Download Protect 2.2.1 in Google Chrome und Mozilla

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-06-2014 01
Ran by Admin (administrator) on WKS2 on 02-06-2014 12:40:43
Running from C:\Users\coxson\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\ATService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\Windows\System32\mtxclu64.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\PSUService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\smartmontools for Windows\bin\smartd.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\TrayManager.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\ATSwpNav.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
(Dropbox, Inc.) C:\Users\coxson\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(FUJITSU LIMITED) C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
() C:\Program Files (x86)\FJ Camera\Monitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2816808 2011-08-11] (Synaptics Incorporated)
HKLM\...\Run: [LoadFUJ02E3] => C:\Program Files\Fujitsu\FUJ02E3\fuj02e3.exe [76104 2011-11-24] (FUJITSU LIMITED)
HKLM\...\Run: [PSUTility] => C:\Program Files\Fujitsu\PSUtility\TrayManager.exe [205168 2011-10-03] (FUJITSU LIMITED)
HKLM\...\Run: [LoadFujitsuQuickTouch] => C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe [158024 2011-10-01] (FUJITSU LIMITED)
HKLM\...\Run: [LoadBtnHnd] => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [23368 2011-10-01] (FUJITSU LIMITED)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13353064 2011-11-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277992 2011-11-15] (Realtek Semiconductor)
HKLM\...\Run: [ATSwpNav] => "C:\Program Files\Fingerprint Sensor\ATSwpNav" -run
HKLM\...\Run: [SSUtility] => C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe [273776 2011-09-15] (FUJITSU LIMITED)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-06] (Intel Corporation)
HKLM-x32\...\Run: [IndicatorUtility] => C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [48752 2010-09-30] (FUJITSU LIMITED)
HKLM-x32\...\Run: [FJ Camera_Monitor] => C:\Program Files (x86)\FJ Camera\monitor.exe [279416 2012-01-18] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2589120432-3834562377-573463391-1005\...\Run: [Speech Recognition] => C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-2589120432-3834562377-573463391-1005\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [6152472 2014-04-17] (Piriform Ltd)
HKU\S-1-5-21-614850132-1012448885-3749381841-1002\...\RunOnce: [Report] - \AdwCleaner\AdwCleaner[S14].txt [4441 2014-06-02] ()
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\Users\coxson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe (No File)
Startup: C:\Users\Default-original\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files\Fujitsu\LaunchCenter\lcStarter.exe (Fujitsu Technology Solutions)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.fujitsu.com/fts
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.google.com/ig/redirectdomain?brand=FTSH&bmod=FTSH;
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=FTSH&bmod=FTSH;
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\..\Interfaces\{75DF4800-CEA6-4E0B-BCF8-4D4D488E3742}: [NameServer]192.168.0.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{F31D5CF9-15BE-4E1C-8CFA-07E43DB58F86}] - C:\Windows\Installer\{975C201F-5A2A-42B6-86FC-EA56F0C39F74}\{F31D5CF9-15BE-4E1C-8CFA-07E43DB58F86}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{9B6BA259-7D6F-45CF-BEB3-F5E1A289173D}] - C:\Windows\Installer\{45F0877F-14C3-49F9-9BDD-96943B5FCA4D}\{9B6BA259-7D6F-45CF-BEB3-F5E1A289173D}.xpi
FF Extension: Download Protect - C:\Windows\Installer\{45F0877F-14C3-49F9-9BDD-96943B5FCA4D}\{9B6BA259-7D6F-45CF-BEB3-F5E1A289173D}.xpi [2014-05-27]

Chrome: 
=======
CHR HomePage: 
CHR Extension: (Google Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-28]
CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-28]
CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-28]
CHR Extension: (Google-Suche) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-28]
CHR Extension: (Download Protect) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gejfgmhnbaafkikapmdlphcdldnmnmim [2014-05-28]
CHR Extension: (Google Wallet) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-28]
CHR Extension: (Google Mail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-28]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 cttunetvr; C:\Windows\system32\mtxclu64.exe [118784 2014-03-28] ()
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [225280 2011-08-05] (DTS, Inc)
R2 FUJ02E3Service; C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe [76104 2011-11-24] (FUJITSU LIMITED)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-03-26] (Nitro PDF Software)
R2 PowerSavingUtilityService; C:\Program Files\Fujitsu\PSUtility\PSUService.exe [63856 2011-10-03] (FUJITSU LIMITED)
R2 SmartHDDLifeGuard; C:\Program Files (x86)\smartmontools for Windows\bin\smartd.exe [539648 2012-10-10] ()
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
R2 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe [885088 2013-05-07] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)
S2 DlProtectSvc; C:\Windows\System32\DlProtectSvc.exe [X]

==================== Drivers (Whitelisted) ====================

S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2011-11-23] (Broadcom Corporation.)
