 20:27 - 2013-12-28 20:20 - 00000000 ____D C:\Users\Saturn\Downloads\Cosi
2013-12-28 20:19 - 2011-08-26 20:42 - 00242064 ____H C:\Windows\SysWOW64\mlfcache.dat
2013-12-28 20:18 - 2010-05-28 22:36 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Audacity
2013-12-28 16:32 - 2013-01-02 19:22 - 00000000 ____D C:\JDownloader 2
2013-12-28 16:32 - 2012-03-13 13:25 - 00000000 ____D C:\Users\Saturn\Desktop\Neuer Ordner
2013-12-28 16:25 - 2012-04-06 18:05 - 00000000 ____D C:\Users\Saturn\Desktop\filme
2013-12-28 15:21 - 2013-12-28 15:21 - 00000000 ____D C:\Windows\ERUNT
2013-12-28 15:13 - 2013-12-26 13:33 - 00000000 ____D C:\AdwCleaner
2013-12-28 10:27 - 2010-04-06 20:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\vlc
2013-12-27 18:08 - 2013-12-27 18:08 - 00000000 ____D C:\ffmpeg
2013-12-27 17:33 - 2013-12-27 17:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-27 11:24 - 2011-05-04 13:57 - 00000000 ____D C:\Qoobox
2013-12-27 11:22 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-27 11:21 - 2010-04-06 18:20 - 00000000 ____D C:\Users\Saturn
2013-12-26 19:44 - 2013-12-26 19:44 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-12-26 19:44 - 2011-05-05 15:50 - 00000000 ____D C:\Program Files\CCleaner
2013-12-26 19:36 - 2013-12-26 19:36 - 00488320 _____ C:\Windows\Minidump\122613-27518-01.dmp
2013-12-26 19:36 - 2011-01-11 01:00 - 738757377 _____ C:\Windows\MEMORY.DMP
2013-12-26 19:36 - 2011-01-11 01:00 - 00000000 ____D C:\Windows\Minidump
2013-12-26 17:50 - 2013-12-26 17:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-26 13:34 - 2013-06-13 17:19 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Common
2013-12-23 15:48 - 2013-12-23 15:47 - 00000628 _____ C:\Users\Saturn\Desktop\radio schwarze welle.m3u
2013-12-23 15:39 - 2013-12-23 15:39 - 00000000 ____D C:\ProgramData\Licenses
2013-12-23 15:39 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\Desktop\Formatwandler
2013-12-23 15:33 - 2013-12-23 15:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2013-12-23 15:33 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\Desktop\Musikprogramme
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\ProgramData\Engelmann Media
2013-12-23 15:32 - 2013-12-23 15:32 - 00000000 ____D C:\Program Files (x86)\S.A.D
2013-12-23 15:32 - 2013-09-14 14:14 - 00000000 ____D C:\ProgramData\Package Cache
2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\ProgramData\RapidSolution
2013-12-23 15:30 - 2013-06-13 17:17 - 00000000 ____D C:\Program Files (x86)\Audials
2013-12-23 15:29 - 2013-06-13 17:15 - 00000000 ____D C:\Users\Saturn\AppData\Local\RapidSolution
2013-12-22 23:51 - 2013-05-30 11:17 - 00000000 ____D C:\Users\Saturn\Desktop\lustige Bilder
2013-12-22 15:02 - 2013-12-22 14:51 - 00000000 ___HD C:\Users\Saturn\AppData\Roaming\RPPrivate
2013-12-22 15:01 - 2011-10-10 18:59 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI
2013-12-22 14:39 - 2010-04-08 16:47 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-22 13:13 - 2013-12-22 13:13 - 00000000 ____D C:\Users\Saturn\Documents\BloodKnights
2013-12-21 18:37 - 2013-12-21 18:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Trine2
2013-12-21 18:34 - 2010-04-06 20:18 - 00558241 _____ C:\Windows\DirectX.log
2013-12-21 16:30 - 2013-12-21 16:30 - 00000221 _____ C:\Users\Saturn\Desktop\Trine 2.url
2013-12-21 16:29 - 2013-12-21 16:29 - 00000222 _____ C:\Users\Saturn\Desktop\Blood Knights.url
2013-12-19 20:54 - 2009-07-14 18:58 - 00728016 _____ C:\Windows\system32\perfh007.dat
2013-12-19 20:54 - 2009-07-14 18:58 - 00162238 _____ C:\Windows\system32\perfc007.dat
2013-12-19 20:54 - 2009-07-14 06:13 - 01702976 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Origin
2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\Users\Saturn\AppData\Local\Origin
2013-12-19 18:21 - 2011-10-26 09:42 - 00000000 ____D C:\ProgramData\Origin
