Windows 7: Weiterleitung auf nicht gewünschte Internetseiten

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-05-2014 01
Ran by Martin (administrator) on MARTIN-PC on 01-05-2014 21:25:29
Running from C:\Users\Martin\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
() C:\Users\Martin\AppData\Roaming\InetStat\inetstat.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files\Fractal Audio\Axe-Fx II Driver\FASUSBAudioCpl.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
() C:\Program Files (x86)\AVG Secure Search\vprot.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dropbox, Inc.) C:\Users\Martin\AppData\Roaming\Dropbox\bin\Dropbox.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe
(Lavasoft) C:\ProgramData\Search Protection\SearchProtection.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Windows\Microsoft\System Update kb70007\WindowsUpdater.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
(Memeo) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\loggingserver.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(The Privoxy team - www.privoxy.org) C:\Program Files (x86)\MSR\Privoxy\privoxy.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11490408 2010-10-22] (Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [4114264 2014-01-23] ()
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-03] (CyberLink)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Secure Search\vprot.exe [2557976 2014-04-28] ()
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Reader Application Helper] => C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [898952 2012-11-08] (Sony Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3873704 2014-05-01] (AVAST Software)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-02-14] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3821592 2012-10-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Ad-Aware Browsing Protection] => C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft)
HKLM-x32\...\Run: [Search Protection] => C:\ProgramData\Search Protection\SearchProtection.exe [949512 2014-02-17] (Lavasoft)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1672097035-3043532398-4152351780-1000\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 5\CyberGhost.EXE [361072 2013-12-17] (CyberGhost S.R.L.)
HKU\S-1-5-21-1672097035-3043532398-4152351780-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-02-14] (Samsung)
HKU\S-1-5-21-1672097035-3043532398-4152351780-1000\...\Run: [KiesAirMessage] => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-1672097035-3043532398-4152351780-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-14] (Samsung)
HKU\S-1-5-21-1672097035-3043532398-4152351780-1000\...\Run: [InetStat] => C:\Users\Martin\AppData\Roaming\InetStat\inetstat.exe [1259488 2014-05-01] ()
HKU\S-1-5-21-1672097035-3043532398-4152351780-1000\...\MountPoints2: {91105d6f-907a-11e1-b0af-6c626dc23457} - "H:\WD SmartWare.exe" autoplay=true
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FASUSBAudio Control Panel Autostart.lnk
ShortcutTarget: FASUSBAudio Control Panel Autostart.lnk -> C:\Program Files\Fractal Audio\Axe-Fx II Driver\FASUSBAudioCpl.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk
ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (WDC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDSmartWare.lnk
ShortcutTarget: WDSmartWare.lnk -> C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Western Digital)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Martin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:8118;https=127.0.0.1:8118
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.v9.com/web/?type=ds&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.v9.com/?type=hp&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.v9.com/?type=hp&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.v9.com/web/?type=ds&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.v9.com/web/?type=ds&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.v9.com/?type=hp&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.v9.com/?type=hp&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.v9.com/web/?type=ds&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.v9.com/web/?type=ds&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.v9.com/?type=hp&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.v9.com/?type=hp&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.v9.com/web/?type=ds&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf&q={searchTerms}
URLSearchHook: HKLM-x32 - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
URLSearchHook: HKCU - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.v9.com/?type=sc&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.v9.com/web/?type=ds&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.v9.com/web/?type=ds&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf&q={searchTerms}
SearchScopes: HKLM-x32 - {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKCU - DefaultScope {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-01&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.v9.com/web/?type=ds&ts=1398945529&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d625bf&q={searchTerms}