R0 FBIOSDRV; C:\Windows\System32\Drivers\FBIOSDRV.sys [21104 2009-06-24] (FUJITSU LIMITED)
R0 FJGSDisk; C:\Windows\System32\DRIVERS\FJGSDisk.sys [15600 2011-07-08] (FUJITSU LIMITED)
R3 FUJ02B1; C:\Windows\System32\DRIVERS\FUJ02B1.sys [7808 2006-11-01] (FUJITSU LIMITED)
R3 FUJ02E3; C:\Windows\system32\drivers\FUJ02E3.sys [7296 2006-11-01] (FUJITSU LIMITED)
R3 guardian2; C:\Windows\System32\Drivers\oz776x64.sys [86888 2011-08-15] (O2Micro)
R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259176 2011-12-13] (Realtek Semiconductor Corp.)
R1 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [3052920 2011-12-23] (Sunplus Technology)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-06-02] (Windows (R) Win 7 DDK provider)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 cleanhlp; \??\D:\asuite\files\EmsisoftEmergencyKit\Run\cleanhlp64.sys [X]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-02 12:39 - 2014-06-02 12:39 - 00000000 ____D () C:\Users\coxson\Downloads\FRST-OlderVersion
2014-06-02 12:36 - 2014-03-10 17:08 - 71812509 _____ () C:\Users\coxson\Downloads\Powerpoint.zip
2014-06-02 11:30 - 2014-06-02 12:25 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-06-02 11:30 - 2014-06-02 11:30 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-06-02 11:30 - 2014-06-02 11:30 - 00001044 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-06-02 11:30 - 2014-06-02 11:30 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Spyware Terminator
2014-06-02 11:30 - 2014-06-02 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
2014-06-02 11:30 - 2014-06-02 11:30 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-06-02 11:29 - 2014-06-02 11:29 - 05049344 _____ (Crawler.com ) C:\Users\coxson\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2014-06-02 11:26 - 2014-06-02 11:26 - 00002100 _____ () C:\Users\Admin\Desktop\ Malwarebytes Anti-Malware  - CHIP Downloader.lnk
2014-06-02 11:25 - 2014-06-02 11:25 - 00961360 _____ (Chip Digital GmbH) C:\Users\coxson\Downloads\Malwarebytes Anti Malware - CHIP-Installer (1).exe
2014-06-02 11:20 - 2014-06-02 11:20 - 00961360 _____ (Chip Digital GmbH) C:\Users\coxson\Downloads\Malwarebytes Anti Malware - CHIP-Installer.exe
2014-06-02 11:06 - 2014-06-02 10:14 - 00001427 _____ () C:\Users\coxson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-02 11:02 - 2014-06-02 11:02 - 00000302 _____ () C:\Windows\PFRO.log
2014-06-02 10:28 - 2014-06-02 12:33 - 00000168 _____ () C:\Windows\setupact.log
2014-06-02 10:28 - 2014-06-02 10:28 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-02 09:59 - 2014-06-02 09:59 - 00002386 _____ () C:\Users\coxson\Documents\cc_20140602_095918.reg
2014-05-28 11:32 - 2014-05-28 11:32 - 00000593 _____ () C:\Users\coxson\Downloads\Fixlist.txt
2014-05-28 11:32 - 2014-05-27 13:10 - 02066944 _____ (Farbar) C:\Users\coxson-local\Desktop\FRST64.exe
2014-05-28 11:31 - 2014-05-28 21:33 - 00000592 _____ () C:\Users\coxson-local\Desktop\Fixlist.txt
2014-05-28 09:16 - 2014-05-28 21:43 - 00000000 ____D () C:\Users\coxson-local\AppData\Local\Mozilla
2014-05-28 08:59 - 2014-05-28 08:59 - 00001198 _____ () C:\Users\Admin\Desktop\JRT.txt
2014-05-28 08:39 - 2014-05-28 08:39 - 00000000 ____D () C:\Users\coxson-local\AppData\Local\Eraser 6
2014-05-27 13:14 - 2014-05-27 13:15 - 00040674 _____ () C:\Users\coxson\Downloads\Addition.txt
2014-05-27 13:11 - 2014-06-02 12:41 - 00016107 _____ () C:\Users\coxson\Downloads\FRST.txt
2014-05-27 13:11 - 2014-06-02 12:41 - 00000000 ____D () C:\FRST
2014-05-27 13:10 - 2014-06-02 12:39 - 02067456 _____ (Farbar) C:\Users\coxson\Downloads\FRST64.exe
2014-05-27 11:13 - 2014-05-13 13:39 - 01325827 _____ () C:\Users\coxson\Downloads\adwcleaner.exe
2014-05-27 11:13 - 2014-03-28 13:59 - 00657776 _____ () C:\Users\coxson\Downloads\HSMedienCenter-Downloader.exe