2013-12-19 18:20 - 2011-10-26 09:42 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-19 18:18 - 2013-12-19 18:18 - 00007912 _____ C:\Users\Saturn\Documents\DAO Ultimate Addins Updater.log
2013-12-19 18:18 - 2013-04-20 19:08 - 00000000 ____D C:\Users\Saturn\Documents\BioWare
2013-12-19 18:16 - 2012-04-22 22:24 - 00002216 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 13:47 - 2013-12-19 13:47 - 00000222 _____ C:\Users\Saturn\Desktop\Torchlight II.url
2013-12-19 10:20 - 2012-08-04 17:38 - 00000000 ____D C:\Users\Saturn\Desktop\Canon Programme
2013-12-17 21:54 - 2013-12-17 21:54 - 00000221 _____ C:\Users\Saturn\Desktop\Hacker Evolution.url
2013-12-17 18:53 - 2013-10-25 08:35 - 00000000 ____D C:\Users\Saturn\Desktop\Lisa Master
2013-12-17 18:51 - 2013-06-02 21:22 - 00000000 ____D C:\Users\Saturn\Desktop\Stick zeug
2013-12-16 20:39 - 2013-12-16 20:39 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-12-16 19:59 - 2013-08-17 13:01 - 00000000 ____D C:\Windows\system32\MRT
2013-12-16 19:56 - 2010-04-15 14:07 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-16 00:29 - 2009-09-08 09:08 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-12-16 00:28 - 2012-08-04 17:27 - 00000000 ____D C:\Program Files (x86)\Canon
2013-12-16 00:28 - 2010-04-16 13:02 - 00000000 ____D C:\Program Files (x86)\Trillian
2013-12-16 00:26 - 2009-09-07 15:02 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-15 22:09 - 2010-04-21 15:35 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-15 20:53 - 2010-03-05 19:23 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Mozilla
2013-12-15 20:32 - 2012-06-17 13:57 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000UA
2013-12-15 20:32 - 2012-06-17 13:57 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2370623705-2617329015-605871245-1000Core
2013-12-15 20:14 - 2013-12-15 20:02 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-12-15 20:14 - 2012-02-25 09:52 - 00003756 _____ C:\Windows\System32\Tasks\Real Player-Online-Aktualisierungsprogramm
2013-12-15 20:11 - 2013-12-15 20:11 - 00000000 ____D C:\Users\Saturn\AppData\Local\Avg2014
2013-12-15 20:06 - 2012-02-25 09:43 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-12-15 20:04 - 2013-12-15 20:04 - 00000000 ____D C:\Users\Saturn\TuneUp 2014
2013-12-15 20:04 - 2013-12-15 20:03 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2013-12-15 20:03 - 2012-02-25 09:43 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\TuneUp Software
2013-12-15 17:02 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-15 16:25 - 2009-07-14 05:45 - 05459720 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-15 13:38 - 2013-12-15 13:38 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories
2013-12-15 12:06 - 2009-09-08 08:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn
2013-12-12 20:35 - 2013-12-12 20:35 - 00000000 ____D C:\ProgramData\LogMeIn
2013-12-12 18:37 - 2013-12-12 18:37 - 00000930 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2013-12-12 18:37 - 2013-12-12 18:37 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-12 18:00 - 2012-09-02 22:09 - 00000000 ____D C:\Users\Saturn\Documents\stories
2013-12-11 21:58 - 2013-12-01 19:55 - 00000000 ____D C:\Users\Saturn\Desktop\Minecraft server
2013-12-11 21:33 - 2013-12-11 21:33 - 00000221 _____ C:\Users\Saturn\Desktop\Dragon Age Origins - Ultimate Edition.url
2013-12-10 20:34 - 2012-04-01 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-10 20:34 - 2012-04-01 20:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-10 20:34 - 2011-05-14 10:43 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-10 20:27 - 2010-04-27 13:49 - 00000000 ____D C:\Users\Saturn\Documents\My Games
2013-12-08 21:12 - 2013-12-08 21:12 - 28962704 _____ (TuneUp Software) C:\Users\Saturn\Downloads\TuneUpUtilities2013_de-DE.exe