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-05-01&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
SearchScopes: HKCU - {4F677936-5DD1-46C7-9BFC-C51AA38C0B5A} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=7a32b2f9000000000000001f1fe34454&r=379
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={20096F83-3B74-4538-821C-9499DE44C713}&mid=770a22083ad747d08d9b0e377e40cd74-48f85744326cefa5bb6c5bc12dc4480f99b58636&lang=de&ds=od011&pr=sa&d=2012-09-22 17:51:37&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
BHO: Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx64.dll ()
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO-x32: Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll ()
BHO-x32: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.1.0.443\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM - Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx64.dll ()
Toolbar: HKLM-x32 - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.1.0.443\AVG Secure Search_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll ()
Toolbar: HKCU - No Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll (AVG Secure Search)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: v9
FF SelectedSearchEngine: v9
FF Homepage: hxxp://www.v9.com/?type=hppp&ts=1398970332&from=irs&uid=HitachiXHCS5C1010CLA382_JC0950HX0P1P7H0P1P7HX&i=psd&t=341d9ee9d
FF Keyword.URL: hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_8&idate=__installtime__&hsimp=yhs-lavasoft&ent=bs&q=
FF NetworkProxy: "http", "127.0.0.1"
FF NetworkProxy: "http_port", 8118
FF NetworkProxy: "ssl", "127.0.0.1"
FF NetworkProxy: "ssl_port", 8118
FF NetworkProxy: "type", 1
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.0\\npsitesafety.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Program Files (x86)\TVUPlayer\npTVUAx.dll (TVU networks)
FF Plugin-x32: @sony.com/ReaderDesktop - C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\searchplugins\softonic.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\adawaretb.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\v9.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: TVU Web Player - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\Extensions\firefox@tvunetworks.com [2013-04-23]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\Extensions\ich@maltegoetz.de [2013-12-12]
FF Extension: Quick Start - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\Extensions\quick_start@gmail.com [2014-05-01]
FF Extension: YouTube Unblocker - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\Extensions\youtubeunblocker@unblocker.yt [2014-04-23]
FF Extension: DVDVideoSoftTB  - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} [2013-11-23]
FF Extension: Ad-Aware Security Add-on - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\Extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c} [2014-05-01]
FF Extension: YouTube Video and Audio Downloader - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\Extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi [2013-01-26]
FF Extension: {1529350b-eff7-4d1a-8fc7-74cd04bc395a} - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\Extensions\{1529350b-eff7-4d1a-8fc7-74cd04bc395a}.xpi [2013-10-30]
FF Extension: PDF Print Plugin Pro - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\Extensions\{20aaea64-f701-4b5e-8779-f447088b5746}.xpi [2013-11-06]
FF Extension: FireFTP - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi [2011-09-10]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-12-01]
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\18.1.0.443
FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\18.1.0.443 [2014-04-28]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []
FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\extensions\quick_start@gmail.com
FF Extension: Quick Start - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\ulf5dvon.default\extensions\quick_start@gmail.com [2014-05-01]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Softonic Chrome Toolbar) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf [2013-10-30]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-10-30]
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\18.1.0.443\avg.crx [2014-04-28]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-05-01] (AVAST Software)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [63600 2013-12-17] (CyberGhost S.R.L)
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)
R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [702744 2014-01-23] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1100320 2012-10-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1367576 2012-10-24] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-10-24] (Safer-Networking Ltd.)
R2 System Update kb70007; C:\Windows\Microsoft\System Update kb70007\WindowsUpdater.exe [16384 2014-04-23] ()
R2 vToolbarUpdater18.1.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe [1801240 2014-04-28] (AVG Secure Search)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [566272 2014-05-01] (Cherished Technololgy LIMITED)

