Probleme bei Downloads und Installationen

DerTK · 05.04.2014, 19:12

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Laptop (administrator) on LAPTOP-PC on 05-04-2014 20:01:32
Running from C:\Users\Laptop\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Stardock) C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Stardock) C:\Program Files (x86)\Stardock\ObjectDockFree\Dock64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7509096 2011-10-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-04-02] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
InternetURL: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google.com.url -> C:\ProgramData\27218346293184.exe
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk
ShortcutTarget: Stardock ObjectDock.lnk -> C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe (Stardock)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC2CBB12E83A8CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect119b.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF NetworkProxy: "autoconfig_url", ""
FF NetworkProxy: "http", ""
FF NetworkProxy: "http_port", ""
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "type", ""
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Firebug - C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\wy9eyxh5.default\Extensions\firebug@software.joehewitt.com.xpi [2013-10-16]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-10-22]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-04]
CHR Extension: (Google Drive) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-04]
CHR Extension: (YouTube) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-10-23]
CHR Extension: (Google-Suche) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-10-23]
CHR Extension: (Google Wallet) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (Google Mail) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-10-23]

==================== Services (Whitelisted) =================

R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-09] (Atheros)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-02] (AVAST Software)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-03-05] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-03-05] (Malwarebytes Corporation)
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
S2 KMSServerService; C:\Users\Laptop\AppData\Local\Temp\5D1F.tmp\KMSServerService.exe [X]
S2 TunMirror; "C:\Users\Laptop\AppData\Local\Temp\5D1F.tmp\TunMirror.exe" [X]