2013-12-08 17:35 - 2013-08-20 20:00 - 00000000 ____D C:\Users\Saturn\Desktop\2011-09-26
2013-12-07 21:37 - 2013-12-07 21:37 - 00000000 ____D C:\Users\Saturn\Desktop\SanDisk rot
2013-12-07 21:31 - 2013-12-07 20:26 - 247873054 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part17.rar.part
2013-12-07 20:26 - 2013-12-07 14:06 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part16.rar
2013-12-07 17:00 - 2010-05-11 21:50 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Skype
2013-12-07 15:08 - 2013-12-07 15:08 - 00000000 ____D C:\Program Files (x86)\GUM1C5.tmp
2013-12-07 15:08 - 2012-04-07 18:18 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-07 15:08 - 2012-04-07 18:18 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-07 14:06 - 2013-12-07 14:03 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part15.rar
2013-12-07 14:03 - 2013-12-07 13:59 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part14.rar
2013-12-07 13:59 - 2013-11-30 17:53 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part13.rar
2013-12-05 21:48 - 2013-12-05 21:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2013-12-05 21:47 - 2013-12-05 21:47 - 00000222 _____ C:\Users\Saturn\Desktop\PAYDAY 2.url
2013-12-05 21:46 - 2013-12-05 21:46 - 07886712 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\Xbox360_64Deu.exe
2013-12-05 21:41 - 2013-12-05 21:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01007.Wdf
2013-12-05 19:50 - 2013-12-05 19:50 - 00001083 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk
2013-12-05 19:50 - 2010-12-05 20:42 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-12-03 22:04 - 2013-12-03 19:58 - 00000000 ____D C:\Users\Saturn\Documents\Visual Studio 2013
2013-12-03 20:46 - 2013-12-03 20:46 - 00001540 _____ C:\Users\Saturn\Desktop\VS Express 2013 für Desktop.lnk
2013-12-03 20:29 - 2013-12-03 20:29 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\NuGet
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\ProgramData\NuGet
2013-12-03 19:57 - 2013-12-03 19:57 - 00000000 ____D C:\Program Files (x86)\NuGet
2013-12-03 19:57 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-03 19:57 - 2011-10-10 19:11 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2013-12-03 19:57 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-12-03 19:56 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2013-12-03 19:55 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2013-12-03 19:53 - 2013-12-03 19:52 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\SysWOW64\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1033
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Windows\system32\1031
2013-12-03 19:51 - 2013-12-03 19:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2013-12-03 19:51 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-03 19:50 - 2013-12-03 19:50 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-12-03 19:50 - 2011-07-26 01:04 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-12-03 19:49 - 2010-05-18 22:36 - 01676320 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-03 19:43 - 2013-12-03 19:43 - 00000000 ____D C:\Users\Saturn\AppData\Local\Introversion
2013-12-03 19:37 - 2013-12-03 19:37 - 01029656 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\winexpress_full.exe
2013-12-03 19:18 - 2013-12-03 19:17 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA Corporation
2013-12-03 19:18 - 2013-12-03 19:14 - 00000000 ____D C:\Users\Saturn\AppData\Local\NVIDIA
2013-12-03 19:18 - 2011-10-28 12:16 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-03 19:15 - 2011-10-28 12:17 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-03 19:15 - 2011-10-28 12:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-03 19:05 - 2010-04-06 19:15 - 00001425 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-03 18:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-03 18:51 - 2013-11-26 17:31 - 00024584 _____ C:\Windows\IE11_main.log