==================== Drivers (Whitelisted) ====================

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-01] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-05-01] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-05-01] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-05-01] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-01] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-01] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-05-01] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-04-28] (AVG Technologies)
S3 axefx2load; C:\Windows\System32\Drivers\axefx2load.sys [55600 2011-11-01] (Cypress Semiconductor)
S3 fasusbaudio; C:\Windows\System32\DRIVERS\fasusbaudio_x64.sys [252120 2013-06-07] ()
S3 fasusbaudioks; C:\Windows\System32\DRIVERS\fasusbaudioks_x64.sys [53464 2013-06-07] ()
S3 IAMTVE; C:\Windows\system32\DRIVERS\IAMTVE.sys [43416 2007-04-12] (Intel Corporation)
S3 IAMTXPE; C:\Windows\system32\DRIVERS\IAMTXPE.sys [51096 2007-04-12] (Intel Corporation)
R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 synusb64; C:\Windows\System32\DRIVERS\synusb64.sys [30352 2010-09-17] (Steinberg Media Technologies GmbH)
R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2012-03-02] (LG Electronics Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-02 06:59 - 2014-05-01 21:25 - 00000000 ____D () C:\FRST
2014-05-01 21:25 - 2014-05-01 21:25 - 00028261 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-05-01 21:24 - 2014-05-01 21:24 - 00000474 _____ () C:\Users\Martin\Desktop\defogger_disable.log
2014-05-01 21:24 - 2014-05-01 21:24 - 00000000 _____ () C:\Users\Martin\defogger_reenable
2014-05-01 21:23 - 2014-05-01 21:20 - 00050477 _____ () C:\Users\Martin\Desktop\Defogger.exe
2014-05-01 21:22 - 2014-05-01 21:22 - 00380416 _____ () C:\Users\Martin\Desktop\Gmer-19357.exe
2014-05-01 21:22 - 2014-05-01 20:23 - 02061824 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2014-05-01 20:27 - 2014-05-01 21:22 - 00000000 ____D () C:\Users\Martin\Documents\2014 TROJANER
2014-05-01 20:23 - 2014-05-01 20:23 - 02061824 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2014-05-01 17:16 - 2014-05-01 17:16 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\LavasoftStatistics
2014-05-01 16:41 - 2014-05-01 21:08 - 00002309 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2014-05-01 16:41 - 2014-05-01 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus
2014-05-01 16:39 - 2014-05-01 16:39 - 00000000 ____D () C:\Program Files\Lavasoft
2014-05-01 16:38 - 2014-05-01 21:08 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection
2014-05-01 16:38 - 2014-05-01 16:38 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\SecureSearch
2014-05-01 16:38 - 2014-05-01 16:38 - 00000000 ____D () C:\Users\Martin\AppData\Local\adawarebp
2014-05-01 16:38 - 2014-05-01 16:38 - 00000000 ____D () C:\ProgramData\Search Protection
2014-05-01 16:38 - 2014-05-01 16:38 - 00000000 ____D () C:\Program Files (x86)\Toolbar Cleaner
2014-05-01 16:38 - 2014-05-01 16:38 - 00000000 ____D () C:\Program Files (x86)\Lavasoft
2014-05-01 16:37 - 2014-05-01 16:37 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Lavasoft
2014-05-01 16:37 - 2014-05-01 16:37 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2014-05-01 16:35 - 2014-05-01 16:35 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-05-01 16:29 - 2014-05-01 20:52 - 00001635 _____ () C:\Users\Martin\Desktop\Internet Explorer.lnk
2014-05-01 14:02 - 2014-05-01 14:02 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-05-01 14:02 - 2014-05-01 14:02 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-01 14:01 - 2014-05-01 14:01 - 00000000 __SHD () C:\Users\Martin\AppData\Local\EmieUserList
2014-05-01 14:01 - 2014-05-01 14:01 - 00000000 __SHD () C:\Users\Martin\AppData\Local\EmieSiteList
2014-05-01 13:59 - 2014-05-01 13:59 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\v9
2014-05-01 13:59 - 2014-05-01 13:59 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\SupTab
2014-05-01 13:59 - 2014-05-01 13:59 - 00000000 ____D () C:\ProgramData\WPM
2014-05-01 13:59 - 2014-05-01 13:59 - 00000000 ____D () C:\ProgramData\IePluginService
2014-05-01 13:59 - 2014-05-01 13:59 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-05-01 13:59 - 2014-05-01 13:59 - 00000000 ____D () C:\Program Files (x86)\MSR
2014-05-01 13:58 - 2014-05-01 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Wise
2014-05-01 13:58 - 2014-05-01 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\InetStat
2014-05-01 13:56 - 2014-05-01 13:56 - 00241960 _____ (Premium Installer ) C:\Users\Martin\Downloads\Player-Firefox.exe
2014-05-01 12:42 - 2014-05-01 12:42 - 00001837 _____ () C:\Users\Public\Desktop\Mixxx.lnk
2014-05-01 12:42 - 2014-05-01 12:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mixxx
2014-05-01 12:41 - 2014-05-01 12:41 - 00000000 ____D () C:\Program Files (x86)\Mixxx
2014-04-30 15:00 - 2014-04-30 15:02 - 34468751 _____ () C:\Users\Martin\Downloads\Axe-Fest Germany 2014 Bilder.zip
