Windows7: SearchProtect und TR/Trash.Gen werden gefunden

8lackpearl · 15.04.2014, 23:57

Und weiter gehts...

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Scan Date: 15.04.2014
Scan Time: 19:31:55
Logfile: 140415_MWB.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.04.15.07
Rootkit Database: v2014.03.27.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Admin

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 294101
Time Elapsed: 57 min, 45 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 5
PUP.Optional.ConduitSearchProtect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CltMngSvc, , [f907ad5303fd7c84e22a543ae22134cc], 
PUP.Optional.Softonic.A, HKU\S-1-5-21-1161712945-3826674026-327453916-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\SOFTONIC\Universal Downloader, , [6997a25e5fa1d12f4c9e86e2af53e61a], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1161712945-3826674026-327453916-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [54aca15f887824dc12c2eb8fda28d12f], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1161712945-3826674026-327453916-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\INSTALLCORE, , [a0605aa6d42c23ddd03f9ef3010239c7], 
PUP.Optional.Softonic.A, HKU\S-1-5-21-1161712945-3826674026-327453916-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\SOFTONIC\Universal Downloader, , [39c73bc548b806fa1ecc521658aa847c], 

Registry Values: 1
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1161712945-3826674026-327453916-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\INSTALLCORE|tb, 0H1R1Q1O0G2Z1I1E, , [a0605aa6d42c23ddd03f9ef3010239c7]

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

Code:

ATTFilter

# AdwCleaner v3.023 - Bericht erstellt am 16/04/2014 um 00:19:21
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Admin
# Gestartet von : C:\Users\Julian\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : CltMngSvc

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : \SearchProtect
Ordner Gelöscht : C:\Windows\SysWOW64\hotspot shield
Ordner Gelöscht : C:\Windows\SysWOW64\SearchProtect
Ordner Gelöscht : C:\Users\Julian\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Julian\AppData\LocalLow\boost_interprocess
Ordner Gelöscht : C:\Users\Julian\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Admin\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\DigitalSites
Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\Systweak

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\SearchProtect
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\mlj455kn.default-1397054157018\prefs.js ]


[ Datei : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kagwen5k.default\prefs.js ]


-\\ Google Chrome v34.0.1847.116

[ Datei : C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [4144 octets] - [16/04/2014 00:14:37]
AdwCleaner[S0].txt - [3803 octets] - [16/04/2014 00:19:21]

########## EOF - \AdwCleaner\AdwCleaner[S0].txt - [3863 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Admin on 16.04.2014 at  0:28:05,89
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FB16E5C3-A9E2-47A2-8EFC-319E775E62CC}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\adtrustmedia"
Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\Program Files (x86)\adtrustmedia"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.04.2014 at  0:39:21,21
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-04-2014
Ran by Admin (administrator) on PC25WW7 on 16-04-2014 00:58:49
Running from C:\Users\Julian\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(arvato digital services llc) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2886416 2012-03-01] (Synaptics Incorporated)
HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [170264 2012-04-23] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe [398616 2012-04-23] (Intel Corporation)
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe [439064 2012-04-23] (Intel Corporation)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [BCSSync] => D:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12476520 2012-04-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-03-09] (Realtek Semiconductor)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe [7144960 2013-04-07] (Broadcom Corporation)
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707472 2013-12-13] (Cisco Systems, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] - rmdir /s /q "\SearchProtect"
HKU\S-1-5-21-1161712945-3826674026-327453916-1000\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
HKU\S-1-5-21-1161712945-3826674026-327453916-1000\...\Run: [DAEMON Tools Lite] => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
HKU\S-1-5-21-1161712945-3826674026-327453916-1000\...\MountPoints2: {93442851-df2f-11e1-b180-806e6f6e6963} - F:\setup.exe
HKU\S-1-5-21-1161712945-3826674026-327453916-1004\...\Run: [SecureBanking] => C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-10-23] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-10-23] (NVIDIA Corporation)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk
ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 128.146.48.7 128.146.1.7