2014-05-27 11:13 - 2014-03-10 17:16 - 71812509 _____ () C:\Users\coxson\Downloads\Powerpoint(1).zip
2014-05-27 11:13 - 2014-03-10 17:12 - 05038080 _____ () C:\Users\coxson\Downloads\Kapitel 19 - Joseph im Ausland.ppt
2014-05-27 11:13 - 2014-03-10 17:12 - 05038080 _____ () C:\Users\coxson\Downloads\Kapitel 19 - Joseph im Ausland(1).ppt
2014-05-27 11:13 - 2014-03-10 17:11 - 09511936 _____ () C:\Users\coxson\Downloads\Kapitel 4 - Hochwasser.ppt
2014-05-27 11:13 - 2014-03-10 17:11 - 04993024 _____ () C:\Users\coxson\Downloads\Kapitel 10 - Abraham Die Strafe.ppt
2014-05-27 11:13 - 2014-03-10 17:11 - 03842048 _____ () C:\Users\coxson\Downloads\Kapitel 14 - Linseneintopf.ppt
2014-05-27 11:13 - 2014-03-10 17:11 - 03686912 _____ () C:\Users\coxson\Downloads\Kapitel 17 - Jakobs Söhne.ppt
2014-05-27 11:13 - 2014-03-10 17:11 - 03438592 _____ () C:\Users\coxson\Downloads\Kapitel 9 - Abraham Die Ansage.ppt
2014-05-27 11:13 - 2014-03-10 17:11 - 02941440 _____ () C:\Users\coxson\Downloads\Kapitel 16 - Lea und Rahel.ppt
2014-05-27 11:13 - 2014-03-10 17:11 - 02255872 _____ () C:\Users\coxson\Downloads\Kapitel 18 - Joseph muss weg.ppt
2014-05-27 11:13 - 2014-03-10 17:11 - 01851904 _____ () C:\Users\coxson\Downloads\Kapitel 13 - Eine Frau für Isaak.ppt
2014-05-27 11:13 - 2014-03-10 17:11 - 01736192 _____ () C:\Users\coxson\Downloads\Kapitel 15 - Jakobs Traum.ppt
2014-05-27 11:13 - 2014-03-10 17:11 - 01600000 _____ () C:\Users\coxson\Downloads\Kapitel 11 - Abraham Isaak und Ismael.ppt
2014-05-27 11:13 - 2014-03-10 17:10 - 03668480 _____ () C:\Users\coxson\Downloads\Kapitel 7 - Abraham Die Trennung.ppt
2014-05-27 11:13 - 2014-03-10 17:10 - 02857472 _____ () C:\Users\coxson\Downloads\Kapitel 8 - Abraham Ungeduld.ppt
2014-05-27 11:13 - 2014-03-10 17:10 - 01845248 _____ () C:\Users\coxson\Downloads\Kapitel 6 - Abraham Der Aufbruch.ppt
2014-05-27 11:13 - 2014-03-10 17:10 - 01309184 _____ () C:\Users\coxson\Downloads\Kapitel 5 - Der Turm.ppt
2014-05-27 11:13 - 2014-03-10 17:08 - 05955072 _____ () C:\Users\coxson\Downloads\Kapitel 2 - Zwei Bäume.ppt
2014-05-27 11:13 - 2014-03-10 17:08 - 04146688 _____ () C:\Users\coxson\Downloads\Kapitel 1 - Sieben Tage.ppt
2014-05-27 11:13 - 2014-03-10 17:08 - 04088832 _____ () C:\Users\coxson\Downloads\Kapitel 3 - Zwei Brüder.ppt
2014-05-27 11:13 - 2014-03-10 17:08 - 03694080 _____ () C:\Users\coxson\Downloads\Kapitel 12 - Abraham Die Prüfung.ppt
2014-05-27 11:13 - 2014-03-10 17:08 - 01836544 _____ () C:\Users\coxson\Downloads\Kapitel 21 - Joseph und die Kühe.ppt
2014-05-27 11:13 - 2014-03-10 16:57 - 00116224 _____ () C:\Users\coxson\Downloads\AT-MBW-2009_01_Konflikte_im_Leben_von_Jesus.ppt
2014-05-27 11:13 - 2014-03-10 16:40 - 04725863 _____ () C:\Users\coxson\Downloads\10gebote_paket.zip
2014-05-27 11:13 - 2014-03-10 16:23 - 00183296 _____ () C:\Users\coxson\Downloads\die_10_gebote.pps
2014-05-27 11:13 - 2014-03-10 16:22 - 01064960 _____ () C:\Users\coxson\Downloads\10gebote_doppelgebot_bergpredigt.pps
2014-05-27 11:13 - 2014-02-27 14:45 - 00103812 _____ () C:\Users\coxson\Downloads\contacts.csv
2014-05-27 11:13 - 2014-02-11 12:27 - 00847832 _____ (Google Inc.) C:\Users\coxson\Downloads\GoogleEarthPluginSetup.exe
2014-05-27 11:13 - 2014-01-23 13:40 - 00401752 _____ (Softonic ) C:\Users\coxson\Downloads\SoftonicDownloader_fuer_mp3directcut.exe
2014-05-27 11:13 - 2014-01-08 10:28 - 00023810 _____ () C:\Users\coxson\Downloads\google.csv
2014-05-27 11:13 - 2013-12-09 14:18 - 05489008 _____ () C:\Users\coxson\Downloads\20131106_Anlagen.zip
2014-05-27 11:12 - 2014-05-13 13:39 - 01325827 _____ () C:\Users\coxson\Desktop\adwcleaner.exe
2014-05-27 10:59 - 2014-05-27 10:59 - 01327971 _____ () C:\Users\Admin\Downloads\adwcleaner_3.211.exe
2014-05-27 10:13 - 2014-05-27 10:13 - 01016261 _____ (Thisisu) C:\Users\coxson\Downloads\JRT.exe