2014-04-29 22:36 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-29 22:36 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-29 22:35 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 22:35 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 22:35 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-29 22:35 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 22:35 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-29 22:35 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-29 22:35 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-29 22:35 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-29 22:35 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-29 22:35 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-29 22:35 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 22:35 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-29 22:35 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-29 22:35 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-29 22:35 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-29 22:35 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-29 22:35 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-29 22:35 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-29 22:35 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-29 22:35 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-29 22:35 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-29 22:35 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-29 22:35 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-29 22:35 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-29 22:35 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-29 22:35 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-29 22:35 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-29 22:35 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-29 22:35 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-29 22:35 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-29 22:35 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-29 22:35 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-29 22:35 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-29 22:35 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-29 22:35 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-29 22:35 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-29 22:35 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-29 22:35 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-29 22:35 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-29 22:35 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-29 22:35 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-29 22:35 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-29 22:35 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-29 22:35 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-29 22:35 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-29 22:35 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-29 21:32 - 2014-04-29 21:36 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-29 21:32 - 2014-04-29 21:32 - 00002193 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-04-29 21:32 - 2014-04-29 21:32 - 00002181 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-04-29 21:32 - 2014-04-29 21:32 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-04-29 21:32 - 2014-04-29 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-04-29 21:32 - 2014-04-29 21:32 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-04-29 21:32 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-04-29 21:12 - 2014-04-29 21:13 - 00000000 ____D () C:\Users\Martin\Downloads\2014 04 TOP FREE SOFTWARE
2014-04-29 16:12 - 2014-04-29 16:12 - 01535032 _____ (Soluto Inc) C:\Users\Martin\Downloads\solutoinstaller.exe
2014-04-29 16:11 - 2014-04-29 16:12 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Martin\Downloads\revosetup.exe
2014-04-29 16:10 - 2014-04-29 16:11 - 12448960 _____ () C:\Users\Martin\Downloads\gu4setup.exe
2014-04-28 18:09 - 2014-04-28 19:14 - 200343390 _____ () C:\Users\Martin\Downloads\hoh-wigdiewur.rar
2014-04-28 10:03 - 2014-04-28 10:03 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-04-27 17:04 - 2014-04-27 17:04 - 00070754 _____ () C:\Users\Martin\Downloads\heroes_del_silencio_entre_dos_tierras.gp5
2014-04-27 15:18 - 2014-04-27 15:19 - 00000000 ____D () C:\Users\Martin\Documents\Eltern
2014-04-27 11:44 - 2014-04-27 11:45 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-24 22:03 - 2014-04-24 22:15 - 105116858 _____ () C:\Users\Martin\Downloads\edNTcjL7w.zip
2014-04-23 19:53 - 2014-04-23 19:53 - 00104139 _____ () C:\Users\Martin\Downloads\Gary Moore Tech Session.pdf.zip
2014-04-23 19:53 - 2014-04-23 19:53 - 00028589 _____ () C:\Users\Martin\Downloads\Gary Moore Tech Session.gpx.zip
2014-04-23 11:41 - 2014-04-23 11:43 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\DC++
2014-04-23 11:41 - 2014-04-23 11:43 - 00000000 ____D () C:\Users\Martin\AppData\Local\DC++
2014-04-23 11:41 - 2014-04-23 11:41 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DC++
2014-04-23 11:41 - 2014-04-23 11:41 - 00000000 ____D () C:\Program Files\DC++