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kagwen5k.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - D:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 - d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-11]
CHR Extension: (PrivDog) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja [2014-04-11]
CHR Extension: (Google Wallet) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-11]
CHR HKLM-x32\...\Chrome\Extension: [cgiaikfpllchefojlnehlmpekeogihnm] - C:\Users\Julian\AppData\Local\CRE\cgiaikfpllchefojlnehlmpekeogihnm.crx [2012-07-30]
CHR HKLM-x32\...\Chrome\Extension: [cmaiofennmphjldldcpphcechfnnohja] - C:\Program Files (x86)\AdTrustMedia\PrivDog\PrivDog_chrome.crx [2012-07-30]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.)
S3 Microsoft SharePoint Workspace Audit Service; D:\Program Files\Microsoft Office\Office14\GROOVE.EXE [50942144 2013-12-19] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2013-09-13] (arvato digital services llc)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe [5836800 2013-04-07] (Broadcom Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [76960 2012-02-27] (Atheros)
S2 FreemakeVideoCapture; "C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe" [X]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-09-01] (Intel Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-04-15] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-04-24] (Anchorfree Inc.)
S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52080 2013-10-10] (Cisco Systems, Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-16 00:58 - 2014-04-16 00:59 - 00017048 _____ () C:\Users\Julian\Desktop\FRST.txt
2014-04-16 00:58 - 2014-04-16 00:58 - 00000000 ____D () C:\Users\Julian\Desktop\FRST-OlderVersion
2014-04-16 00:28 - 2014-04-16 00:28 - 00000000 ____D () C:\Windows\ERUNT
2014-04-16 00:25 - 2014-04-16 00:25 - 01016261 _____ (Thisisu) C:\Users\Julian\Desktop\JRT.exe
2014-04-16 00:13 - 2014-04-16 00:19 - 00000000 ____D () C:\AdwCleaner
2014-04-16 00:12 - 2014-04-16 00:12 - 01426178 _____ () C:\Users\Julian\Desktop\adwcleaner.exe
2014-04-15 21:57 - 2014-04-15 21:57 - 02711791 _____ () C:\Users\Julian\Desktop\im22_dis05_2.dm3
2014-04-15 20:54 - 2014-04-15 20:54 - 02733316 _____ () C:\Users\Julian\Desktop\im22_dis05_1.dm3
2014-04-15 19:38 - 2012-05-10 09:36 - 01601011 _____ () C:\Users\Julian\Desktop\tomo2_nano_57kx_285mm_50um_red0_0_red0_12_512.wmv
2014-04-15 02:39 - 2014-04-15 02:39 - 00033494 _____ () C:\Users\Julian\Desktop\ComboFix.txt
2014-04-15 00:57 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-04-15 00:57 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-04-15 00:57 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-04-15 00:57 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-04-15 00:57 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-04-15 00:57 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-04-15 00:57 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-04-15 00:57 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-04-15 00:53 - 2014-04-15 02:39 - 00000000 ____D () C:\Qoobox
2014-04-15 00:52 - 2014-04-15 02:38 - 00000000 ____D () C:\Windows\erdnt
2014-04-15 00:49 - 2014-04-15 00:49 - 05194807 ____R (Swearware) C:\Users\Julian\Desktop\ComboFix.exe
2014-04-14 21:53 - 2014-04-14 21:53 - 00000000 ____D () C:\Users\Julian\Documents\My Palettes
2014-04-14 21:50 - 2014-04-14 21:50 - 00000000 ____D () C:\Users\Julian\Documents\Corel
2014-04-14 21:49 - 2014-04-14 21:49 - 00000000 ____D () C:\ProgramData\Protexis64
2014-04-14 21:48 - 2014-04-14 21:49 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\Corel
2014-04-14 20:58 - 2014-04-14 20:58 - 00000000 ____D () C:\Program Files\Common Files\Corel
2014-04-14 20:58 - 2014-04-14 20:58 - 00000000 ____D () C:\Program Files (x86)\gs
2014-04-14 20:57 - 2014-04-14 20:57 - 00000000 ____D () C:\Program Files\Common Files\Protexis
2014-04-14 20:56 - 2014-04-14 20:56 - 00000000 ____D () C:\Users\Public\Documents\Corel
2014-04-14 20:54 - 2014-04-14 20:57 - 00000000 ____D () C:\ProgramData\Corel
2014-04-14 20:53 - 2014-04-14 20:54 - 00000000 ____D () C:\Program Files\Corel
2014-04-14 20:44 - 2014-04-14 21:29 - 00000000 ____D () C:\ProgramData\CorelDRAW Graphics Suite X7 x64
2014-04-13 04:09 - 2014-04-13 04:09 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\DivX
2014-04-11 22:15 - 2014-04-11 22:15 - 00000000 ____D () C:\Program Files (x86)\Secure Banking
2014-04-11 22:11 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-11 22:11 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-11 22:11 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-11 22:11 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-11 22:11 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-11 22:11 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-11 22:11 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-11 22:11 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-11 22:11 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-11 22:11 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-11 22:11 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-11 22:11 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-11 22:11 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-11 22:11 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-11 22:11 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-11 22:11 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-11 22:11 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-11 22:11 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-11 22:11 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-11 22:11 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-11 22:11 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-11 22:11 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-11 22:11 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-11 22:11 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-11 22:11 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-11 22:11 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-11 22:11 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-11 22:11 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-11 22:11 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-11 22:11 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-11 22:11 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-11 22:11 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-11 22:11 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-11 22:11 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-11 22:11 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-11 22:11 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-11 22:11 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-11 22:11 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-11 22:11 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-11 22:11 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-11 22:11 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-11 22:11 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-11 22:11 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-11 22:11 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-11 22:11 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-11 22:11 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-11 22:11 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-11 22:11 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-11 20:56 - 2014-04-11 20:56 - 00000000 ____D () C:\Users\Admin\AppData\Local\Cisco