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-02] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-02] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-02] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-02] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-04-02] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-04-02] ()
S3 ElgatoGC658Y; C:\Windows\System32\Drivers\ElgatoGC658.sys [50288 2012-11-12] (UB658)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-03-05] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-04-05] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-03-05] (Malwarebytes Corporation)
U0 Partizan; C:\Windows\SysWOW64\drivers\Partizan.sys [35816 2014-04-02] (Greatis Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-05 18:06 - 2014-04-05 18:06 - 00003438 _____ () C:\Users\Laptop\Desktop\mbam1.txt
2014-04-04 23:19 - 2014-04-04 22:56 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-04 23:13 - 2014-04-04 23:24 - 00000000 ____D () C:\zoek
2014-04-04 23:01 - 2014-04-04 23:24 - 00009974 _____ () C:\zoek-results.log
2014-04-04 22:56 - 2014-04-04 23:17 - 00000000 ____D () C:\zoek_backup
2014-04-04 22:53 - 2014-04-04 22:53 - 01285120 _____ () C:\Users\Laptop\Desktop\zoek (1).exe
2014-04-04 22:50 - 2014-04-04 22:51 - 01243715 _____ () C:\Users\Laptop\Downloads\zoek.exe
2014-04-04 22:44 - 2014-04-04 22:44 - 00001657 _____ () C:\Users\Laptop\Desktop\mbam.txt
2014-04-04 20:50 - 2014-04-05 18:35 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-04 20:50 - 2014-04-04 20:50 - 00001139 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-04 20:50 - 2014-04-04 20:50 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-04 20:50 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-04 20:50 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-04 20:50 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-04 20:49 - 2014-04-04 20:49 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Downloads\mbam-setup-2.0.0.1000 (1).exe
2014-04-04 20:31 - 2014-04-04 20:31 - 00001139 _____ () C:\Users\Laptop\Desktop\JRT.txt
2014-04-04 20:20 - 2014-04-04 20:20 - 00000000 ____D () C:\Windows\ERUNT
2014-04-04 20:18 - 2014-04-04 20:19 - 01038974 _____ (Thisisu) C:\Users\Laptop\Desktop\JRT.exe
2014-04-04 20:10 - 2014-04-04 20:13 - 00000000 ____D () C:\AdwCleaner
2014-04-04 20:08 - 2014-04-04 20:07 - 01426178 _____ () C:\Users\Laptop\Desktop\adwcleaner.exe
2014-04-04 20:07 - 2014-04-04 20:07 - 01426178 _____ () C:\Users\Laptop\Downloads\adwcleaner.exe
2014-04-04 12:27 - 2014-01-10 16:54 - 00000000 ____D () C:\Users\Laptop\About Berlin Vol 5 (2014)
2014-04-04 07:59 - 2014-04-04 10:11 - 406958951 _____ () C:\Users\Laptop\Downloads\About Berlin Vol 5 (2014).rar
2014-04-03 22:07 - 2014-04-04 23:22 - 00087728 _____ () C:\Windows\SysWOW64\PARTIZAN.TXT
2014-04-03 21:29 - 2014-04-03 21:29 - 00018826 _____ () C:\ComboFix.txt
2014-04-03 21:12 - 2014-04-03 21:29 - 00000000 ____D () C:\Qoobox
2014-04-03 21:12 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-04-03 21:12 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-04-03 21:12 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-04-03 21:12 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-04-03 21:12 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-04-03 21:12 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-04-03 21:12 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-04-03 21:12 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-04-03 21:11 - 2014-04-03 21:26 - 00000000 ____D () C:\Windows\erdnt
2014-04-03 21:09 - 2014-04-03 21:09 - 05193944 ____R (Swearware) C:\Users\Laptop\Desktop\ComboFix.exe
2014-04-03 19:54 - 2014-04-03 19:56 - 00035817 _____ () C:\Users\Laptop\Desktop\Addition.txt
2014-04-03 19:52 - 2014-04-05 20:02 - 00012530 _____ () C:\Users\Laptop\Desktop\FRST.txt
2014-04-03 19:52 - 2014-04-05 20:01 - 00000000 ____D () C:\FRST
2014-04-03 19:49 - 2014-04-03 19:49 - 02157056 _____ (Farbar) C:\Users\Laptop\Desktop\FRST64.exe
2014-04-03 19:13 - 2014-04-03 11:15 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Desktop\mbam-setup-2.0.0.1000.exe
2014-04-02 19:07 - 2014-04-02 19:07 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-02 19:06 - 2014-04-02 19:06 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-02 18:29 - 2014-04-02 18:30 - 00030711 _____ () C:\Windows\SysWOW64\Partizan.RRI
2014-04-02 18:29 - 2014-04-02 18:29 - 00040720 _____ (Greatis Software) C:\Windows\system32\Partizan.exe
2014-04-02 18:27 - 2014-04-02 18:27 - 00000000 ____D () C:\@RestoreQuarantine
2014-04-02 18:22 - 2014-04-02 18:32 - 00000000 ____D () C:\Users\Laptop\Documents\RegRun2
2014-04-02 18:22 - 2014-04-02 18:32 - 00000000 ____D () C:\Program Files (x86)\UnHackMe
2014-04-02 18:22 - 2014-04-02 18:31 - 00000000 ____D () C:\Users\Public\Documents\regruninfo
2014-04-02 18:22 - 2014-04-02 18:22 - 00035816 _____ (Greatis Software) C:\Windows\SysWOW64\Drivers\Partizan.sys
2014-04-02 18:22 - 2014-04-02 18:22 - 00001044 _____ () C:\Users\Laptop\Desktop\UnHackMe.lnk
2014-04-02 18:22 - 2014-04-02 18:22 - 00000418 _____ () C:\Windows\Tasks\UnHackMe Task Scheduler.job
2014-04-02 18:22 - 2014-04-02 18:22 - 00000002 RSHOT () C:\Windows\winstart.bat
2014-04-02 18:22 - 2014-04-02 18:22 - 00000002 RSHOT () C:\Windows\SysWOW64\AUTOEXEC.NT
2014-04-02 18:22 - 2014-03-28 13:02 - 15320504 _____ (Greatis Software, LLC. ) C:\Users\Laptop\Desktop\unhackme_setup.exe
2014-04-02 18:22 - 2014-03-28 13:01 - 00012800 _____ (Greatis Software, LLC.) C:\Windows\SysWOW64\Drivers\UnHackMeDrv.sys
2014-04-02 18:19 - 2014-04-02 18:20 - 15295838 _____ () C:\Users\Laptop\Downloads\unhackme.zip
2014-04-02 18:13 - 2014-04-02 18:14 - 90285632 _____ () C:\Users\Laptop\Downloads\Sophos Virus Removal Tool.exe
2014-04-02 17:52 - 2014-04-02 17:53 - 00709352 _____ ( ) C:\Users\Laptop\Downloads\COMPUTER_BILD-Download-Manager_fuer_WHD_7.4.exe
2014-04-02 17:40 - 2014-04-02 17:40 - 00347816 _____ (Microsoft Corporation) C:\Users\Laptop\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.118319883786173728.1.2.Run.exe
2014-04-02 17:38 - 2014-04-02 17:38 - 00347816 _____ (Microsoft Corporation) C:\Users\Laptop\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.118319883786173728.1.1.Run.exe
2014-04-02 17:17 - 2014-04-02 17:17 - 00921000 _____ (Oracle Corporation) C:\Users\Laptop\Downloads\chromeinstall-7u51.exe
2014-04-02 17:13 - 2014-04-02 17:14 - 00074336 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstaller (1).exe
2014-04-02 17:08 - 2014-04-02 17:08 - 00002003 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-04-02 17:06 - 2014-04-02 17:06 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-01 16:40 - 2014-04-01 16:41 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-04-01 16:35 - 2014-04-01 16:35 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-LAPTOP-PC-Microsoft-Windows-7-Ultimate-(64-bit).dat
2014-04-01 16:32 - 2014-04-01 16:32 - 00000000 ____D () C:\RegBackup
2014-04-01 16:25 - 2014-04-01 16:25 - 00003304 ____N () C:\bootsqm.dat
2014-04-01 16:12 - 2014-04-01 16:12 - 00000000 ____D () C:\Users\Laptop\Desktop\Tweaking.com - Windows Repair
2014-04-01 16:11 - 2014-04-01 16:11 - 03098210 _____ () C:\Users\Laptop\Downloads\tweaking.com_windows_repair_aio.zip
2014-04-01 16:09 - 2014-04-01 16:09 - 00613200 _____ (Chip Digital GmbH) C:\Users\Laptop\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-04-01 15:56 - 2014-04-01 15:56 - 00613200 _____ (Chip Digital GmbH) C:\Users\Laptop\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe
2014-03-31 20:44 - 2014-03-31 20:44 - 00001156 _____ () C:\Users\Laptop\Downloads\Max_Herre_-_MTV_Unplugged_KAHEDI_Radio_Show_Limited_Edition_2013_-kjx8dymyeq0zn.dlc
2014-03-31 20:28 - 2014-03-31 20:28 - 00921000 _____ (Oracle Corporation) C:\Users\Laptop\Downloads\chromeinstall-7u51 (2).exe