2013-12-03 18:47 - 2013-12-03 18:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-03 18:47 - 2013-12-03 18:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 18:47 - 2013-12-03 18:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 18:47 - 2013-12-03 18:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 18:47 - 2013-12-03 18:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-03 18:47 - 2013-12-03 18:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Prison Architect.url
2013-12-01 20:34 - 2013-12-01 20:34 - 00000222 _____ C:\Users\Saturn\Desktop\Doctor Who The Eternity Clock.url
2013-12-01 19:52 - 2013-12-01 19:53 - 15295007 _____ C:\Users\Saturn\Downloads\craftbukkit-1.6.4-R2.0.jar
2013-12-01 18:24 - 2013-05-24 17:12 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\.minecraft
2013-11-30 20:53 - 2013-01-08 19:22 - 00000000 ____D C:\Users\Saturn\Downloads\mov-world.net
2013-11-30 17:53 - 2013-11-30 17:50 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part12.rar
2013-11-30 17:50 - 2013-11-30 17:46 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part11.rar
2013-11-30 17:46 - 2013-11-30 17:43 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part10.rar
2013-11-30 17:43 - 2013-11-30 17:40 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part09.rar
2013-11-30 17:40 - 2013-11-30 17:37 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part08.rar
2013-11-30 17:37 - 2013-11-30 17:33 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part07.rar
2013-11-30 17:33 - 2013-11-30 17:30 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part06.rar
2013-11-30 17:30 - 2013-11-30 17:27 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part05.rar
2013-11-30 17:27 - 2013-11-30 17:24 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part04.rar
2013-11-30 17:23 - 2013-11-30 17:20 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part03.rar
2013-11-30 17:20 - 2013-11-30 17:17 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part02.rar
2013-11-30 17:17 - 2013-11-30 17:14 - 262144000 _____ C:\Users\Saturn\Downloads\MACLIBX2H1xS_mov-world.net.part01.rar
2013-11-30 17:14 - 2013-11-30 17:12 - 125760527 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part8.rar
2013-11-30 17:12 - 2013-11-30 17:09 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part7.rar
2013-11-30 17:09 - 2013-11-30 17:06 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part6.rar
2013-11-30 17:06 - 2013-11-30 17:02 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part5.rar
2013-11-30 17:02 - 2013-11-30 16:59 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part4.rar
2013-11-30 16:59 - 2013-11-30 16:56 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part3.rar
2013-11-30 16:56 - 2013-11-30 16:53 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part2.rar
2013-11-30 16:53 - 2013-11-30 16:49 - 262144000 _____ C:\Users\Saturn\Downloads\LOFXDxP_mov-world.net.part1.rar
2013-11-30 16:49 - 2013-11-30 16:49 - 02414880 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part6.rar
2013-11-30 16:49 - 2013-11-30 16:46 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part5.rar
2013-11-30 16:46 - 2013-11-30 16:43 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part4.rar
2013-11-30 16:43 - 2013-11-30 16:40 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part3.rar
2013-11-30 16:40 - 2013-11-30 16:36 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part2.rar
2013-11-30 16:36 - 2013-11-30 16:33 - 262144000 _____ C:\Users\Saturn\Downloads\IBTMXDxS_mov-world.net.part1.rar
2013-11-30 16:33 - 2013-11-30 16:33 - 30274126 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part10.rar
2013-11-30 15:31 - 2013-11-28 19:37 - 262144000 _____ C:\Users\Saturn\Downloads\RV3XDxX_mov-world.net.part09.rar