2014-04-11 20:42 - 2014-04-11 20:47 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe
2014-04-11 20:39 - 2014-04-11 20:41 - 00002247 _____ () C:\Users\Admin\Desktop\Google Chrome.lnk
2014-04-11 20:39 - 2014-04-11 20:39 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla
2014-04-11 04:46 - 2014-04-11 04:46 - 00000000 ____D () C:\Program Files\AdTrustMedia
2014-04-11 03:27 - 2014-04-13 04:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-11 02:26 - 2014-04-11 02:26 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\DVDVideoSoft
2014-04-10 17:00 - 2014-04-16 00:58 - 02054144 _____ (Farbar) C:\Users\Julian\Desktop\FRST64.exe
2014-04-10 15:06 - 2014-04-10 15:06 - 00380416 _____ () C:\Users\Julian\Downloads\p6je31zl.exe
2014-04-10 14:41 - 2014-04-16 00:58 - 00000000 ____D () C:\FRST
2014-04-10 14:29 - 2014-04-10 14:29 - 00000472 _____ () C:\Users\Julian\Desktop\defogger_disable.log
2014-04-10 14:29 - 2014-04-10 14:29 - 00000000 _____ () C:\Users\Admin\defogger_reenable
2014-04-10 14:28 - 2014-04-10 14:28 - 00050477 _____ () C:\Users\Julian\Desktop\Defogger.exe
2014-04-10 04:54 - 2014-04-10 04:54 - 00283192 _____ (Mozilla) C:\Users\Julian\Downloads\Firefox Setup Stub 28.0 (2).exe
2014-04-10 04:32 - 2014-04-10 04:32 - 00283192 _____ (Mozilla) C:\Users\Julian\Downloads\Firefox Setup Stub 28.0 (1).exe
2014-04-10 04:32 - 2014-04-10 04:32 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\DAEMON Tools Lite
2014-04-10 04:12 - 2014-04-10 04:12 - 00283192 _____ (Mozilla) C:\Users\Julian\Downloads\Firefox Setup Stub 28.0.exe
2014-04-10 03:07 - 2014-04-16 00:54 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-10 03:07 - 2014-04-16 00:12 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-10 03:07 - 2014-04-10 03:07 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-10 03:07 - 2014-04-10 03:07 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-10 03:06 - 2014-04-11 20:41 - 00000000 ____D () C:\Users\Admin\AppData\Local\Google
2014-04-10 03:06 - 2014-04-10 03:09 - 00000000 ____D () C:\Program Files (x86)\Google
2014-04-10 03:00 - 2014-04-10 03:02 - 37852749 _____ (SRWare ) C:\Users\Julian\Downloads\srware_iron_33.0.1800.0.exe
2014-04-10 01:46 - 2014-04-10 01:46 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2014-04-09 22:04 - 2014-04-09 22:04 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\AVAST Software
2014-04-09 21:51 - 2014-04-09 21:54 - 00000000 ____D () C:\Users\Julian\Fiji
2014-04-09 21:42 - 2014-04-09 21:42 - 00000000 ____D () C:\Program Files (x86)\Fiji
2014-04-09 17:13 - 2014-04-09 17:13 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\AVAST Software
2014-04-09 17:07 - 2014-04-11 20:59 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-04-09 16:50 - 2014-04-09 16:59 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-09 16:50 - 2014-04-09 16:50 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-04-09 16:50 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-04-09 16:49 - 2014-04-09 16:50 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-04-09 15:58 - 2014-04-09 15:58 - 00000000 ____D () C:\Users\Admin\AppData\Local\Chromium
2014-04-09 15:52 - 2014-04-09 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Avira
2014-04-09 15:30 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 15:30 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 15:30 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 15:30 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 15:30 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 15:30 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 15:30 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 15:30 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 15:30 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 15:30 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 15:30 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 15:30 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 15:30 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 15:30 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 15:30 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 15:30 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 15:30 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-09 15:27 - 2014-04-09 15:27 - 00000000 ____D () C:\Users\Julian\AppData\Local\Comodo
2014-04-09 04:47 - 2014-04-09 04:49 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-04-09 04:46 - 2014-04-15 02:44 - 00000000 ____D () C:\ProgramData\COMODO
2014-04-09 04:46 - 2014-04-15 02:44 - 00000000 ____D () C:\Program Files\COMODO
2014-04-09 04:39 - 2014-04-09 04:39 - 00000000 ____D () C:\ProgramData\CheckPoint
2014-04-09 04:32 - 2014-04-15 18:34 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-09 04:32 - 2014-04-09 04:32 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-09 04:32 - 2014-04-09 04:32 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-09 04:32 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-09 04:32 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-09 04:32 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-06 01:29 - 2014-04-06 01:29 - 00000000 ____D () C:\Users\Julian\Documents\arma 2
2014-04-06 01:28 - 2014-04-06 01:28 - 00000000 ____D () C:\ProgramData\SIX Networks
2014-04-06 01:26 - 2014-04-06 01:26 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\SIX Networks
2014-04-06 01:26 - 2014-04-06 01:26 - 00000000 ____D () C:\Users\Julian\AppData\Local\SIX Networks
2014-04-06 01:26 - 2014-04-06 01:26 - 00000000 ____D () C:\Users\Julian\AppData\Local\IsolatedStorage
2014-04-04 22:15 - 2014-04-11 22:20 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\inkscape
2014-04-04 22:15 - 2014-04-04 22:15 - 00000218 _____ () C:\Users\Julian\AppData\Local\recently-used.xbel
2014-04-04 19:56 - 2014-04-04 19:56 - 00001333 _____ () C:\Users\Admin\AppData\Local\recently-used.xbel
2014-04-04 19:48 - 2014-04-04 19:49 - 00000000 ____D () C:\Program Files (x86)\Z88AuroraV2
2014-04-04 19:13 - 2014-04-04 19:13 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\inkscape
2014-04-04 19:07 - 2014-04-04 19:13 - 00000000 ____D () C:\Program Files (x86)\Inkscape
2014-04-04 19:01 - 2014-04-04 19:02 - 41017996 _____ () C:\Users\Julian\Downloads\Postervorlage SFB Transregio 103 07Juni11 X3.cdr
2014-04-04 18:54 - 2014-04-04 18:54 - 00000000 ____D () C:\Program Files (x86)\sK1 Project
2014-04-04 18:54 - 2014-04-04 18:54 - 00000000 ____D () C:\Program Files (x86)\MAKEMSI Package Documentation
2014-04-04 18:33 - 2014-04-04 18:33 - 00000000 ____D () C:\ProgramData\Real
2014-04-04 18:33 - 2014-04-04 18:33 - 00000000 ____D () C:\Program Files (x86)\Image Converter
2014-04-04 18:20 - 2014-04-04 18:22 - 42437516 _____ () C:\Users\Julian\Downloads\Postervorlage SFB Transregio 103 07Juni11_X5.cdr
2014-04-02 21:51 - 2014-04-03 05:35 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\Dexpot
2014-04-01 20:41 - 2014-04-01 20:41 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\gtk-2.0
2014-04-01 20:18 - 2014-04-04 18:37 - 00000000 ____D () C:\Program Files\CCleaner