2014-05-27 10:09 - 2014-05-27 10:09 - 00000000 ____D () C:\Users\coxson\AppData\Local\Eraser 6
2014-05-27 10:09 - 2014-05-27 10:09 - 00000000 ____D () C:\Users\Admin\AppData\Local\Eraser 6
2014-05-27 10:02 - 2014-06-02 12:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-27 09:51 - 2014-05-27 09:51 - 09110456 _____ (The Eraser Project) C:\Users\Admin\Downloads\Eraser_6.0.10.2620.exe
2014-05-27 09:34 - 2014-05-27 09:34 - 00000000 ____D () C:\Users\Admin\AppData\Local\Macromedia
2014-05-27 09:25 - 2014-06-01 11:21 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Nico Mak Computing
2014-05-27 09:24 - 2014-05-27 09:24 - 04892480 _____ (WinZip International LLC ) C:\Users\coxson\Downloads\wzmp_8.exe
2014-05-27 09:24 - 2014-05-27 09:24 - 04892480 _____ (WinZip International LLC ) C:\Users\coxson\Downloads\wzmp_8 (1).exe
2014-05-27 09:00 - 2014-05-27 09:00 - 24677393 _____ () C:\Users\Admin\Downloads\vlc-2.1.3-win32.exe
2014-05-26 19:13 - 2014-03-28 14:12 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\Bright Hill Software Limited
2014-05-26 18:56 - 2014-05-26 18:57 - 00002253 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-05-26 18:56 - 2014-05-26 18:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-26 18:27 - 2014-05-26 18:27 - 39809104 _____ (Google Inc.) C:\Users\coxson\Downloads\ChromeStandaloneSetup_35.0.1916.114.exe
2014-05-26 17:39 - 2014-05-26 17:40 - 01327971 _____ () C:\Users\coxson\Downloads\adwcleaner_3.211.exe
2014-05-26 17:39 - 2014-05-26 17:40 - 01327971 _____ () C:\Users\coxson\Downloads\adwcleaner_3.211 (1).exe
2014-05-26 16:35 - 2014-05-26 16:35 - 00000000 ____D () C:\Users\coxson\Documents\Simply Super Software
2014-05-26 16:23 - 2014-05-26 16:23 - 00000000 ____D () C:\ProgramData\Licenses
2014-05-26 16:21 - 2014-05-26 18:49 - 00000000 ____D () C:\Program Files (x86)\Trojan Remover
2014-05-26 16:15 - 2014-05-26 16:15 - 21407864 _____ (Simply Super Software ) C:\Users\coxson\Downloads\trjsetup690.exe
2014-05-26 16:08 - 2014-05-26 16:32 - 00000000 ____D () C:\Program Files (x86)\a-squared Free
2014-05-26 16:04 - 2014-05-26 16:06 - 83704128 _____ (Emsi Software GmbH ) C:\Users\coxson\Downloads\a2FreeSetup27.exe
2014-05-26 16:04 - 2014-05-26 16:06 - 83704128 _____ (Emsi Software GmbH ) C:\Users\coxson\Downloads\a2FreeSetup27 (1).exe
2014-05-26 14:57 - 2014-05-27 11:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-26 14:55 - 2014-05-26 14:56 - 25200168 _____ (Mozilla) C:\Users\Admin\Downloads\Firefox_Setup_en28.0 (1).exe
2014-05-26 14:55 - 2014-05-26 14:55 - 25200168 _____ (Mozilla) C:\Users\Admin\Downloads\Firefox_Setup_en28.0.exe
2014-05-26 14:03 - 2014-05-26 14:04 - 01327971 _____ () C:\Users\Admin\Downloads\adwcleaner_3.211 (1).exe
2014-05-26 11:14 - 2014-05-26 13:58 - 00000000 ____D () C:\Program Files\Unlocker
2014-05-26 11:14 - 2014-05-26 11:14 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2014-05-26 10:25 - 2014-05-26 10:25 - 00000000 ____D () C:\Windows\ERUNT
2014-05-26 10:09 - 2014-05-26 10:09 - 00005408 _____ () C:\Users\coxson-local\Documents\cc_20140526_100939.reg
2014-05-21 17:21 - 2014-05-21 17:21 - 00016054 _____ () C:\Users\Admin\Documents\cc_20140521_172059.reg
2014-05-20 18:12 - 2014-05-20 18:12 - 00000387 _____ () C:\Users\coxson\Desktop\Transcend (G) - Verknüpfung.lnk
2014-05-20 15:04 - 2014-05-13 14:33 - 01325827 _____ () C:\Users\coxson\Downloads\adwcleaner (1).exe
2014-05-20 13:43 - 2014-05-20 13:43 - 00001146 _____ () C:\Users\coxson\Documents\cc_20140520_134330.reg
2014-05-20 13:08 - 2014-05-20 13:09 - 00014716 _____ () C:\Users\coxson\Documents\cc_20140520_130838.reg
2014-05-20 13:00 - 2014-05-14 12:31 - 00629584 _____ (Chip Digital GmbH) C:\Users\coxson\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-05-20 13:00 - 2014-05-13 14:11 - 00283144 _____ (Mozilla) C:\Users\coxson\Downloads\Firefox Setup Stub 29.0.1.exe