Files to move or delete:
====================
C:\ProgramData\hash.dat
C:\Users\Saturn\DoorKickersAlpha_0031_Setup.exe
C:\Users\Saturn\jagex_runescape_preferences.dat
C:\Users\Saturn\jagex_runescape_preferences2.dat
C:\Users\Saturn\jagex__preferences3.dat
C:\Users\Saturn\RocketDock-v1.3.5.exe
C:\Users\Saturn\setup2.5.0.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-30 04:51

==================== End Of Log ============================
         
--- --- ---



Chrome schon getestet, Weiterleitung auf "wisersearch" nicht mehr vorhanden.

Vielen Dank.

Alt 31.12.2013, 15:41   #13
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
S1 evkomlpb; \??\C:\Windows\system32\drivers\evkomlpb.sys [x]
S1 exghbnub; \??\C:\Windows\system32\drivers\exghbnub.sys [x]
S1 flnvtwiu; \??\C:\Windows\system32\drivers\flnvtwiu.sys [x]
S1 ggplayov; \??\C:\Windows\system32\drivers\ggplayov.sys [x]
S1 glhbzrdp; \??\C:\Windows\system32\drivers\glhbzrdp.sys [x]
S1 hjgequpo; \??\C:\Windows\system32\drivers\hjgequpo.sys [x]
S1 ibrmytkv; \??\C:\Windows\system32\drivers\ibrmytkv.sys [x]
S1 ihpczvzt; \??\C:\Windows\system32\drivers\ihpczvzt.sys [x]
S1 iwxgprso; \??\C:\Windows\system32\drivers\iwxgprso.sys [x]
S1 jhostfze; \??\C:\Windows\system32\drivers\jhostfze.sys [x]
S1 kiaqjrtf; \??\C:\Windows\system32\drivers\kiaqjrtf.sys [x]
S1 kpqjothk; \??\C:\Windows\system32\drivers\kpqjothk.sys [x]
S1 mozosloe; \??\C:\Windows\system32\drivers\mozosloe.sys [x]
S1 mwtafrhe; \??\C:\Windows\system32\drivers\mwtafrhe.sys [x]
S1 nijxcfnj; \??\C:\Windows\system32\drivers\nijxcfnj.sys [x]
S1 njlwenqt; \??\C:\Windows\system32\drivers\njlwenqt.sys [x]
S1 nrmqgeaq; \??\C:\Windows\system32\drivers\nrmqgeaq.sys [x]
S1 olekorua; \??\C:\Windows\system32\drivers\olekorua.sys [x]
S1 pddbwrxt; \??\C:\Windows\system32\drivers\pddbwrxt.sys [x]
S1 pkijmgtn; \??\C:\Windows\system32\drivers\pkijmgtn.sys [x]
S1 ptvuibnd; \??\C:\Windows\system32\drivers\ptvuibnd.sys [x]
S1 qlnvkvlz; \??\C:\Windows\system32\drivers\qlnvkvlz.sys [x]
S1 qqfmmntb; \??\C:\Windows\system32\drivers\qqfmmntb.sys [x]
S1 qyyteedz; \??\C:\Windows\system32\drivers\qyyteedz.sys [x]
S1 reiphzej; \??\C:\Windows\system32\drivers\reiphzej.sys [x]
S1 rkispkye; \??\C:\Windows\system32\drivers\rkispkye.sys [x]
S1 rqxvktor; \??\C:\Windows\system32\drivers\rqxvktor.sys [x]
S1 rsnvucpt; \??\C:\Windows\system32\drivers\rsnvucpt.sys [x]
S1 sljolomf; \??\C:\Windows\system32\drivers\sljolomf.sys [x]
S1 tpioqxek; \??\C:\Windows\system32\drivers\tpioqxek.sys [x]
S1 trdhienr; \??\C:\Windows\system32\drivers\trdhienr.sys [x]
S1 txvztkiq; \??\C:\Windows\system32\drivers\txvztkiq.sys [x]
S1 tzjkmdvf; \??\C:\Windows\system32\drivers\tzjkmdvf.sys [x]
S1 uguzijuk; \??\C:\Windows\system32\drivers\uguzijuk.sys [x]
S1 vgrfszla; \??\C:\Windows\system32\drivers\vgrfszla.sys [x]
S1 vtxmuojc; \??\C:\Windows\system32\drivers\vtxmuojc.sys [x]
S1 wrsxqila; \??\C:\Windows\system32\drivers\wrsxqila.sys [x]
S1 xeshofoi; \??\C:\Windows\system32\drivers\xeshofoi.sys [x]
S1 xhbipmbk; \??\C:\Windows\system32\drivers\xhbipmbk.sys [x]
S1 ybmjedft; \??\C:\Windows\system32\drivers\ybmjedft.sys [x]
S1 ydnwlbze; \??\C:\Windows\system32\drivers\ydnwlbze.sys [x]
S1 yrxzjdal; \??\C:\Windows\system32\drivers\yrxzjdal.sys [x]
S1 yssdrnbz; \??\C:\Windows\system32\drivers\yssdrnbz.sys [x]
S1 yvzmfhna; \??\C:\Windows\system32\drivers\yvzmfhna.sys [x]
S1 zirtwuoe; \??\C:\Windows\system32\drivers\zirtwuoe.sys [x]
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.