2014-04-01 20:18 - 2014-04-01 20:18 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-04-01 20:08 - 2014-04-01 20:40 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\gtk-2.0
2014-03-30 04:59 - 2014-03-30 04:59 - 00000000 ____D () C:\Users\Julian\Documents\My Games
2014-03-30 04:59 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-03-30 04:59 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-03-30 04:59 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-03-30 04:59 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-03-30 04:59 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-03-30 04:59 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-03-30 04:59 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-03-30 04:59 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-03-30 04:59 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-03-30 04:59 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-03-30 04:59 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-03-30 04:59 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-03-30 04:59 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-03-30 04:59 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-03-30 04:59 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-03-30 04:59 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-03-30 04:59 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-03-30 04:59 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-03-30 04:59 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-03-30 04:59 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-03-30 04:59 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-03-30 04:59 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-03-30 04:59 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-03-30 04:59 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-03-30 04:59 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-03-30 04:59 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-03-30 04:59 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-03-30 04:59 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-03-30 04:59 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-03-30 04:59 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-03-30 04:59 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-03-30 04:59 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-03-30 04:59 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-03-30 04:59 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-03-30 04:59 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-03-30 04:59 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-03-30 04:59 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-03-30 04:59 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-03-30 04:59 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-03-30 04:59 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-03-30 04:59 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-03-30 04:59 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-03-30 04:59 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-03-30 04:59 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-03-30 04:59 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-03-30 04:59 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-03-30 04:59 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-03-30 04:59 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-03-30 04:59 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-03-30 04:59 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-03-30 04:59 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-03-30 04:59 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-03-30 04:59 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-03-30 04:59 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-03-30 04:59 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-03-30 04:59 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-03-30 04:59 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-03-30 04:59 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-03-30 04:59 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-03-30 04:59 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-03-30 04:59 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-03-30 04:59 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-03-30 04:59 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-03-30 04:59 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-03-30 04:59 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-03-30 04:59 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-03-30 04:59 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-03-30 04:59 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-03-30 04:59 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-03-30 04:59 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-03-30 04:59 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-03-30 04:59 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-03-30 04:59 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-03-30 04:59 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-03-30 04:59 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-03-30 04:59 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-03-30 04:59 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-03-30 04:59 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-03-30 04:59 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-03-30 04:59 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-03-30 04:59 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-03-30 04:59 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-03-30 04:59 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-03-30 04:59 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-03-30 04:59 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-03-30 04:59 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-03-30 04:59 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-03-30 04:59 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-03-30 04:59 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-03-30 04:59 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-03-30 04:59 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-03-30 04:59 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-03-30 04:59 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-03-30 04:59 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-03-30 04:59 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-03-30 04:59 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-03-30 04:59 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-03-30 04:59 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-03-30 04:59 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-03-30 04:59 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-03-30 04:59 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-03-30 04:59 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-03-30 04:59 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-03-30 04:59 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-03-30 04:59 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-03-30 04:59 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-03-30 04:59 