2014-05-20 13:00 - 2014-05-13 14:06 - 00629584 _____ (Chip Digital GmbH) C:\Users\coxson\Downloads\Firefox - CHIP-Downloader.exe
2014-05-20 12:59 - 2012-12-08 20:46 - 00001202 _____ () C:\Users\coxson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-20 12:45 - 2014-05-20 12:45 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-05-20 12:45 - 2014-05-20 12:45 - 00000828 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-20 12:45 - 2014-05-20 12:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-20 12:45 - 2014-05-20 12:45 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-20 12:43 - 2014-05-20 12:43 - 03671432 _____ (Piriform Ltd) C:\Users\coxson\Downloads\ccsetup413_slim.exe
2014-05-20 12:43 - 2014-05-20 12:43 - 00961360 _____ (Chip Digital GmbH) C:\Users\coxson\Downloads\CCleaner - CHIP-Downloader.exe
2014-05-15 14:36 - 2014-06-02 12:39 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\DropboxMaster
2014-05-15 10:23 - 2014-05-06 02:46 - 17847808 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 10:23 - 2014-05-06 02:21 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 10:23 - 2014-05-06 02:21 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 10:23 - 2014-05-06 01:32 - 12347392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 10:23 - 2014-05-06 01:14 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 10:23 - 2014-05-06 01:14 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 20:14 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 20:14 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 20:14 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 20:14 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 20:12 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 20:12 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 20:12 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 20:12 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 20:12 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 20:12 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 20:12 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 20:12 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 20:12 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 20:12 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 20:12 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 20:12 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 20:12 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 20:12 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 20:12 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 20:12 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 20:12 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 20:12 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 20:12 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 20:12 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 20:12 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 20:12 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 20:12 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 20:12 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 20:12 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 20:12 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 20:12 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 20:12 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 20:12 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 20:12 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 20:12 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 20:12 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 20:12 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 20:12 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 