2014-03-31 20:26 - 2014-03-31 20:27 - 00074336 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstaller.exe
2014-03-31 20:22 - 2014-03-31 20:22 - 00000000 _____ () C:\Users\Laptop\Downloads\be7usd5w
2014-03-31 20:18 - 2014-03-31 20:28 - 27548688 _____ () C:\Users\Laptop\Downloads\15920_mrtr3cd.rar
2014-03-31 17:09 - 2014-03-31 17:09 - 00000000 ____D () C:\Users\Laptop\Downloads\Download.am
2014-03-31 17:08 - 2014-03-31 17:08 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Download.am
2014-03-31 17:07 - 2013-11-26 23:01 - 13770682 _____ (COLDWELL AG) C:\Users\Laptop\Desktop\download.am-build233.exe
2014-03-31 16:47 - 2014-03-31 16:47 - 00077976 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstallerJD2.exe
2014-03-31 16:12 - 2014-03-31 16:48 - 106325880 _____ () C:\Users\Laptop\Downloads\maxhermtvunp2013.rar
2014-03-29 03:54 - 2014-03-29 17:44 - 00014183 _____ () C:\Users\Laptop\Desktop\chrome.exe - Verknüpfung.lnk
2014-03-29 03:28 - 2013-12-28 09:36 - 00000000 ____D () C:\Users\Laptop\Desktop\NPUB31419--131218150106 (ORIGINAL BACKUP)
2014-03-29 03:19 - 2014-03-29 03:29 - 00000000 ____D () C:\Users\Laptop\Desktop\Save resigner
2014-03-29 03:18 - 2014-03-29 03:18 - 02173391 _____ () C:\Users\Laptop\Downloads\[PS3]_Save_Resigner_1.4.rar
2014-03-29 02:56 - 2014-03-29 02:56 - 13866963 _____ (The Prince of Codes) C:\Users\Laptop\Downloads\[PS3] Save Resigner 2.0.6 Setup.exe
2014-03-29 02:51 - 2014-03-29 02:51 - 00000000 ____D () C:\Users\Laptop\Documents\The Prince of Codes
2014-03-29 02:51 - 2014-03-29 02:51 - 00000000 ____D () C:\ProgramData\Caphyon
2014-03-29 02:50 - 2014-03-29 02:50 - 08071966 _____ () C:\Users\Laptop\Downloads\NPUB31419--131218150106.rar
2014-03-29 02:47 - 2014-03-29 02:48 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\The Prince of Codes
2014-03-29 02:45 - 2014-03-29 02:46 - 13449652 _____ (The Prince of Codes) C:\Users\Laptop\Downloads\ps3_save_resigner_2.0.5_setup.exe
2014-03-29 02:29 - 2013-12-20 00:01 - 00000000 ____D () C:\Users\Laptop\Desktop\Save #2
2014-03-29 02:26 - 2014-03-29 02:27 - 16119274 _____ () C:\Users\Laptop\Downloads\Minecraft Saves.zip
2014-03-26 08:23 - 2014-03-26 10:13 - 573294207 _____ () C:\Users\Laptop\Desktop\Ohne Titel (2).mp4
2014-03-25 22:38 - 2014-03-25 22:57 - 00488408 _____ () C:\Users\Laptop\Desktop\mm.sfk
2014-03-25 22:37 - 2014-03-25 22:37 - 62507564 _____ () C:\Users\Laptop\Desktop\mm.wav
2014-03-24 19:54 - 2014-03-24 19:54 - 00000000 ____D () C:\Users\Laptop\Desktop\MW3
2014-03-24 19:53 - 2014-03-24 19:54 - 00000000 ____D () C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack
2014-03-24 19:49 - 2014-03-24 19:51 - 40949384 _____ () C:\Users\Laptop\Downloads\PSNModz 6k Non Jailbreak Mod Pack.rar
2014-03-21 14:29 - 2014-03-21 14:29 - 03294805 _____ () C:\Users\Laptop\Downloads\Nova Launcher Prime v2.2.3.zip
2014-03-21 14:29 - 2014-03-21 14:29 - 02641758 _____ () C:\Users\Laptop\Downloads\Lucky Patcher v3.6.5.apk
2014-03-21 14:22 - 2014-03-21 14:24 - 03263625 _____ () C:\Users\Laptop\Downloads\Nicht bestätigt 715706.crdownload
2014-03-21 14:01 - 2014-03-21 14:01 - 09355409 _____ () C:\Users\Laptop\Downloads\CM11_swapped_go_19032014.zip
2014-03-21 13:27 - 2014-03-21 13:28 - 00000000 ____D () C:\Users\Laptop\Desktop\system
2014-03-21 13:27 - 2008-02-29 11:33 - 09107751 ____N () C:\Users\Laptop\Desktop\boot.img
2014-03-21 13:27 - 2008-02-29 11:33 - 00009329 ____N () C:\Users\Laptop\Desktop\file_contexts
2014-03-21 13:20 - 2014-03-21 13:27 - 212605148 _____ () C:\Users\Laptop\Desktop\cm_lotus-ota-19032014.zip
2014-03-21 13:09 - 2014-03-21 13:10 - 13199249 _____ () C:\Users\Laptop\Downloads\WhatsAppPLUSv5.25D-211186.apk
2014-03-18 19:34 - 2014-03-26 14:58 - 00038288 _____ () C:\Users\Laptop\Desktop\Ohne Titel.veg
2014-03-18 19:34 - 2014-03-25 22:57 - 00038264 _____ () C:\Users\Laptop\Desktop\Ohne Titel.veg.bak
2014-03-18 16:41 - 2014-03-18 19:33 - 1305585413 _____ () C:\Users\Laptop\Desktop\Ohne Titel.mp4
2014-03-17 21:03 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-17 21:03 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-17 21:03 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-17 21:03 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-17 21:03 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-17 21:03 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-17 21:03 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-17 21:03 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-17 21:03 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-17 21:03 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-17 21:03 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-17 21:03 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-17 21:03 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-17 21:03 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-17 21:03 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-17 21:03 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-17 21:03 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-17 21:03 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-17 21:03 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-17 21:03 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-17 21:03 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-17 21:03 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-17 21:03 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-17 21:03 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-17 21:03 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-17 21:03 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-17 21:03 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-17 21:03 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-17 21:03 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-17 21:03 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-17 21:03 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-17 21:03 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-17 21:03 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-17 21:03 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-17 21:03 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-17 21:03 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-17 21:03 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-17 21:03 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-17 21:03 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-17 21:03 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-17 21:01 - 2014-03-17 18:54 - 15102479 _____ () C:\Users\Laptop\Downloads\OPEN_THISgg.psd
2014-03-17 20:59 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-17 20:59 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-17 20:59 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-17 20:59 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-17 20:58 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-17 20:58 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-17 20:58 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-17 20:58 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-17 20:36 - 2014-03-17 20:36 - 00024628 _____ () C:\Users\Laptop\Downloads\mickey.zip
2014-03-17 20:33 - 2014-03-17 20:34 - 00035454 _____ () C:\Users\Laptop\Downloads\degrassi.zip
2014-03-12 16:09 - 2014-02-24 06:30 - 00000000 ____D () C:\Program Files\eclipse
2014-03-12 16:01 - 2014-03-12 16:05 - 420618021 _____ () C:\Users\Laptop\Downloads\eclipse-standard-kepler-SR2-win32_4.3.2.zip
2014-03-08 14:33 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-03-08 14:33 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-08 13:19 - 2014-03-08 13:19 - 00000000 ____D () C:\Users\Laptop\Photoshop
2014-03-08 02:33 - 2014-03-08 02:36 - 55901581 _____ () C:\Users\Laptop\Downloads\Ghost Banner.zip