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-03-30 04:59 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-03-30 04:59 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-03-30 04:59 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-03-30 04:59 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-03-30 04:59 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-03-30 04:59 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-03-30 04:59 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-03-30 04:59 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-03-30 04:59 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-03-30 04:59 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-03-30 04:59 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-03-30 04:59 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-03-30 04:59 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-03-30 04:58 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-03-30 04:58 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-03-30 04:58 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-03-30 04:58 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-03-30 04:58 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-03-30 04:58 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-03-30 04:58 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-03-30 04:58 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-03-30 04:58 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-03-30 04:58 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-03-30 04:58 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-03-30 04:58 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-03-30 04:58 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-03-30 03:35 - 2014-03-30 03:35 - 00000000 ____D () C:\SteamLibrary
2014-03-30 00:36 - 2014-03-30 00:36 - 00000000 ____D () C:\Users\Julian\Documents\Diablo III
2014-03-30 00:23 - 2014-03-30 00:35 - 00000000 ____D () C:\Program Files (x86)\Diablo III
2014-03-30 00:16 - 2014-03-30 04:10 - 00000000 ____D () C:\Users\Julian\AppData\Local\Battle.net
2014-03-30 00:16 - 2014-03-30 00:17 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\Battle.net
2014-03-30 00:16 - 2014-03-30 00:16 - 00000000 ____D () C:\Users\Julian\AppData\Local\Blizzard Entertainment
2014-03-30 00:16 - 2014-03-30 00:16 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-03-30 00:16 - 2014-03-30 00:16 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-03-30 00:14 - 2014-03-30 00:14 - 00000000 ____D () C:\ProgramData\Battle.net
2014-03-29 23:05 - 2014-03-29 23:05 - 00000000 ____D () C:\Crash
2014-03-29 21:44 - 2014-03-29 21:44 - 00000000 ____D () C:\Users\Admin\AppData\Local\SCE
2014-03-29 21:40 - 2010-06-02 05:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-03-29 21:40 - 2010-06-02 05:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-03-29 21:40 - 2010-05-26 12:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-03-29 21:40 - 2010-05-26 12:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-03-29 21:40 - 2010-05-26 12:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-03-29 21:40 - 2010-05-26 12:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-03-29 21:39 - 2014-03-29 21:39 - 00002477 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlanetSide 2.lnk
2014-03-29 21:39 - 2014-03-29 21:39 - 00000000 ____D () C:\Users\Public\Sony Online Entertainment
2014-03-29 06:00 - 2014-03-29 06:00 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-03-29 04:03 - 2010-06-02 05:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-03-29 04:03 - 2010-06-02 05:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-03-29 04:03 - 2010-06-02 05:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-03-29 04:03 - 2010-06-02 05:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-03-29 04:03 - 2007-04-04 19:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-03-29 04:03 - 2007-04-04 19:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-03-28 15:40 - 2014-03-28 15:40 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Macromedia
2014-03-28 15:40 - 2014-03-28 15:40 - 00000000 ____D () C:\Users\Admin\AppData\Local\Macromedia
2014-03-28 15:39 - 2014-03-28 15:39 - 00000000 ____D () C:\Users\Admin\AppData\Local\Mozilla
2014-03-28 15:38 - 2014-04-15 02:45 - 00109984 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-28 15:38 - 2014-03-28 15:38 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Intel Corporation
2014-03-28 15:37 - 2014-03-28 15:37 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Synaptics
2014-03-28 15:37 - 2014-03-28 15:37 - 00000000 ____D () C:\Users\Admin\AppData\Local\NVIDIA Corporation
2014-03-28 15:36 - 2014-04-15 02:44 - 00000000 ____D () C:\Users\Admin\AppData\Local\VirtualStore
2014-03-28 15:36 - 2014-04-04 18:40 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-28 15:36 - 2014-03-28 15:38 - 00000000 ____D () C:\Users\Admin\AppData\Local\NVIDIA
2014-03-28 15:36 - 2014-03-28 15:36 - 00001421 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-28 15:36 - 2014-03-28 15:36 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-28 15:36 - 2014-03-28 15:36 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Adobe
2014-03-28 15:35 - 2014-04-10 14:29 - 00000000 ____D () C:\Users\Admin
2014-03-28 15:35 - 2014-03-28 15:35 - 00000020 ___SH () C:\Users\Admin\ntuser.ini
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Vorlagen
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Startmenü
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Netzwerkumgebung
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Lokale Einstellungen
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Eigene Dateien
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Druckumgebung
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Musik
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Bilder
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Verlauf
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Anwendungsdaten
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Anwendungsdaten
2014-03-28 15:35 - 2012-09-29 01:13 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help
2014-03-28 15:35 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-03-28 15:35 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-03-24 20:07 - 2014-03-24 21:56 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\FreeCAD
2014-03-24 19:55 - 2014-03-24 19:55 - 00000000 ____D () C:\Program Files (x86)\FreeCAD0.13
2014-03-20 23:43 - 2014-03-20 23:43 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\IrfanView
2014-03-20 23:43 - 2014-03-20 23:43 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-03-18 19:35 - 2014-04-13 04:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-17 20:24 - 2014-03-17 20:24 - 00001334 _____ () C:\Users\Julian\Desktop\jems.lnk
2014-03-17 18:07 - 2014-03-18 18:15 - 00000000 ____D () C:\Users\Julian\AppData\Local\Thunderbird
2014-03-17 18:07 - 2014-03-17 18:07 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\Thunderbird
2014-03-17 18:00 - 2014-03-18 23:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-17 18:00 - 2014-03-17 18:00 - 00002086 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-03-17 18:00 - 2014-03-17 18:00 - 00000000 ____D () C:\ProgramData\Mozilla