20:12 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 20:12 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 20:12 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 20:12 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 20:12 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 20:12 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 20:12 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-14 12:35 - 2014-05-26 14:56 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-14 12:34 - 2014-05-14 12:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-13 13:44 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-13 13:42 - 2014-06-02 10:39 - 00000000 ____D () C:\AdwCleaner
2014-05-06 19:07 - 2014-05-15 10:47 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-05 12:57 - 2014-05-05 12:57 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-05 12:57 - 2014-05-05 12:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-05 12:57 - 2014-05-05 12:56 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-05 12:57 - 2014-05-05 12:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-05 12:57 - 2014-05-05 12:56 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-05 12:57 - 2014-05-05 12:56 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

==================== One Month Modified Files and Folders =======

2014-06-02 12:41 - 2014-05-27 13:11 - 00016107 _____ () C:\Users\coxson\Downloads\FRST.txt
2014-06-02 12:41 - 2014-05-27 13:11 - 00000000 ____D () C:\FRST
2014-06-02 12:41 - 2012-12-10 15:45 - 00000000 ____D () C:\Users\Admin\AppData\Local\Temp
2014-06-02 12:41 - 2009-07-14 06:45 - 00020720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-02 12:41 - 2009-07-14 06:45 - 00020720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-02 12:40 - 2012-11-28 20:31 - 01361322 _____ () C:\Windows\WindowsUpdate.log
2014-06-02 12:39 - 2014-06-02 12:39 - 00000000 ____D () C:\Users\coxson\Downloads\FRST-OlderVersion
2014-06-02 12:39 - 2014-05-27 13:10 - 02067456 _____ (Farbar) C:\Users\coxson\Downloads\FRST64.exe
2014-06-02 12:39 - 2014-05-15 14:36 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\DropboxMaster
2014-06-02 12:39 - 2013-11-11 15:26 - 00000000 ___RD () C:\Users\coxson\Dropbox
2014-06-02 12:39 - 2013-11-11 15:07 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\Dropbox
2014-06-02 12:39 - 2013-06-18 10:46 - 00000000 ____D () C:\Users\coxson\AppData\Local\Temp
2014-06-02 12:36 - 2013-06-25 10:44 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-02 12:35 - 2013-06-18 10:44 - 00000000 ____D () C:\Users\coxson
2014-06-02 12:33 - 2014-06-02 10:28 - 00000168 _____ () C:\Windows\setupact.log
2014-06-02 12:33 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-02 12:32 - 2014-05-27 10:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-02 12:25 - 2014-06-02 11:30 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-06-02 12:25 - 2012-12-10 15:45 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla
2014-06-02 12:13 - 2012-01-06 19:54 - 00699712 _____ () C:\Windows\system32\perfh007.dat
2014-06-02 12:13 - 2012-01-06 19:54 - 00149820 _____ () C:\Windows\system32\perfc007.dat
2014-06-02 12:13 - 2009-07-14 07:13 - 01620812 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-02 12:12 - 2012-12-18 12:04 - 00000000 ____D () C:\FreeOCR
2014-06-02 12:06 - 2012-12-01 23:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-02 11:58 - 2013-01-14 17:11 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2589120432-3834562377-573463391-1005UA.job
2014-06-02 11:44 - 2013-06-25 10:44 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-02 11:30 - 2014-06-02 11:30 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-06-02 11:30 - 2014-06-02 11:30 - 00001044 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-06-02 11:30 - 2014-06-02 11:30 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Spyware Terminator