Fertig

Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun


Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 02.01.2014, 09:41   #14
Ravenwing
 
Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



hier der Fixlog:

Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-01-2014 01
Ran by Saturn at 2014-01-02 09:38:58 Run:1
Running from C:\Users\Saturn\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
S1 evkomlpb; \??\C:\Windows\system32\drivers\evkomlpb.sys [x]
S1 exghbnub; \??\C:\Windows\system32\drivers\exghbnub.sys [x]
S1 flnvtwiu; \??\C:\Windows\system32\drivers\flnvtwiu.sys [x]
S1 ggplayov; \??\C:\Windows\system32\drivers\ggplayov.sys [x]
S1 glhbzrdp; \??\C:\Windows\system32\drivers\glhbzrdp.sys [x]
S1 hjgequpo; \??\C:\Windows\system32\drivers\hjgequpo.sys [x]
S1 ibrmytkv; \??\C:\Windows\system32\drivers\ibrmytkv.sys [x]
S1 ihpczvzt; \??\C:\Windows\system32\drivers\ihpczvzt.sys [x]
S1 iwxgprso; \??\C:\Windows\system32\drivers\iwxgprso.sys [x]
S1 jhostfze; \??\C:\Windows\system32\drivers\jhostfze.sys [x]
S1 kiaqjrtf; \??\C:\Windows\system32\drivers\kiaqjrtf.sys [x]
S1 kpqjothk; \??\C:\Windows\system32\drivers\kpqjothk.sys [x]
S1 mozosloe; \??\C:\Windows\system32\drivers\mozosloe.sys [x]
S1 mwtafrhe; \??\C:\Windows\system32\drivers\mwtafrhe.sys [x]
S1 nijxcfnj; \??\C:\Windows\system32\drivers\nijxcfnj.sys [x]
S1 njlwenqt; \??\C:\Windows\system32\drivers\njlwenqt.sys [x]
S1 nrmqgeaq; \??\C:\Windows\system32\drivers\nrmqgeaq.sys [x]
S1 olekorua; \??\C:\Windows\system32\drivers\olekorua.sys [x]
S1 pddbwrxt; \??\C:\Windows\system32\drivers\pddbwrxt.sys [x]
S1 pkijmgtn; \??\C:\Windows\system32\drivers\pkijmgtn.sys [x]
S1 ptvuibnd; \??\C:\Windows\system32\drivers\ptvuibnd.sys [x]
S1 qlnvkvlz; \??\C:\Windows\system32\drivers\qlnvkvlz.sys [x]
S1 qqfmmntb; \??\C:\Windows\system32\drivers\qqfmmntb.sys [x]
S1 qyyteedz; \??\C:\Windows\system32\drivers\qyyteedz.sys [x]
S1 reiphzej; \??\C:\Windows\system32\drivers\reiphzej.sys [x]
S1 rkispkye; \??\C:\Windows\system32\drivers\rkispkye.sys [x]
S1 rqxvktor; \??\C:\Windows\system32\drivers\rqxvktor.sys [x]
S1 rsnvucpt; \??\C:\Windows\system32\drivers\rsnvucpt.sys [x]
S1 sljolomf; \??\C:\Windows\system32\drivers\sljolomf.sys [x]
S1 tpioqxek; \??\C:\Windows\system32\drivers\tpioqxek.sys [x]
S1 trdhienr; \??\C:\Windows\system32\drivers\trdhienr.sys [x]
S1 txvztkiq; \??\C:\Windows\system32\drivers\txvztkiq.sys [x]
S1 tzjkmdvf; \??\C:\Windows\system32\drivers\tzjkmdvf.sys [x]
S1 uguzijuk; \??\C:\Windows\system32\drivers\uguzijuk.sys [x]
S1 vgrfszla; \??\C:\Windows\system32\drivers\vgrfszla.sys [x]
S1 vtxmuojc; \??\C:\Windows\system32\drivers\vtxmuojc.sys [x]
S1 wrsxqila; \??\C:\Windows\system32\drivers\wrsxqila.sys [x]
S1 xeshofoi; \??\C:\Windows\system32\drivers\xeshofoi.sys [x]
S1 xhbipmbk; \??\C:\Windows\system32\drivers\xhbipmbk.sys [x]
S1 ybmjedft; \??\C:\Windows\system32\drivers\ybmjedft.sys [x]
S1 ydnwlbze; \??\C:\Windows\system32\drivers\ydnwlbze.sys [x]
S1 yrxzjdal; \??\C:\Windows\system32\drivers\yrxzjdal.sys [x]
S1 yssdrnbz; \??\C:\Windows\system32\drivers\yssdrnbz.sys [x]
S1 yvzmfhna; \??\C:\Windows\system32\drivers\yvzmfhna.sys [x]
S1 zirtwuoe; \??\C:\Windows\system32\drivers\zirtwuoe.sys [x]
*****************