==================== One Month Modified Files and Folders =======

2014-04-16 00:59 - 2014-04-16 00:58 - 00017048 _____ () C:\Users\Julian\Desktop\FRST.txt
2014-04-16 00:58 - 2014-04-16 00:58 - 00000000 ____D () C:\Users\Julian\Desktop\FRST-OlderVersion
2014-04-16 00:58 - 2014-04-10 17:00 - 02054144 _____ (Farbar) C:\Users\Julian\Desktop\FRST64.exe
2014-04-16 00:58 - 2014-04-10 14:41 - 00000000 ____D () C:\FRST
2014-04-16 00:56 - 2012-08-01 22:08 - 01660004 _____ () C:\Windows\WindowsUpdate.log
2014-04-16 00:55 - 2009-07-14 06:45 - 00013456 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-16 00:55 - 2009-07-14 06:45 - 00013456 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-16 00:54 - 2014-04-10 03:07 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-16 00:48 - 2013-04-07 18:57 - 00088822 _____ () C:\Windows\setupact.log
2014-04-16 00:47 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-16 00:28 - 2014-04-16 00:28 - 00000000 ____D () C:\Windows\ERUNT
2014-04-16 00:25 - 2014-04-16 00:25 - 01016261 _____ (Thisisu) C:\Users\Julian\Desktop\JRT.exe
2014-04-16 00:19 - 2014-04-16 00:13 - 00000000 ____D () C:\AdwCleaner
2014-04-16 00:12 - 2014-04-16 00:12 - 01426178 _____ () C:\Users\Julian\Desktop\adwcleaner.exe
2014-04-16 00:12 - 2014-04-10 03:07 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-16 00:08 - 2013-07-12 05:30 - 00721558 _____ () C:\Windows\PFRO.log
2014-04-15 22:40 - 2013-03-02 19:01 - 00000000 ____D () C:\ProgramData\Cisco
2014-04-15 22:40 - 2013-03-02 19:01 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-04-15 22:09 - 2009-07-14 19:58 - 00700720 _____ () C:\Windows\system32\perfh007.dat
2014-04-15 22:09 - 2009-07-14 19:58 - 00150326 _____ () C:\Windows\system32\perfc007.dat
2014-04-15 22:09 - 2009-07-14 07:13 - 01624106 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-15 21:57 - 2014-04-15 21:57 - 02711791 _____ () C:\Users\Julian\Desktop\im22_dis05_2.dm3
2014-04-15 20:54 - 2014-04-15 20:54 - 02733316 _____ () C:\Users\Julian\Desktop\im22_dis05_1.dm3
2014-04-15 18:34 - 2014-04-09 04:32 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-15 17:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-15 16:07 - 2012-11-28 18:42 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\Skype
2014-04-15 02:45 - 2014-03-28 15:38 - 00109984 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-15 02:44 - 2014-04-09 04:46 - 00000000 ____D () C:\ProgramData\COMODO
2014-04-15 02:44 - 2014-04-09 04:46 - 00000000 ____D () C:\Program Files\COMODO
2014-04-15 02:44 - 2014-03-28 15:36 - 00000000 ____D () C:\Users\Admin\AppData\Local\VirtualStore
2014-04-15 02:39 - 2014-04-15 02:39 - 00033494 _____ () C:\Users\Julian\Desktop\ComboFix.txt
2014-04-15 02:39 - 2014-04-15 00:53 - 00000000 ____D () C:\Qoobox
2014-04-15 02:38 - 2014-04-15 00:52 - 00000000 ____D () C:\Windows\erdnt
2014-04-15 02:35 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-04-15 01:14 - 2009-07-14 06:45 - 00430104 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-15 00:49 - 2014-04-15 00:49 - 05194807 ____R (Swearware) C:\Users\Julian\Desktop\ComboFix.exe
2014-04-14 21:53 - 2014-04-14 21:53 - 00000000 ____D () C:\Users\Julian\Documents\My Palettes
2014-04-14 21:50 - 2014-04-14 21:50 - 00000000 ____D () C:\Users\Julian\Documents\Corel
2014-04-14 21:50 - 2012-08-01 22:15 - 00109984 _____ () C:\Users\Julian\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-14 21:49 - 2014-04-14 21:49 - 00000000 ____D () C:\ProgramData\Protexis64
2014-04-14 21:49 - 2014-04-14 21:48 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\Corel
2014-04-14 21:29 - 2014-04-14 20:44 - 00000000 ____D () C:\ProgramData\CorelDRAW Graphics Suite X7 x64
2014-04-14 20:58 - 2014-04-14 20:58 - 00000000 ____D () C:\Program Files\Common Files\Corel
2014-04-14 20:58 - 2014-04-14 20:58 - 00000000 ____D () C:\Program Files (x86)\gs
2014-04-14 20:57 - 2014-04-14 20:57 - 00000000 ____D () C:\Program Files\Common Files\Protexis
2014-04-14 20:57 - 2014-04-14 20:54 - 00000000 ____D () C:\ProgramData\Corel
2014-04-14 20:56 - 2014-04-14 20:56 - 00000000 ____D () C:\Users\Public\Documents\Corel
2014-04-14 20:54 - 2014-04-14 20:53 - 00000000 ____D () C:\Program Files\Corel
2014-04-14 20:36 - 2012-09-25 19:59 - 00000000 ____D () C:\Users\Julian\AppData\Local\Microsoft Help
2014-04-13 19:58 - 2014-03-11 15:24 - 00000000 _____ () C:\Users\Julian\jemsConsole.txt
2014-04-13 19:58 - 2012-08-01 22:02 - 00000000 ____D () C:\Users\Julian
2014-04-13 04:10 - 2014-04-11 03:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-13 04:10 - 2014-03-18 19:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-13 04:10 - 2013-10-12 21:00 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-04-13 04:10 - 2013-10-12 20:59 - 00000000 ____D () C:\ProgramData\DivX
2014-04-13 04:09 - 2014-04-13 04:09 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\DivX
2014-04-11 22:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-11 22:20 - 2014-04-04 22:15 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\inkscape
2014-04-11 22:15 - 2014-04-11 22:15 - 00000000 ____D () C:\Program Files (x86)\Secure Banking
2014-04-11 21:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-11 20:59 - 2014-04-09 17:07 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-04-11 20:56 - 2014-04-11 20:56 - 00000000 ____D () C:\Users\Admin\AppData\Local\Cisco
2014-04-11 20:47 - 2014-04-11 20:42 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe
2014-04-11 20:41 - 2014-04-11 20:39 - 00002247 _____ () C:\Users\Admin\Desktop\Google Chrome.lnk
2014-04-11 20:41 - 2014-04-10 03:06 - 00000000 ____D () C:\Users\Admin\AppData\Local\Google
2014-04-11 20:39 - 2014-04-11 20:39 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla
2014-04-11 04:46 - 2014-04-11 04:46 - 00000000 ____D () C:\Program Files\AdTrustMedia