2014-04-23 10:39 - 2014-04-23 10:39 - 00000000 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-14 16:11 - 2014-04-14 16:11 - 96430320 _____ () C:\Users\Martin\Downloads\SPIEGEL Bestseller 16-2014.zip
2014-04-14 15:47 - 2014-04-14 15:47 - 24794128 _____ () C:\Users\Martin\Downloads\LUL.zip
2014-04-11 13:29 - 2014-04-11 13:30 - 02093068 _____ () C:\Users\Martin\Downloads\B004477W2OLunch.rar
2014-04-09 07:52 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 07:52 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 07:52 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 07:52 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 07:52 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 07:52 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 07:52 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 07:52 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 07:52 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 07:52 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 07:52 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 07:52 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 07:52 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 07:52 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 07:52 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 07:52 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 07:52 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-08 13:07 - 2014-04-08 13:07 - 00001212 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\LG PC Suite IV.lnk
2014-04-08 13:07 - 2014-04-08 13:07 - 00001206 _____ () C:\Users\Public\Desktop\LG PC Suite IV.lnk
2014-04-08 13:07 - 2014-04-08 13:07 - 00000000 ____D () C:\Users\Martin\Documents\LG PC Suite IV
2014-04-08 13:07 - 2014-04-08 13:07 - 00000000 ____D () C:\Users\Martin\AppData\Local\LG Electronics
2014-04-08 13:07 - 2014-04-08 13:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG PC Suite IV
2014-04-08 13:03 - 2014-04-08 13:07 - 00000000 ____D () C:\Program Files (x86)\LG Electronics
2014-04-08 13:03 - 2012-03-02 16:03 - 00017920 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgx64bus.sys
2014-04-08 13:01 - 2014-04-08 13:01 - 00000000 ____D () C:\LGT580
2014-04-08 12:59 - 2014-04-08 12:59 - 00002411 _____ () C:\Windows\SysWOW64\lgAxconfig.ini
2014-04-08 12:59 - 2014-04-08 12:59 - 00000835 _____ () C:\Users\Martin\Desktop\LGMobile Support Tool.lnk
2014-04-08 12:59 - 2014-04-08 12:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LGMobile Support Tool
2014-04-08 12:59 - 2011-05-06 10:37 - 00655872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr90.dll
2014-04-08 12:59 - 2011-05-06 10:37 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp90.dll
2014-04-08 12:59 - 2011-05-06 10:37 - 00224768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcm90.dll
2014-04-08 12:59 - 2006-04-30 05:33 - 00053248 _____ () C:\Windows\SysWOW64\CommonDL.dll
2014-04-08 12:59 - 2005-09-29 22:39 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml4a.dll
2014-04-08 12:58 - 2014-04-08 12:59 - 00000000 ____D () C:\ProgramData\LGMOBILEAX
2014-04-08 12:56 - 2014-04-08 13:05 - 00000000 ____D () C:\Users\Martin\Documents\2014 Handy Samsung S4 Mini
2014-04-08 12:56 - 2014-04-08 13:05 - 00000000 ____D () C:\Users\Martin\Documents\2014 Handy LG
2014-04-05 11:18 - 2014-04-05 11:18 - 00001929 _____ () C:\Users\Public\Desktop\Steuer 2013.lnk
2014-04-05 10:59 - 2014-04-05 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steuer 2013
2014-04-05 10:57 - 2014-04-05 11:37 - 00000000 ____D () C:\Program Files (x86)\Steuer 2013
2014-04-01 19:28 - 2014-04-01 19:28 - 00000000 ____D () C:\Program Files (x86)\MarkAny
2014-04-01 19:22 - 2014-04-01 19:22 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log
2014-04-01 19:22 - 2014-04-01 19:22 - 00000000 ____D () C:\Users\Public\Documents\CrashDump
2014-04-01 19:22 - 2014-04-01 19:22 - 00000000 ____D () C:\Users\Martin\AppData\Local\Samsung
2014-04-01 19:21 - 2014-04-01 19:31 - 00002010 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2014-04-01 19:21 - 2014-04-01 19:22 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Samsung
2014-04-01 19:21 - 2014-04-01 19:21 - 00002000 _____ () C:\Users\Public\Desktop\Samsung Kies.lnk
2014-04-01 19:21 - 2014-04-01 19:21 - 00000000 ____D () C:\Users\Martin\Documents\samsung
2014-04-01 19:20 - 2014-01-23 05:21 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-04-01 19:20 - 2014-01-23 05:21 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-04-01 19:18 - 2014-04-01 19:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec
2014-04-01 19:18 - 2014-04-01 19:18 - 00000000 ____D () C:\Program Files (x86)\MyFree Codec
2014-04-01 19:16 - 2014-04-01 19:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-04-01 19:16 - 2013-07-18 14:33 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2014-04-01 19:16 - 2013-07-18 14:32 - 00821824 _____ (Devguru Co., Ltd.) C:\Windows\SysWOW64\dgderapi.dll
2014-04-01 19:15 - 2014-04-01 19:19 - 00000000 ____D () C:\ProgramData\Samsung