evkomlpb => Service deleted successfully.
exghbnub => Service deleted successfully.
flnvtwiu => Service deleted successfully.
ggplayov => Service deleted successfully.
glhbzrdp => Service deleted successfully.
hjgequpo => Service deleted successfully.
ibrmytkv => Service deleted successfully.
ihpczvzt => Service deleted successfully.
iwxgprso => Service deleted successfully.
jhostfze => Service deleted successfully.
kiaqjrtf => Service deleted successfully.
kpqjothk => Service deleted successfully.
mozosloe => Service deleted successfully.
mwtafrhe => Service deleted successfully.
nijxcfnj => Service deleted successfully.
njlwenqt => Service deleted successfully.
nrmqgeaq => Service deleted successfully.
olekorua => Service deleted successfully.
pddbwrxt => Service deleted successfully.
pkijmgtn => Service deleted successfully.
ptvuibnd => Service deleted successfully.
qlnvkvlz => Service deleted successfully.
qqfmmntb => Service deleted successfully.
qyyteedz => Service deleted successfully.
reiphzej => Service deleted successfully.
rkispkye => Service deleted successfully.
rqxvktor => Service deleted successfully.
rsnvucpt => Service deleted successfully.
sljolomf => Service deleted successfully.
tpioqxek => Service deleted successfully.
trdhienr => Service deleted successfully.
txvztkiq => Service deleted successfully.
tzjkmdvf => Service deleted successfully.
uguzijuk => Service deleted successfully.
vgrfszla => Service deleted successfully.
vtxmuojc => Service deleted successfully.
wrsxqila => Service deleted successfully.
xeshofoi => Service deleted successfully.
xhbipmbk => Service deleted successfully.
ybmjedft => Service deleted successfully.
ydnwlbze => Service deleted successfully.
yrxzjdal => Service deleted successfully.
yssdrnbz => Service deleted successfully.
yvzmfhna => Service deleted successfully.
zirtwuoe => Service deleted successfully.

==== End of Fixlog ====
         



Ich habe sämtliche Schritte durchgeführt und mein System ist jetzt wieder sauber.
Somit kann dieses Thema geschlossen werden.

Nochmals vielen Dank für die gute Hilfe!