==================== One Month Modified Files and Folders =======

2014-04-05 20:02 - 2014-04-03 19:52 - 00012530 _____ () C:\Users\Laptop\Desktop\FRST.txt
2014-04-05 20:01 - 2014-04-03 19:52 - 00000000 ____D () C:\FRST
2014-04-05 20:01 - 2009-07-14 19:58 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-04-05 20:01 - 2009-07-14 19:58 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-04-05 20:01 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-05 19:59 - 2012-10-09 15:07 - 01327025 _____ () C:\Windows\WindowsUpdate.log
2014-04-05 18:35 - 2014-04-04 20:50 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-05 18:06 - 2014-04-05 18:06 - 00003438 _____ () C:\Users\Laptop\Desktop\mbam1.txt
2014-04-04 23:30 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-04 23:30 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-04 23:24 - 2014-04-04 23:13 - 00000000 ____D () C:\zoek
2014-04-04 23:24 - 2014-04-04 23:01 - 00009974 _____ () C:\zoek-results.log
2014-04-04 23:22 - 2014-04-03 22:07 - 00087728 _____ () C:\Windows\SysWOW64\PARTIZAN.TXT
2014-04-04 23:22 - 2013-09-15 13:03 - 00000436 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-04-04 23:22 - 2012-10-09 20:14 - 00366476 _____ () C:\Windows\PFRO.log
2014-04-04 23:22 - 2009-07-14 06:51 - 00110784 _____ () C:\Windows\setupact.log
2014-04-04 23:17 - 2014-04-04 22:56 - 00000000 ____D () C:\zoek_backup
2014-04-04 23:15 - 2012-10-09 15:15 - 00000000 ____D () C:\Users\Laptop
2014-04-04 22:56 - 2014-04-04 23:19 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-04 22:53 - 2014-04-04 22:53 - 01285120 _____ () C:\Users\Laptop\Desktop\zoek (1).exe
2014-04-04 22:51 - 2014-04-04 22:50 - 01243715 _____ () C:\Users\Laptop\Downloads\zoek.exe
2014-04-04 22:44 - 2014-04-04 22:44 - 00001657 _____ () C:\Users\Laptop\Desktop\mbam.txt
2014-04-04 21:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PLA
2014-04-04 21:48 - 2014-02-01 15:30 - 00000000 ___HD () C:\ProgramData\{$1284-9213-2940-1289$}
2014-04-04 20:50 - 2014-04-04 20:50 - 00001139 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-04 20:50 - 2014-04-04 20:50 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-04 20:49 - 2014-04-04 20:49 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Downloads\mbam-setup-2.0.0.1000 (1).exe
2014-04-04 20:31 - 2014-04-04 20:31 - 00001139 _____ () C:\Users\Laptop\Desktop\JRT.txt
2014-04-04 20:20 - 2014-04-04 20:20 - 00000000 ____D () C:\Windows\ERUNT
2014-04-04 20:19 - 2014-04-04 20:18 - 01038974 _____ (Thisisu) C:\Users\Laptop\Desktop\JRT.exe
2014-04-04 20:13 - 2014-04-04 20:10 - 00000000 ____D () C:\AdwCleaner
2014-04-04 20:07 - 2014-04-04 20:08 - 01426178 _____ () C:\Users\Laptop\Desktop\adwcleaner.exe
2014-04-04 20:07 - 2014-04-04 20:07 - 01426178 _____ () C:\Users\Laptop\Downloads\adwcleaner.exe
2014-04-04 13:15 - 2013-08-17 13:25 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\Mp3tag
2014-04-04 10:11 - 2014-04-04 07:59 - 406958951 _____ () C:\Users\Laptop\Downloads\About Berlin Vol 5 (2014).rar
2014-04-03 21:29 - 2014-04-03 21:29 - 00018826 _____ () C:\ComboFix.txt
2014-04-03 21:29 - 2014-04-03 21:12 - 00000000 ____D () C:\Qoobox
2014-04-03 21:26 - 2014-04-03 21:11 - 00000000 ____D () C:\Windows\erdnt
2014-04-03 21:25 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-04-03 21:09 - 2014-04-03 21:09 - 05193944 ____R (Swearware) C:\Users\Laptop\Desktop\ComboFix.exe
2014-04-03 19:56 - 2014-04-03 19:54 - 00035817 _____ () C:\Users\Laptop\Desktop\Addition.txt
2014-04-03 19:49 - 2014-04-03 19:49 - 02157056 _____ (Farbar) C:\Users\Laptop\Desktop\FRST64.exe
2014-04-03 11:15 - 2014-04-03 19:13 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Desktop\mbam-setup-2.0.0.1000.exe
2014-04-02 19:07 - 2014-04-02 19:07 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-02 19:06 - 2014-04-02 19:06 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Laptop\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-02 18:36 - 2012-10-09 15:15 - 00000000 ___RD () C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-02 18:32 - 2014-04-02 18:22 - 00000000 ____D () C:\Users\Laptop\Documents\RegRun2
2014-04-02 18:32 - 2014-04-02 18:22 - 00000000 ____D () C:\Program Files (x86)\UnHackMe
2014-04-02 18:31 - 2014-04-02 18:22 - 00000000 ____D () C:\Users\Public\Documents\regruninfo
2014-04-02 18:30 - 2014-04-02 18:29 - 00030711 _____ () C:\Windows\SysWOW64\Partizan.RRI
2014-04-02 18:29 - 2014-04-02 18:29 - 00040720 _____ (Greatis Software) C:\Windows\system32\Partizan.exe
2014-04-02 18:27 - 2014-04-02 18:27 - 00000000 ____D () C:\@RestoreQuarantine
2014-04-02 18:22 - 2014-04-02 18:22 - 00035816 _____ (Greatis Software) C:\Windows\SysWOW64\Drivers\Partizan.sys