2014-04-01 19:15 - 2014-04-01 19:19 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-04-01 19:11 - 2014-04-01 19:11 - 00000000 ____D () C:\Users\Martin\AppData\Local\Downloaded Installations
2014-04-01 19:09 - 2014-04-01 22:10 - 00013456 _____ () C:\Users\Martin\Documents\MP_Pass.xlsx

==================== One Month Modified Files and Folders =======

2014-05-01 21:25 - 2014-05-02 06:59 - 00000000 ____D () C:\FRST
2014-05-01 21:25 - 2014-05-01 21:25 - 00028261 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-05-01 21:24 - 2014-05-01 21:24 - 00000474 _____ () C:\Users\Martin\Desktop\defogger_disable.log
2014-05-01 21:24 - 2014-05-01 21:24 - 00000000 _____ () C:\Users\Martin\defogger_reenable
2014-05-01 21:24 - 2011-09-09 21:35 - 00000000 ____D () C:\Users\Martin
2014-05-01 21:23 - 2009-07-14 06:45 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-01 21:23 - 2009-07-14 06:45 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-01 21:22 - 2014-05-01 21:22 - 00380416 _____ () C:\Users\Martin\Desktop\Gmer-19357.exe
2014-05-01 21:22 - 2014-05-01 20:27 - 00000000 ____D () C:\Users\Martin\Documents\2014 TROJANER
2014-05-01 21:20 - 2014-05-01 21:23 - 00050477 _____ () C:\Users\Martin\Desktop\Defogger.exe
2014-05-01 21:17 - 2011-09-10 06:19 - 02003461 _____ () C:\Windows\WindowsUpdate.log
2014-05-01 21:15 - 2011-09-09 21:33 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-01 21:09 - 2014-02-07 18:43 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-01 21:08 - 2014-05-01 16:41 - 00002309 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2014-05-01 21:08 - 2014-05-01 16:38 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection
2014-05-01 21:08 - 2013-10-09 19:11 - 00000000 ___RD () C:\Users\Martin\Dropbox
2014-05-01 21:08 - 2013-10-09 19:07 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Dropbox
2014-05-01 21:06 - 2011-09-09 21:33 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-01 21:04 - 2013-05-31 20:29 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2014-05-01 21:04 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-01 21:03 - 2009-07-14 06:51 - 00201402 _____ () C:\Windows\setupact.log
2014-05-01 20:52 - 2014-05-01 16:29 - 00001635 _____ () C:\Users\Martin\Desktop\Internet Explorer.lnk
2014-05-01 20:52 - 2011-09-09 21:35 - 00002269 _____ () C:\Users\Public\Desktop\MEDION Serviceportal.lnk
2014-05-01 20:52 - 2011-09-09 21:35 - 00001665 _____ () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-01 20:52 - 2011-09-09 21:34 - 00002954 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2014-05-01 20:52 - 2011-09-09 21:06 - 00001394 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-01 20:52 - 2011-09-09 21:06 - 00001382 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-01 20:51 - 2010-12-01 09:19 - 00218724 _____ () C:\Windows\PFRO.log
2014-05-01 20:43 - 2011-09-09 21:06 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\SoftGrid Client
2014-05-01 20:39 - 2010-11-25 18:28 - 00699884 _____ () C:\Windows\system32\perfh007.dat
2014-05-01 20:39 - 2010-11-25 18:28 - 00149766 _____ () C:\Windows\system32\perfc007.dat
2014-05-01 20:39 - 2009-07-14 07:13 - 01622236 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-01 20:29 - 2011-09-27 10:27 - 00000121 _____ () C:\Users\Public\LMDebug.log
2014-05-01 20:23 - 2014-05-01 21:22 - 02061824 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2014-05-01 20:23 - 2014-05-01 20:23 - 02061824 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2014-05-01 17:16 - 2014-05-01 17:16 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\LavasoftStatistics
2014-05-01 16:41 - 2014-05-01 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus
2014-05-01 16:39 - 2014-05-01 16:39 - 00000000 ____D () C:\Program Files\Lavasoft
2014-05-01 16:38 - 2014-05-01 16:38 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\SecureSearch
2014-05-01 16:38 - 2014-05-01 16:38 - 00000000 ____D () C:\Users\Martin\AppData\Local\adawarebp
2014-05-01 16:38 - 2014-05-01 16:38 - 00000000 ____D () C:\ProgramData\Search Protection
2014-05-01 16:38 - 2014-05-01 16:38 - 00000000 ____D () C:\Program Files (x86)\Toolbar Cleaner
2014-05-01 16:38 - 2014-05-01 16:38 - 00000000 ____D () C:\Program Files (x86)\Lavasoft
2014-05-01 16:37 - 2014-05-01 16:37 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Lavasoft
2014-05-01 16:37 - 2014-05-01 16:37 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2014-05-01 16:35 - 2014-05-01 16:35 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-05-01 14:02 - 2014-05-01 14:02 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-05-01 14:02 - 2014-05-01 14:02 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-05-01 14:02 - 2014-01-02 15:20 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-05-01 14:02 - 2013-03-15 18:14 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-05-01 14:02 - 2013-03-15 18:14 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-05-01 14:02 - 2012-07-08 16:11 - 00003926 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-05-01 14:02 - 2012-02-26 14:23 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-05-01 14:02 - 2011-12-01 08:28 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-05-01 14:02 - 2011-09-11 11:22 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-05-01 14:02 - 2011-09-11 11:22 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-05-01 14:02 - 2011-09-11 11:22 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-05-01 14:02 - 2011-09-11 11:22 - 00001981 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-01 14:01 - 2014-05-01 14:01 - 00000000 __SHD () C:\Users\Martin\AppData\Local\EmieUserList