2014-04-11 02:26 - 2014-04-11 02:26 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\DVDVideoSoft
2014-04-11 00:46 - 2012-10-08 11:22 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\vlc
2014-04-10 15:06 - 2014-04-10 15:06 - 00380416 _____ () C:\Users\Julian\Downloads\p6je31zl.exe
2014-04-10 14:29 - 2014-04-10 14:29 - 00000472 _____ () C:\Users\Julian\Desktop\defogger_disable.log
2014-04-10 14:29 - 2014-04-10 14:29 - 00000000 _____ () C:\Users\Admin\defogger_reenable
2014-04-10 14:29 - 2014-03-28 15:35 - 00000000 ____D () C:\Users\Admin
2014-04-10 14:28 - 2014-04-10 14:28 - 00050477 _____ () C:\Users\Julian\Desktop\Defogger.exe
2014-04-10 04:54 - 2014-04-10 04:54 - 00283192 _____ (Mozilla) C:\Users\Julian\Downloads\Firefox Setup Stub 28.0 (2).exe
2014-04-10 04:32 - 2014-04-10 04:32 - 00283192 _____ (Mozilla) C:\Users\Julian\Downloads\Firefox Setup Stub 28.0 (1).exe
2014-04-10 04:32 - 2014-04-10 04:32 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\DAEMON Tools Lite
2014-04-10 04:12 - 2014-04-10 04:12 - 00283192 _____ (Mozilla) C:\Users\Julian\Downloads\Firefox Setup Stub 28.0.exe
2014-04-10 03:09 - 2014-04-10 03:06 - 00000000 ____D () C:\Program Files (x86)\Google
2014-04-10 03:07 - 2014-04-10 03:07 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-10 03:07 - 2014-04-10 03:07 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-10 03:02 - 2014-04-10 03:00 - 37852749 _____ (SRWare ) C:\Users\Julian\Downloads\srware_iron_33.0.1800.0.exe
2014-04-10 01:46 - 2014-04-10 01:46 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2014-04-09 22:26 - 2012-08-01 22:35 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-09 22:26 - 2012-08-01 22:35 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-09 22:04 - 2014-04-09 22:04 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\AVAST Software
2014-04-09 21:54 - 2014-04-09 21:51 - 00000000 ____D () C:\Users\Julian\Fiji
2014-04-09 21:42 - 2014-04-09 21:42 - 00000000 ____D () C:\Program Files (x86)\Fiji
2014-04-09 17:13 - 2014-04-09 17:13 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\AVAST Software
2014-04-09 16:59 - 2014-04-09 16:50 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-09 16:50 - 2014-04-09 16:50 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-04-09 16:50 - 2014-04-09 16:49 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-04-09 16:03 - 2012-08-22 22:52 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-04-09 15:58 - 2014-04-09 15:58 - 00000000 ____D () C:\Users\Admin\AppData\Local\Chromium
2014-04-09 15:52 - 2014-04-09 15:52 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Avira
2014-04-09 15:39 - 2012-09-25 19:59 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-09 15:37 - 2013-07-14 08:47 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 15:36 - 2012-08-04 23:35 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-09 15:34 - 2012-11-04 21:22 - 00000000 ____D () C:\Users\Julian\AppData\Local\PMB Files
2014-04-09 15:27 - 2014-04-09 15:27 - 00000000 ____D () C:\Users\Julian\AppData\Local\Comodo
2014-04-09 04:49 - 2014-04-09 04:47 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-04-09 04:39 - 2014-04-09 04:39 - 00000000 ____D () C:\ProgramData\CheckPoint
2014-04-09 04:32 - 2014-04-09 04:32 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-09 04:32 - 2014-04-09 04:32 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-08 22:22 - 2014-01-02 20:21 - 00000000 ____D () C:\Users\Julian\Documents\Origin
2014-04-06 01:29 - 2014-04-06 01:29 - 00000000 ____D () C:\Users\Julian\Documents\arma 2
2014-04-06 01:28 - 2014-04-06 01:28 - 00000000 ____D () C:\ProgramData\SIX Networks
2014-04-06 01:26 - 2014-04-06 01:26 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\SIX Networks
2014-04-06 01:26 - 2014-04-06 01:26 - 00000000 ____D () C:\Users\Julian\AppData\Local\SIX Networks
2014-04-06 01:26 - 2014-04-06 01:26 - 00000000 ____D () C:\Users\Julian\AppData\Local\IsolatedStorage
2014-04-06 01:25 - 2013-02-24 13:06 - 00000000 ____D () C:\Users\Julian\AppData\Local\Downloaded Installations
2014-04-04 22:15 - 2014-04-04 22:15 - 00000218 _____ () C:\Users\Julian\AppData\Local\recently-used.xbel
2014-04-04 19:56 - 2014-04-04 19:56 - 00001333 _____ () C:\Users\Admin\AppData\Local\recently-used.xbel
2014-04-04 19:49 - 2014-04-04 19:48 - 00000000 ____D () C:\Program Files (x86)\Z88AuroraV2
2014-04-04 19:13 - 2014-04-04 19:13 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\inkscape
2014-04-04 19:13 - 2014-04-04 19:07 - 00000000 ____D () C:\Program Files (x86)\Inkscape
2014-04-04 19:02 - 2014-04-04 19:01 - 41017996 _____ () C:\Users\Julian\Downloads\Postervorlage SFB Transregio 103 07Juni11 X3.cdr
2014-04-04 18:54 - 2014-04-04 18:54 - 00000000 ____D () C:\Program Files (x86)\sK1 Project
2014-04-04 18:54 - 2014-04-04 18:54 - 00000000 ____D () C:\Program Files (x86)\MAKEMSI Package Documentation
2014-04-04 18:47 - 2013-08-14 23:13 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\DAEMON Tools Lite
2014-04-04 18:40 - 2014-03-28 15:36 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-04 18:37 - 2014-04-01 20:18 - 00000000 ____D () C:\Program Files\CCleaner
2014-04-04 18:33 - 2014-04-04 18:33 - 00000000 ____D () C:\ProgramData\Real
2014-04-04 18:33 - 2014-04-04 18:33 - 00000000 ____D () C:\Program Files (x86)\Image Converter
2014-04-04 18:22 - 2014-04-04 18:20 - 42437516 _____ () C:\Users\Julian\Downloads\Postervorlage SFB Transregio 103 07Juni11_X5.cdr
2014-04-03 09:51 - 2014-04-09 04:32 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-09 04:32 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-09 04:32 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-03 05:35 - 2014-04-02 21:51 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\Dexpot