2014-04-02 18:22 - 2014-04-02 18:22 - 00001044 _____ () C:\Users\Laptop\Desktop\UnHackMe.lnk
2014-04-02 18:22 - 2014-04-02 18:22 - 00000418 _____ () C:\Windows\Tasks\UnHackMe Task Scheduler.job
2014-04-02 18:22 - 2014-04-02 18:22 - 00000002 RSHOT () C:\Windows\winstart.bat
2014-04-02 18:22 - 2014-04-02 18:22 - 00000002 RSHOT () C:\Windows\SysWOW64\AUTOEXEC.NT
2014-04-02 18:20 - 2014-04-02 18:19 - 15295838 _____ () C:\Users\Laptop\Downloads\unhackme.zip
2014-04-02 18:14 - 2014-04-02 18:13 - 90285632 _____ () C:\Users\Laptop\Downloads\Sophos Virus Removal Tool.exe
2014-04-02 17:53 - 2014-04-02 17:52 - 00709352 _____ ( ) C:\Users\Laptop\Downloads\COMPUTER_BILD-Download-Manager_fuer_WHD_7.4.exe
2014-04-02 17:44 - 2013-11-03 16:28 - 00000000 ____D () C:\Program Files (x86)\Kingo Android ROOT
2014-04-02 17:40 - 2014-04-02 17:40 - 00347816 _____ (Microsoft Corporation) C:\Users\Laptop\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.118319883786173728.1.2.Run.exe
2014-04-02 17:38 - 2014-04-02 17:38 - 00347816 _____ (Microsoft Corporation) C:\Users\Laptop\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.118319883786173728.1.1.Run.exe
2014-04-02 17:38 - 2013-09-11 15:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-02 17:17 - 2014-04-02 17:17 - 00921000 _____ (Oracle Corporation) C:\Users\Laptop\Downloads\chromeinstall-7u51.exe
2014-04-02 17:14 - 2014-04-02 17:13 - 00074336 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstaller (1).exe
2014-04-02 17:08 - 2014-04-02 17:08 - 00002003 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-04-02 17:07 - 2014-02-27 19:11 - 00000350 ____H () C:\Windows\Tasks\avast! Emergency Update.job
2014-04-02 17:06 - 2014-04-02 17:06 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-02 17:06 - 2014-02-27 19:11 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-02 17:06 - 2013-03-19 06:11 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-02 17:06 - 2013-03-19 06:11 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-02 17:06 - 2012-10-22 21:28 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-02 17:06 - 2012-10-22 21:28 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-04-02 17:06 - 2012-10-22 21:28 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-02 17:06 - 2012-10-22 21:28 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-02 17:06 - 2012-10-22 21:28 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-01 16:41 - 2014-04-01 16:40 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-04-01 16:35 - 2014-04-01 16:35 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-LAPTOP-PC-Microsoft-Windows-7-Ultimate-(64-bit).dat
2014-04-01 16:32 - 2014-04-01 16:32 - 00000000 ____D () C:\RegBackup
2014-04-01 16:25 - 2014-04-01 16:25 - 00003304 ____N () C:\bootsqm.dat
2014-04-01 16:12 - 2014-04-01 16:12 - 00000000 ____D () C:\Users\Laptop\Desktop\Tweaking.com - Windows Repair
2014-04-01 16:11 - 2014-04-01 16:11 - 03098210 _____ () C:\Users\Laptop\Downloads\tweaking.com_windows_repair_aio.zip
2014-04-01 16:09 - 2014-04-01 16:09 - 00613200 _____ (Chip Digital GmbH) C:\Users\Laptop\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-04-01 15:56 - 2014-04-01 15:56 - 00613200 _____ (Chip Digital GmbH) C:\Users\Laptop\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe
2014-03-31 21:02 - 2013-10-10 16:46 - 00000000 ____D () C:\Users\Laptop\AppData\Local\CrashDumps
2014-03-31 20:44 - 2014-03-31 20:44 - 00001156 _____ () C:\Users\Laptop\Downloads\Max_Herre_-_MTV_Unplugged_KAHEDI_Radio_Show_Limited_Edition_2013_-kjx8dymyeq0zn.dlc
2014-03-31 20:28 - 2014-03-31 20:28 - 00921000 _____ (Oracle Corporation) C:\Users\Laptop\Downloads\chromeinstall-7u51 (2).exe
2014-03-31 20:28 - 2014-03-31 20:18 - 27548688 _____ () C:\Users\Laptop\Downloads\15920_mrtr3cd.rar
2014-03-31 20:27 - 2014-03-31 20:26 - 00074336 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstaller.exe
2014-03-31 20:22 - 2014-03-31 20:22 - 00000000 _____ () C:\Users\Laptop\Downloads\be7usd5w
2014-03-31 17:09 - 2014-03-31 17:09 - 00000000 ____D () C:\Users\Laptop\Downloads\Download.am
2014-03-31 17:08 - 2014-03-31 17:08 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Download.am
2014-03-31 16:48 - 2014-03-31 16:12 - 106325880 _____ () C:\Users\Laptop\Downloads\maxhermtvunp2013.rar
2014-03-31 16:47 - 2014-03-31 16:47 - 00077976 _____ (AppWork GmbH) C:\Users\Laptop\Downloads\WebInstallerJD2.exe
2014-03-29 17:44 - 2014-03-29 03:54 - 00014183 _____ () C:\Users\Laptop\Desktop\chrome.exe - Verknüpfung.lnk
2014-03-29 03:29 - 2014-03-29 03:19 - 00000000 ____D () C:\Users\Laptop\Desktop\Save resigner
2014-03-29 03:18 - 2014-03-29 03:18 - 02173391 _____ () C:\Users\Laptop\Downloads\[PS3]_Save_Resigner_1.4.rar