2014-05-01 14:01 - 2014-05-01 14:01 - 00000000 __SHD () C:\Users\Martin\AppData\Local\EmieSiteList
2014-05-01 13:59 - 2014-05-01 13:59 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\v9
2014-05-01 13:59 - 2014-05-01 13:59 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\SupTab
2014-05-01 13:59 - 2014-05-01 13:59 - 00000000 ____D () C:\ProgramData\WPM
2014-05-01 13:59 - 2014-05-01 13:59 - 00000000 ____D () C:\ProgramData\IePluginService
2014-05-01 13:59 - 2014-05-01 13:59 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-05-01 13:59 - 2014-05-01 13:59 - 00000000 ____D () C:\Program Files (x86)\MSR
2014-05-01 13:58 - 2014-05-01 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Wise
2014-05-01 13:58 - 2014-05-01 13:58 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\InetStat
2014-05-01 13:56 - 2014-05-01 13:56 - 00241960 _____ (Premium Installer ) C:\Users\Martin\Downloads\Player-Firefox.exe
2014-05-01 12:42 - 2014-05-01 12:42 - 00001837 _____ () C:\Users\Public\Desktop\Mixxx.lnk
2014-05-01 12:42 - 2014-05-01 12:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mixxx
2014-05-01 12:41 - 2014-05-01 12:41 - 00000000 ____D () C:\Program Files (x86)\Mixxx
2014-05-01 10:56 - 2011-03-12 19:40 - 00000000 ____D () C:\Users\Martin\Documents\Fractal Audio
2014-04-30 20:52 - 2011-03-12 17:45 - 00000000 ____D () C:\Users\Martin\Documents\Martin
2014-04-30 16:54 - 2011-09-10 08:47 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\vlc
2014-04-30 16:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-30 15:52 - 2013-10-11 20:38 - 00001181 _____ () C:\Users\Public\Desktop\Axe-Edit.lnk
2014-04-30 15:52 - 2011-09-27 10:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fractal Audio
2014-04-30 15:52 - 2011-09-25 11:59 - 00000000 ____D () C:\Program Files (x86)\Fractal Audio
2014-04-30 15:02 - 2014-04-30 15:00 - 34468751 _____ () C:\Users\Martin\Downloads\Axe-Fest Germany 2014 Bilder.zip
2014-04-30 09:40 - 2012-01-08 20:15 - 00000000 ____D () C:\Users\Martin\Hörbücher
2014-04-30 08:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-29 21:36 - 2014-04-29 21:32 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-29 21:32 - 2014-04-29 21:32 - 00002193 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-04-29 21:32 - 2014-04-29 21:32 - 00002181 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-04-29 21:32 - 2014-04-29 21:32 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-04-29 21:32 - 2014-04-29 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-04-29 21:32 - 2014-04-29 21:32 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-04-29 21:13 - 2014-04-29 21:12 - 00000000 ____D () C:\Users\Martin\Downloads\2014 04 TOP FREE SOFTWARE
2014-04-29 16:12 - 2014-04-29 16:12 - 01535032 _____ (Soluto Inc) C:\Users\Martin\Downloads\solutoinstaller.exe
2014-04-29 16:12 - 2014-04-29 16:11 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Martin\Downloads\revosetup.exe
2014-04-29 16:11 - 2014-04-29 16:10 - 12448960 _____ () C:\Users\Martin\Downloads\gu4setup.exe
2014-04-29 11:10 - 2014-02-07 18:43 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 11:10 - 2012-04-04 20:03 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 11:10 - 2011-09-09 21:53 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-28 19:14 - 2014-04-28 18:09 - 200343390 _____ () C:\Users\Martin\Downloads\hoh-wigdiewur.rar
2014-04-28 10:03 - 2014-04-28 10:03 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-04-28 10:03 - 2013-06-26 20:12 - 00003730 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2014-04-28 10:03 - 2012-09-22 17:51 - 00050464 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-04-28 10:03 - 2012-09-22 17:51 - 00000000 ____D () C:\Program Files (x86)\AVG Secure Search
2014-04-27 17:04 - 2014-04-27 17:04 - 00070754 _____ () C:\Users\Martin\Downloads\heroes_del_silencio_entre_dos_tierras.gp5
2014-04-27 15:38 - 2014-03-12 11:50 - 00000000 ____D () C:\Users\Martin\Documents\2014 GKN
2014-04-27 15:19 - 2014-04-27 15:18 - 00000000 ____D () C:\Users\Martin\Documents\Eltern
2014-04-27 11:45 - 2014-04-27 11:44 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-24 22:15 - 2014-04-24 22:03 - 105116858 _____ () C:\Users\Martin\Downloads\edNTcjL7w.zip
2014-04-24 10:14 - 2011-09-09 21:22 - 00000000 ____D () C:\Users\Martin\AppData\Local\Adobe
2014-04-23 19:53 - 2014-04-23 19:53 - 00104139 _____ () C:\Users\Martin\Downloads\Gary Moore Tech Session.pdf.zip
2014-04-23 19:53 - 2014-04-23 19:53 - 00028589 _____ () C:\Users\Martin\Downloads\Gary Moore Tech Session.gpx.zip
2014-04-23 11:43 - 2014-04-23 11:41 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\DC++
2014-04-23 11:43 - 2014-04-23 11:41 - 00000000 ____D () C:\Users\Martin\AppData\Local\DC++