Geändert von Ravenwing (02.01.2014 um 09:46 Uhr) Grund: Ergänzungen

Alt 03.01.2014, 09:49   #15
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Standard

Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert



Gern Geschehen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert
64-bit, als startseite, automatisch, browser, channel, chrome, einsatz, einstellungen, firefox, geladen, geändert, hallo zusammen, helft, problem, recovery, scan, seite, startseite, tagen, tool, version, windows, windows 7, wisersearch, zusammen



Ähnliche Themen: Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert


  1. Plötzlich Software "picexa.exe" installiert, "delta-homes.com" als Startseite in sämtlichen Browsern
    Log-Analyse und Auswertung - 10.04.2015 (11)
  2. Win 8.1 : Mozilla Tab-falsche Startseite und Chinesische Schriftzeichen, Windows-Start "Startmenü aktualisiert"
    Log-Analyse und Auswertung - 15.03.2015 (33)
  3. Diverse Malware ("CoolSaleCoupon", "ddownlloaditkeep", "omiga-plus", "SaveSense", "SaleItCoupon"); lahmer PC & viel Werbung!
    Plagegeister aller Art und deren Bekämpfung - 11.01.2015 (16)
  4. Win7: Firefox: Startseite "mystartsearch.com" unentfernbar, Windows-manger-protect setup, Browservirus?
    Plagegeister aller Art und deren Bekämpfung - 01.12.2014 (20)
  5. Windows 8 / "Feun2Save": Nur noch Werbelinks usw. im Browser; Browser öffnet sich von alleine
    Log-Analyse und Auswertung - 06.10.2014 (18)
  6. Windows 7: Leerlauf Scan im BitDefender wird immer wieder ausgeschaltet und Browser Startseite "google" wird geändert
    Log-Analyse und Auswertung - 20.05.2014 (13)
  7. Windows 8: Laptop nach "Conduit Search & Trovigo.com Startseite" sauber?
    Plagegeister aller Art und deren Bekämpfung - 17.02.2014 (7)
  8. Browser haben neue Startseite "Awesomehp" - Wie kann ich diese wieder entfernen?
    Log-Analyse und Auswertung - 13.02.2014 (7)
  9. Ungewollte Startseite bei Chrome: " http://wisersearch.com/?channel=de_nt" - Wie entfernen?
    Plagegeister aller Art und deren Bekämpfung - 07.12.2013 (17)
  10. "monstermarketplace.com" Infektion und ihre Folgen; "Anti-Virus-Blocker"," unsichtbare Toolbars" + "Browser-Hijacker" von selbst installiert
    Log-Analyse und Auswertung - 16.11.2013 (21)
  11. ohne mein zutun wird "http://wisersearch.com/?channel=de" als Startseite ausgeführt.
    Log-Analyse und Auswertung - 26.09.2013 (19)
  12. Windows XP: Firefox öffnet immer als Startseite "u-search.net/?a=1&e=1"
    Log-Analyse und Auswertung - 06.09.2013 (13)
  13. Browser/Werbe popup, "AppsHat", MBAM Funde, nach "Schrift-Download"
    Plagegeister aller Art und deren Bekämpfung - 26.08.2013 (31)
  14. Problem mit Windows 7 64 Bit -Firefox öffnet ungewollt Tabs mit der überschrift "ads" Proxyeinstellungen werden selbstständig geändert.
    Plagegeister aller Art und deren Bekämpfung - 16.06.2013 (9)
  15. Dateityp von "Anwendung" in "4g" geändert
    Plagegeister aller Art und deren Bekämpfung - 27.12.2012 (2)
  16. Startseite fehlerhaft, stets "NatWest" (www.nwolb.com) Trojaner "Trojan.ZBotR.Gen" gefunden
    Log-Analyse und Auswertung - 02.04.2012 (28)
  17. Startseite "smaxxi.net, smaxi.biz" und seltsamer großer Ordner "AppData"
    Plagegeister aller Art und deren Bekämpfung - 20.01.2012 (1)

Zum Thema Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert - Hallo zusammen, seit ein paar Tagen habe ich das Problem, dass ich beim Öffnen meiner Browser (im Einsatz sind Chrome [Standard-Browser] und Firefox) automatisch als Startseite "hxxp://wisersearch.com/?channel=de_nt" habe. Ich hab - Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert...
Archiv
Du betrachtest: Windows 7, 64-bit, Browser-Startseite auf "wisersearch" geändert auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.