2014-03-29 02:56 - 2014-03-29 02:56 - 13866963 _____ (The Prince of Codes) C:\Users\Laptop\Downloads\[PS3] Save Resigner 2.0.6 Setup.exe
2014-03-29 02:51 - 2014-03-29 02:51 - 00000000 ____D () C:\Users\Laptop\Documents\The Prince of Codes
2014-03-29 02:51 - 2014-03-29 02:51 - 00000000 ____D () C:\ProgramData\Caphyon
2014-03-29 02:50 - 2014-03-29 02:50 - 08071966 _____ () C:\Users\Laptop\Downloads\NPUB31419--131218150106.rar
2014-03-29 02:48 - 2014-03-29 02:47 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\The Prince of Codes
2014-03-29 02:46 - 2014-03-29 02:45 - 13449652 _____ (The Prince of Codes) C:\Users\Laptop\Downloads\ps3_save_resigner_2.0.5_setup.exe
2014-03-29 02:27 - 2014-03-29 02:26 - 16119274 _____ () C:\Users\Laptop\Downloads\Minecraft Saves.zip
2014-03-28 13:02 - 2014-04-02 18:22 - 15320504 _____ (Greatis Software, LLC. ) C:\Users\Laptop\Desktop\unhackme_setup.exe
2014-03-28 13:01 - 2014-04-02 18:22 - 00012800 _____ (Greatis Software, LLC.) C:\Windows\SysWOW64\Drivers\UnHackMeDrv.sys
2014-03-26 15:11 - 2013-12-16 16:50 - 00000132 _____ () C:\Users\Laptop\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen
2014-03-26 15:01 - 2012-12-22 12:56 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\vlc
2014-03-26 14:58 - 2014-03-18 19:34 - 00038288 _____ () C:\Users\Laptop\Desktop\Ohne Titel.veg
2014-03-26 10:13 - 2014-03-26 08:23 - 573294207 _____ () C:\Users\Laptop\Desktop\Ohne Titel (2).mp4
2014-03-25 22:57 - 2014-03-25 22:38 - 00488408 _____ () C:\Users\Laptop\Desktop\mm.sfk
2014-03-25 22:57 - 2014-03-18 19:34 - 00038264 _____ () C:\Users\Laptop\Desktop\Ohne Titel.veg.bak
2014-03-25 22:45 - 2014-01-24 13:24 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\Audacity
2014-03-25 22:37 - 2014-03-25 22:37 - 62507564 _____ () C:\Users\Laptop\Desktop\mm.wav
2014-03-24 19:54 - 2014-03-24 19:54 - 00000000 ____D () C:\Users\Laptop\Desktop\MW3
2014-03-24 19:54 - 2014-03-24 19:53 - 00000000 ____D () C:\Users\Laptop\Desktop\PSNModz 6k Non Jailbreak Mod Pack
2014-03-24 19:51 - 2014-03-24 19:49 - 40949384 _____ () C:\Users\Laptop\Downloads\PSNModz 6k Non Jailbreak Mod Pack.rar
2014-03-21 14:29 - 2014-03-21 14:29 - 03294805 _____ () C:\Users\Laptop\Downloads\Nova Launcher Prime v2.2.3.zip
2014-03-21 14:29 - 2014-03-21 14:29 - 02641758 _____ () C:\Users\Laptop\Downloads\Lucky Patcher v3.6.5.apk
2014-03-21 14:24 - 2014-03-21 14:22 - 03263625 _____ () C:\Users\Laptop\Downloads\Nicht bestätigt 715706.crdownload
2014-03-21 14:01 - 2014-03-21 14:01 - 09355409 _____ () C:\Users\Laptop\Downloads\CM11_swapped_go_19032014.zip
2014-03-21 13:28 - 2014-03-21 13:27 - 00000000 ____D () C:\Users\Laptop\Desktop\system
2014-03-21 13:27 - 2014-03-21 13:20 - 212605148 _____ () C:\Users\Laptop\Desktop\cm_lotus-ota-19032014.zip
2014-03-21 13:10 - 2014-03-21 13:09 - 13199249 _____ () C:\Users\Laptop\Downloads\WhatsAppPLUSv5.25D-211186.apk
2014-03-19 18:08 - 2013-08-05 14:44 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-19 18:05 - 2012-10-23 03:05 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-18 19:33 - 2014-03-18 16:41 - 1305585413 _____ () C:\Users\Laptop\Desktop\Ohne Titel.mp4
2014-03-17 21:26 - 2009-07-14 06:45 - 05078888 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-17 21:25 - 2014-02-02 20:57 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-17 21:25 - 2014-02-02 20:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-17 21:22 - 2012-10-09 19:43 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-17 21:04 - 2012-12-30 00:29 - 00000000 ____D () C:\Users\Laptop\Documents\Programm
2014-03-17 21:02 - 2014-02-26 21:51 - 00000000 ____D () C:\Users\Laptop\Desktop\Elagto
2014-03-17 21:02 - 2013-12-15 18:43 - 00000000 ____D () C:\Users\Laptop\Ps3 Designer
2014-03-17 20:40 - 2012-10-13 01:06 - 00110080 _____ () C:\Users\Laptop\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-17 20:36 - 2014-03-17 20:36 - 00024628 _____ () C:\Users\Laptop\Downloads\mickey.zip
2014-03-17 20:34 - 2014-03-17 20:33 - 00035454 _____ () C:\Users\Laptop\Downloads\degrassi.zip
2014-03-17 18:54 - 2014-03-17 21:01 - 15102479 _____ () C:\Users\Laptop\Downloads\OPEN_THISgg.psd
2014-03-17 17:49 - 2013-12-25 19:33 - 00000000 ____D () C:\Users\Laptop\Documents\Aufnahmen
2014-03-12 16:05 - 2014-03-12 16:01 - 420618021 _____ () C:\Users\Laptop\Downloads\eclipse-standard-kepler-SR2-win32_4.3.2.zip
2014-03-08 13:19 - 2014-03-08 13:19 - 00000000 ____D () C:\Users\Laptop\Photoshop
2014-03-08 02:36 - 2014-03-08 02:33 - 55901581 _____ () C:\Users\Laptop\Downloads\Ghost Banner.zip
2014-03-08 02:00 - 2013-11-21 22:23 - 00000000 ____D () C:\Users\Laptop\Elagto