2014-04-23 11:41 - 2014-04-23 11:41 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DC++
2014-04-23 11:41 - 2014-04-23 11:41 - 00000000 ____D () C:\Program Files\DC++
2014-04-23 10:39 - 2014-04-23 10:39 - 00000000 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-23 10:39 - 2013-10-20 22:08 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-23 10:26 - 2014-01-22 21:42 - 00000000 ____D () C:\Users\Martin\Documents\2014 Internet Papa Tschibo
2014-04-23 10:26 - 2013-08-01 11:24 - 00000000 ____D () C:\Users\Martin\Documents\2013 08 Haus Tiergartenstrasse
2014-04-15 14:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-14 16:11 - 2014-04-14 16:11 - 96430320 _____ () C:\Users\Martin\Downloads\SPIEGEL Bestseller 16-2014.zip
2014-04-14 15:47 - 2014-04-14 15:47 - 24794128 _____ () C:\Users\Martin\Downloads\LUL.zip
2014-04-11 13:30 - 2014-04-11 13:29 - 02093068 _____ () C:\Users\Martin\Downloads\B004477W2OLunch.rar
2014-04-09 23:10 - 2013-07-15 03:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 23:08 - 2010-12-01 10:23 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-08 13:07 - 2014-04-08 13:07 - 00001212 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\LG PC Suite IV.lnk
2014-04-08 13:07 - 2014-04-08 13:07 - 00001206 _____ () C:\Users\Public\Desktop\LG PC Suite IV.lnk
2014-04-08 13:07 - 2014-04-08 13:07 - 00000000 ____D () C:\Users\Martin\Documents\LG PC Suite IV
2014-04-08 13:07 - 2014-04-08 13:07 - 00000000 ____D () C:\Users\Martin\AppData\Local\LG Electronics
2014-04-08 13:07 - 2014-04-08 13:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG PC Suite IV
2014-04-08 13:07 - 2014-04-08 13:03 - 00000000 ____D () C:\Program Files (x86)\LG Electronics
2014-04-08 13:05 - 2014-04-08 12:56 - 00000000 ____D () C:\Users\Martin\Documents\2014 Handy Samsung S4 Mini
2014-04-08 13:05 - 2014-04-08 12:56 - 00000000 ____D () C:\Users\Martin\Documents\2014 Handy LG
2014-04-08 13:03 - 2010-12-01 08:02 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-08 13:01 - 2014-04-08 13:01 - 00000000 ____D () C:\LGT580
2014-04-08 12:59 - 2014-04-08 12:59 - 00002411 _____ () C:\Windows\SysWOW64\lgAxconfig.ini
2014-04-08 12:59 - 2014-04-08 12:59 - 00000835 _____ () C:\Users\Martin\Desktop\LGMobile Support Tool.lnk
2014-04-08 12:59 - 2014-04-08 12:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LGMobile Support Tool
2014-04-08 12:59 - 2014-04-08 12:58 - 00000000 ____D () C:\ProgramData\LGMOBILEAX
2014-04-08 10:45 - 2011-12-10 13:55 - 00017920 ___SH () C:\Users\Martin\Thumbs.db
2014-04-07 19:35 - 2013-11-06 17:51 - 00000000 ____D () C:\Users\Martin\Documents\Targobank
2014-04-06 18:07 - 2014-03-30 10:35 - 00000000 ____D () C:\Users\Martin\Documents\VIP
2014-04-05 11:37 - 2014-04-05 10:57 - 00000000 ____D () C:\Program Files (x86)\Steuer 2013
2014-04-05 11:37 - 2012-03-04 16:10 - 00000722 _____ () C:\Windows\wiso.ini
2014-04-05 11:37 - 2012-02-07 10:30 - 00000000 ____D () C:\Users\Martin\Documents\Steuer
2014-04-05 11:37 - 2012-02-06 18:56 - 00000000 ____D () C:\ProgramData\Buhl Data Service GmbH
2014-04-05 11:18 - 2014-04-05 11:18 - 00001929 _____ () C:\Users\Public\Desktop\Steuer 2013.lnk
2014-04-05 11:18 - 2012-02-06 22:44 - 00000000 ____D () C:\Users\Martin\AppData\Local\Buhl
2014-04-05 10:59 - 2014-04-05 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steuer 2013
2014-04-01 22:10 - 2014-04-01 19:09 - 00013456 _____ () C:\Users\Martin\Documents\MP_Pass.xlsx
2014-04-01 19:31 - 2014-04-01 19:21 - 00002010 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2014-04-01 19:28 - 2014-04-01 19:28 - 00000000 ____D () C:\Program Files (x86)\MarkAny
2014-04-01 19:22 - 2014-04-01 19:22 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log
2014-04-01 19:22 - 2014-04-01 19:22 - 00000000 ____D () C:\Users\Public\Documents\CrashDump
2014-04-01 19:22 - 2014-04-01 19:22 - 00000000 ____D () C:\Users\Martin\AppData\Local\Samsung
2014-04-01 19:22 - 2014-04-01 19:21 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Samsung
2014-04-01 19:21 - 2014-04-01 19:21 - 00002000 _____ () C:\Users\Public\Desktop\Samsung Kies.lnk
2014-04-01 19:21 - 2014-04-01 19:21 - 00000000 ____D () C:\Users\Martin\Documents\samsung
2014-04-01 19:19 - 2014-04-01 19:15 - 00000000 ____D () C:\ProgramData\Samsung
2014-04-01 19:19 - 2014-04-01 19:15 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-04-01 19:18 - 2014-04-01 19:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec
2014-04-01 19:18 - 2014-04-01 19:18 - 00000000 ____D () C:\Program Files (x86)\MyFree Codec
2014-04-01 19:16 - 2014-04-01 19:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-04-01 19:11 - 2014-04-01 19:11 - 00000000 ____D () C:\Users\Martin\AppData\Local\Downloaded Installations

Some content of TEMP:
====================
C:\Users\Martin\AppData\Local\Temp\251f8557-498e-4e3e-a7ce-01805d07d7cd.exe
C:\Users\Martin\AppData\Local\Temp\5oaps0gv.dto.exe
C:\Users\Martin\AppData\Local\Temp\ly3esj4b.fps.exe
C:\Users\Martin\AppData\Local\Temp\xvpsz35g.on4.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-29 10:28

==================== End Of Log ============================