2014-04-01 20:41 - 2014-04-01 20:41 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\gtk-2.0
2014-04-01 20:40 - 2014-04-01 20:08 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\gtk-2.0
2014-04-01 20:18 - 2014-04-01 20:18 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-30 04:59 - 2014-03-30 04:59 - 00000000 ____D () C:\Users\Julian\Documents\My Games
2014-03-30 04:59 - 2013-05-14 12:49 - 00013240 _____ () C:\Windows\Directx.log
2014-03-30 04:10 - 2014-03-30 00:16 - 00000000 ____D () C:\Users\Julian\AppData\Local\Battle.net
2014-03-30 03:35 - 2014-03-30 03:35 - 00000000 ____D () C:\SteamLibrary
2014-03-30 00:36 - 2014-03-30 00:36 - 00000000 ____D () C:\Users\Julian\Documents\Diablo III
2014-03-30 00:35 - 2014-03-30 00:23 - 00000000 ____D () C:\Program Files (x86)\Diablo III
2014-03-30 00:17 - 2014-03-30 00:16 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\Battle.net
2014-03-30 00:16 - 2014-03-30 00:16 - 00000000 ____D () C:\Users\Julian\AppData\Local\Blizzard Entertainment
2014-03-30 00:16 - 2014-03-30 00:16 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-03-30 00:16 - 2014-03-30 00:16 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-03-30 00:14 - 2014-03-30 00:14 - 00000000 ____D () C:\ProgramData\Battle.net
2014-03-30 00:06 - 2013-02-24 13:13 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-03-30 00:05 - 2013-02-24 13:13 - 00000000 ____D () C:\ProgramData\Samsung
2014-03-30 00:05 - 2012-08-01 22:10 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-29 23:05 - 2014-03-29 23:05 - 00000000 ____D () C:\Crash
2014-03-29 21:44 - 2014-03-29 21:44 - 00000000 ____D () C:\Users\Admin\AppData\Local\SCE
2014-03-29 21:39 - 2014-03-29 21:39 - 00002477 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlanetSide 2.lnk
2014-03-29 21:39 - 2014-03-29 21:39 - 00000000 ____D () C:\Users\Public\Sony Online Entertainment
2014-03-29 06:00 - 2014-03-29 06:00 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-03-29 06:00 - 2013-05-14 19:36 - 00000000 ____D () C:\Users\Julian\AppData\Local\Warframe
2014-03-29 03:20 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-28 19:28 - 2014-03-11 15:24 - 00000000 ____D () C:\Users\Julian\jems
2014-03-28 15:40 - 2014-03-28 15:40 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Macromedia
2014-03-28 15:40 - 2014-03-28 15:40 - 00000000 ____D () C:\Users\Admin\AppData\Local\Macromedia
2014-03-28 15:39 - 2014-03-28 15:39 - 00000000 ____D () C:\Users\Admin\AppData\Local\Mozilla
2014-03-28 15:38 - 2014-03-28 15:38 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Intel Corporation
2014-03-28 15:38 - 2014-03-28 15:36 - 00000000 ____D () C:\Users\Admin\AppData\Local\NVIDIA
2014-03-28 15:37 - 2014-03-28 15:37 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Synaptics
2014-03-28 15:37 - 2014-03-28 15:37 - 00000000 ____D () C:\Users\Admin\AppData\Local\NVIDIA Corporation
2014-03-28 15:36 - 2014-03-28 15:36 - 00001421 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-28 15:36 - 2014-03-28 15:36 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-28 15:36 - 2014-03-28 15:36 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Adobe
2014-03-28 15:35 - 2014-03-28 15:35 - 00000020 ___SH () C:\Users\Admin\ntuser.ini
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Vorlagen
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Startmenü
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Netzwerkumgebung
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Lokale Einstellungen
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Eigene Dateien
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Druckumgebung
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Musik
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Bilder
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Verlauf
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Anwendungsdaten
2014-03-28 15:35 - 2014-03-28 15:35 - 00000000 _SHDL () C:\Users\Admin\Anwendungsdaten
2014-03-24 21:56 - 2014-03-24 20:07 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\FreeCAD
2014-03-24 19:55 - 2014-03-24 19:55 - 00000000 ____D () C:\Program Files (x86)\FreeCAD0.13
2014-03-20 23:43 - 2014-03-20 23:43 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\IrfanView
2014-03-20 23:43 - 2014-03-20 23:43 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-03-19 18:45 - 2014-03-11 14:56 - 00000000 ____D () C:\Users\Julian\Setups
2014-03-18 23:48 - 2014-03-17 18:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-18 18:15 - 2014-03-17 18:07 - 00000000 ____D () C:\Users\Julian\AppData\Local\Thunderbird
2014-03-17 20:24 - 2014-03-17 20:24 - 00001334 _____ () C:\Users\Julian\Desktop\jems.lnk
2014-03-17 18:07 - 2014-03-17 18:07 - 00000000 ____D () C:\Users\Julian\AppData\Roaming\Thunderbird
2014-03-17 18:00 - 2014-03-17 18:00 - 00002086 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-03-17 18:00 - 2014-03-17 18:00 - 00000000 ____D () C:\ProgramData\Mozilla

Files to move or delete:
====================
C:\Users\Julian\Components.dat
C:\Users\Julian\Menu.dat
C:\Users\Julian\Processing.dat
C:\Users\Julian\Styles.dat


Some content of TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\avgnt.exe
C:\Users\Admin\AppData\Local\Temp\Quarantine.exe
C:\Users\Julian\AppData\Local\Temp\20140415103927962jniverify.dll
C:\Users\Julian\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-15 17:33

==================== End Of Log ============================

--- --- ---

Windows7: SearchProtect und TR/Trash.Gen werden gefunden

Log-Analyse und Auswertung: Windows7: SearchProtect und TR/Trash.Gen werden gefunden

Windows7: SearchProtect und TR/Trash.Gen werden gefunden

Ähnliche Themen: Windows7: SearchProtect und TR/Trash.Gen werden gefunden