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 19:35

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Laptop at 2014-04-05 20:02:54
Running from C:\Users\Laptop\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

7-Zip 9.20 (HKLM-x32\...\{23170F69-40C1-2701-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.2.1.260 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2016 - Avast Software)
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.80 - Atheros Communications)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version:  - Microsoft)
EasyBox Key Decrypter (HKLM-x32\...\EasyBox Key Decrypter) (Version: 1.4 - WLanKeyFinder)
Elgato Game Capture HD (HKLM-x32\...\{DDA520BF-FB7B-4052-91CC-CA3059D6F487}) (Version: 1.42.13.528 - Elgato Systems GmbH)
Flashtool (HKLM-x32\...\Flashtool) (Version: 0.8.0.0 - Androxyde)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Freemake Video Converter Version 4.0.4 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.0.4 - Ellora Assets Corporation)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 32.0.1700.102 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
High-Definition Video Playback (x32 Version: 11.1.10400.2.65 - Nero AG) Hidden
HP Product Detection (HKLM-x32\...\{4F38594F-2C4A-4C42-B2C4-505E225F6F80}) (Version: 11.14.0004 - HP)
HxD Hex Editor Version 1.7.7.0 (HKLM-x32\...\HxD Hex Editor_is1) (Version: 1.7.7.0 - Maël Hörz)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 2.0 (HKLM-x32\...\{245F6C7A-0C22-4DE0-8202-2AAA620A1D3A}) (Version: 2.0.11128.1 - Microsoft Corporation)
Minimal ADB and Fastboot version 1.1.3 (HKLM-x32\...\{DE46417A-9E9E-4BCD-BBDD-DA21943193BB}_is1) (Version: 1.1.3 - )
Mixxx 1.10.0 (HKLM-x32\...\Mixxx (1.10.0)) (Version: 1.10.0 - Verti Techology Group, Inc)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 25.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 25.0.1 (x86 de)) (Version: 25.0.1 - Mozilla)
Mp3tag v2.57 (HKLM-x32\...\Mp3tag) (Version: v2.57 - Florian Heidenreich)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 11 (HKLM-x32\...\{8A7ABBD4-A617-4AE8-9C6D-1510DE46EC35}) (Version: 11.0.15500 - Nero AG)
Nero 11 Cliparts (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Disc Menus 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Disc Menus 2 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Disc Menus 3 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Disc Menus Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Effects Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Image Samples (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Kwik Themes 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Kwik Themes 2 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Kwik Themes 3 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Kwik Themes 4 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Kwik Themes Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 PiP Effects 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 PiP Effects Basic (x32 Version: 11.0.11300.12.0 - Nero AG) Hidden
Nero 11 Video Samples (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero 11 Video Transitions 1 (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero BackItUp 11 (x32 Version: 6.0.16000.13.100 - Nero AG) Hidden
Nero BackItUp 11 Help (CHM) (x32 Version: 11.0.10200 - Nero AG) Hidden
Nero Backup Drivers (HKLM\...\{D600D357-5CB9-4DE9-8FD4-14E208BD1970}) (Version: 1.0.10000.1.0 - Nero AG)
Nero Burning ROM 11 (x32 Version: 11.0.12200.23.100 - Nero AG) Hidden
Nero Burning ROM 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden
Nero ControlCenter 11 (x32 Version: 11.0.12300.0.23 - Nero AG) Hidden
Nero ControlCenter 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden
Nero Core Components 11 (x32 Version: 11.0.15000.1.12 - Nero AG) Hidden
Nero CoverDesigner 11 (x32 Version: 6.0.10800.11.100 - Nero AG) Hidden
Nero CoverDesigner 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden
Nero Express 11 (x32 Version: 11.0.11700.23.100 - Nero AG) Hidden
Nero Express 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden
Nero Kwik Media (x32 Version: 1.10.19300.93.100 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (x32 Version: 11.0.10200 - Nero AG) Hidden
Nero Recode 11 (x32 Version: 5.0.13300.32.100 - Nero AG) Hidden
Nero Recode 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden
Nero RescueAgent 11 (x32 Version: 4.0.10600.10.100 - Nero AG) Hidden
Nero RescueAgent 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden
Nero SoundTrax 11 (x32 Version: 5.0.10400.4.100 - Nero AG) Hidden
Nero SoundTrax 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.10623.22.0 - Nero AG) Hidden
Nero Video 11 (x32 Version: 8.0.14000.21.100 - Nero AG) Hidden
Nero Video 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden
Nero WaveEditor 11 (x32 Version: 6.0.10800.5.100 - Nero AG) Hidden
Nero WaveEditor 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden
nero.prerequisites.msi (x32 Version: 11.0.20007 - Nero AG) Hidden
ObjectDock Free (HKLM-x32\...\ObjectDock Free) (Version: 2.0 - Stardock Corporation)
ObjectDock Free (x32 Version: 2.0 - Stardock Corporation) Hidden
PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
PS3 Theme Builder 2.5 (HKLM-x32\...\{3569D403-23C1-4432-9A33-3E82C47BE470}_is1) (Version:  - LiliChan Software)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6482 - Realtek Semiconductor Corp.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Sony Mobile Update Service (HKLM-x32\...\Update Service) (Version: 2.13.7.201306141231 - Sony Mobile Communications AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.1.21 - Safer-Networking Ltd.)
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated)
TubeBox (HKLM-x32\...\{cb69ca7b-a22a-4654-b672-94507e0560cf}) (Version: 4.3.0.13 - Freetec)
TubeBox (x32 Version: 4.3.0.13 - Freetec) Hidden
UnHackMe 7.11 release (HKLM-x32\...\UnHackMe_is1) (Version:  - Greatis Software, LLC.)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{E78E2B68-8FD1-42EE-BB74-99A4D9E6222D}) (Version:  - Microsoft)
Vegas Pro 12.0 (64-bit) (HKLM\...\{A7C8BBDE-FE98-11E1-87C9-F04DA23A5C58}) (Version: 12.0.367 - Sony)
VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN)
welcome (x32 Version: 11.0.21500.0.4 - Nero AG) Hidden
WhiteCap (HKLM-x32\...\WhiteCap) (Version: 6.1.3 - SoundSpectrum)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinRAR 5.00 beta 8 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.8 - win.rar GmbH)
Xross Media Simulator 1.0 (HKLM-x32\...\{2A9B8C94-2781-4B36-941E-CB37957DE0C0}_is1) (Version:  - Lili-Chan Software)

==================== Restore Points  =========================

25-03-2014 15:04:54 Windows Update
29-03-2014 00:24:21 Windows Update
29-03-2014 00:49:41 Installed [PS3] Save Resigner
29-03-2014 00:58:31 Removed [PS3] Save Resigner
01-04-2014 14:29:58 Tweaking.com - Windows Repair
01-04-2014 15:06:00 Windows Update
02-04-2014 15:02:06 avast! antivirus system restore point
04-04-2014 18:06:01 Windows Update
04-04-2014 21:01:53 zoek.exe restore point

==================== Hosts content: ==========================

2009-07-14 04:34 - 2014-04-03 21:25 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0F62A33C-7001-446F-910E-F5E4EA5008A0} - \Software Updater Ui No Task File
Task: {112720AC-46AC-4450-8060-66F41F646040} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {7D131DE8-FA6A-4400-A93A-F9C65459AB7B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {7EABD3D1-8063-404C-B7DD-34CB1258C0D1} - \Hoolapp Init No Task File
Task: {8C3E1BFF-6E43-41E8-969E-C178F15070DE} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-02] (AVAST Software)
Task: {900F74C0-B5D9-4E59-BE4D-7F6E0D68BE42} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-22] (Google Inc.)
Task: {9A9179D9-25B7-4D08-9649-5D6F98BC5DB7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-25] (Adobe Systems Incorporated)
Task: {A918FEAF-A38F-4219-BE53-285BBD7A7F55} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-22] (Google Inc.)
Task: {B0C889F3-3813-4C27-B595-E359251FD444} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {B50863F5-1C57-4D87-80CA-292C7D48C8C0} - \Hoolapp for Android No Task File
Task: {E0E1F458-B0F9-437A-92CC-6F0CE648C2EB} - \Dealply No Task File
Task: {F9A0B490-532B-4931-AE89-5D5F773C43F9} - \Software Updater No Task File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\UnHackMe Task Scheduler.job => C:\Program Files (x86)\UnHackMe\hackmon.exe

==================== Loaded Modules (whitelisted) =============

2010-10-04 19:54 - 2010-10-04 19:54 - 00776704 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\Dock64.dll
2013-10-16 19:02 - 2013-10-16 19:02 - 03358064 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2012-10-10 14:42 - 2011-10-21 18:49 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-04-04 11:23 - 2014-04-04 11:23 - 02189312 _____ () C:\Program Files\AVAST Software\Avast\defs\14040400\algo.dll
2010-10-04 19:54 - 2010-10-04 19:54 - 00807936 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\CrashRpt.dll
2010-10-04 19:54 - 2010-10-04 19:54 - 00053760 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\zlib.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-10-04 19:54 - 2010-10-04 19:54 - 00675840 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\DockShellHook.dll
2010-10-04 19:54 - 2010-10-04 19:54 - 00094208 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\Docklets\Clock\Clock.dll
2013-12-11 16:39 - 2013-12-11 16:39 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-01-29 21:33 - 2014-01-23 07:56 - 00715544 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libglesv2.dll
2014-01-29 21:33 - 2014-01-23 07:56 - 00100120 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libegl.dll
2014-01-29 21:33 - 2014-01-23 07:55 - 01634584 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ffmpegsumo.dll
2014-01-29 21:33 - 2014-01-23 07:56 - 13615896 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll
2014-01-29 21:33 - 2014-01-23 07:56 - 04055320 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll
2014-01-29 21:33 - 2014-01-23 07:57 - 00399640 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: AERTFilters => 2
MSCONFIG\Services: AxInstSV => 3
MSCONFIG\Services: bthserv => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: NAUpdate => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCEPServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: AthBtTray => "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
MSCONFIG\startupreg: AtherosBtStack => "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe" /WinStart
MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spybot-S&D Cleaning => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean
MSCONFIG\startupreg: svchospt => C:\Windows\SysWOW64\svchospt.exe
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/05/2014 08:01:23 PM) (Source: ESENT) (User: )
Description: DllHost (4724) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log.

Error: (04/05/2014 08:01:23 PM) (Source: ESENT) (User: )
Description: DllHost (4724) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.

Error: (04/05/2014 08:01:13 PM) (Source: ESENT) (User: )
Description: DllHost (4724) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log.

Error: (04/05/2014 08:01:13 PM) (Source: ESENT) (User: )
Description: DllHost (4724) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.

Error: (04/05/2014 08:01:02 PM) (Source: ESENT) (User: )
Description: DllHost (4724) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log.

Error: (04/05/2014 08:01:02 PM) (Source: ESENT) (User: )
Description: DllHost (4724) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.

Error: (04/05/2014 08:00:52 PM) (Source: ESENT) (User: )
Description: DllHost (4724) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log.

Error: (04/05/2014 08:00:52 PM) (Source: ESENT) (User: )
Description: DllHost (4724) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.

Error: (04/05/2014 08:00:42 PM) (Source: ESENT) (User: )
Description: DllHost (4724) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log.

Error: (04/05/2014 08:00:42 PM) (Source: ESENT) (User: )
Description: DllHost (4724) WebCacheLocal: Versuch, Datei "C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.


System errors:
=============
Error: (04/05/2014 07:59:23 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (04/05/2014 06:30:17 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (04/05/2014 05:54:14 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (04/04/2014 11:38:30 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (04/04/2014 11:38:27 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (04/04/2014 11:22:55 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (04/04/2014 11:22:55 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%5

Error: (04/04/2014 11:22:55 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "TunMirror" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (04/04/2014 11:22:55 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%5

Error: (04/04/2014 11:22:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "KMSServerService" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (04/05/2014 08:01:23 PM) (Source: ESENT)(User: )
Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)

Error: (04/05/2014 08:01:23 PM) (Source: ESENT)(User: )
Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert

Error: (04/05/2014 08:01:13 PM) (Source: ESENT)(User: )
Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)

Error: (04/05/2014 08:01:13 PM) (Source: ESENT)(User: )
Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert

Error: (04/05/2014 08:01:02 PM) (Source: ESENT)(User: )
Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)

Error: (04/05/2014 08:01:02 PM) (Source: ESENT)(User: )
Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert

Error: (04/05/2014 08:00:52 PM) (Source: ESENT)(User: )
Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)

Error: (04/05/2014 08:00:52 PM) (Source: ESENT)(User: )
Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert

Error: (04/05/2014 08:00:42 PM) (Source: ESENT)(User: )
Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)

Error: (04/05/2014 08:00:42 PM) (Source: ESENT)(User: )
Description: DllHost4724WebCacheLocal: C:\Users\Laptop\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)5 (0x00000005)Zugriff verweigert


CodeIntegrity Errors:
===================================
  Date: 2014-04-03 21:23:42.379
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-04-03 21:23:42.194
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 74%
Total physical RAM: 1893.86 MB
Available physical RAM: 474.35 MB
Total Pagefile: 3787.72 MB
Available Pagefile: 1945.85 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:297.99 GB) (Free:133.44 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 73256BD4)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Der Rechnet läuft derzeit Super & besser als vorher

Und bisher hab ich keine Probleme mehr beim Herunterladen und Installieren.
Das beste Bsp. war Ja Maleware Bytes, weil ich das Programm ja vorher nicht vollständig herunterladen konnte und die Installation fehlschlug. Diesmal hat alles Reibungslos geklappt.
Eine Frage habe ich noch und zwar was ist mit den Dateien die in der Quarantäne von Mbam waren.?
Wurden diese jetzt durch zoek entfernt.?
Ansonsten bin ich dir unendlich Dankbar

Vielen vielen Dank

Probleme bei Downloads und Installationen

Plagegeister aller Art und deren Bekämpfung: Probleme bei Downloads und Installationen

Probleme bei Downloads und Installationen

Ähnliche Themen: Probleme bei Downloads und Installationen