2014-06-02 11:30 - 2014-06-02 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
2014-06-02 11:30 - 2014-06-02 11:30 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-06-02 11:29 - 2014-06-02 11:29 - 05049344 _____ (Crawler.com ) C:\Users\coxson\Downloads\SpywareTerminatorSetup_3.0.0.82.exe
2014-06-02 11:26 - 2014-06-02 11:26 - 00002100 _____ () C:\Users\Admin\Desktop\ Malwarebytes Anti-Malware  - CHIP Downloader.lnk
2014-06-02 11:25 - 2014-06-02 11:25 - 00961360 _____ (Chip Digital GmbH) C:\Users\coxson\Downloads\Malwarebytes Anti Malware - CHIP-Installer (1).exe
2014-06-02 11:20 - 2014-06-02 11:20 - 00961360 _____ (Chip Digital GmbH) C:\Users\coxson\Downloads\Malwarebytes Anti Malware - CHIP-Installer.exe
2014-06-02 11:02 - 2014-06-02 11:02 - 00000302 _____ () C:\Windows\PFRO.log
2014-06-02 11:01 - 2013-11-14 10:49 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\Mp3tag
2014-06-02 11:01 - 2013-11-11 15:21 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-02 10:58 - 2013-11-12 14:14 - 00000000 ____D () C:\Users\coxson\Documents\DVDVideoSoft
2014-06-02 10:58 - 2013-06-18 10:44 - 00000000 ____D () C:\Users\coxson\Desktop\Bötefür 53
2014-06-02 10:58 - 2013-06-18 10:44 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\XnView
2014-06-02 10:58 - 2013-06-18 10:44 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\vlc
2014-06-02 10:57 - 2013-01-14 17:11 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2589120432-3834562377-573463391-1005Core.job
2014-06-02 10:39 - 2014-05-13 13:42 - 00000000 ____D () C:\AdwCleaner
2014-06-02 10:30 - 2013-07-15 12:39 - 00000000 ____D () C:\Users\coxson\Desktop\tzi
2014-06-02 10:30 - 2013-06-18 10:44 - 00000000 ____D () C:\Users\coxson\Desktop\bilder jona
2014-06-02 10:28 - 2014-06-02 10:28 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-02 10:28 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-02 10:26 - 2013-06-18 10:44 - 00000250 ___SH () C:\Users\coxson\ntuser.ini
2014-06-02 10:14 - 2014-06-02 11:06 - 00001427 _____ () C:\Users\coxson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-02 09:59 - 2014-06-02 09:59 - 00002386 _____ () C:\Users\coxson\Documents\cc_20140602_095918.reg
2014-06-02 09:47 - 2013-06-22 11:36 - 00000000 ____D () C:\Users\coxson\AppData\Local\CrashDumps
2014-06-01 11:23 - 2012-12-10 15:49 - 00000000 ____D () C:\Users\coxson-local\AppData\Local\Temp
2014-06-01 11:21 - 2014-05-27 09:25 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Nico Mak Computing
2014-05-30 16:00 - 2013-07-25 09:23 - 00000404 _____ () C:\Windows\Tasks\One-Click Optimizer.job
2014-05-30 13:42 - 2013-06-18 10:44 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\KeePass
2014-05-29 18:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-28 21:43 - 2014-05-28 09:16 - 00000000 ____D () C:\Users\coxson-local\AppData\Local\Mozilla
2014-05-28 21:33 - 2014-05-28 11:31 - 00000592 _____ () C:\Users\coxson-local\Desktop\Fixlist.txt
2014-05-28 11:32 - 2014-05-28 11:32 - 00000593 _____ () C:\Users\coxson\Downloads\Fixlist.txt
2014-05-28 08:59 - 2014-05-28 08:59 - 00001198 _____ () C:\Users\Admin\Desktop\JRT.txt
2014-05-28 08:39 - 2014-05-28 08:39 - 00000000 ____D () C:\Users\coxson-local\AppData\Local\Eraser 6
2014-05-28 08:33 - 2013-06-19 12:34 - 00000000 ____D () C:\Users\Admin\AppData\Local\Google
2014-05-27 13:15 - 2014-05-27 13:14 - 00040674 _____ () C:\Users\coxson\Downloads\Addition.txt
2014-05-27 13:10 - 2014-05-28 11:32 - 02066944 _____ (Farbar) C:\Users\coxson-local\Desktop\FRST64.exe
2014-05-27 11:10 - 2014-05-26 14:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-27 10:59 - 2014-05-27 10:59 - 01327971 _____ () C:\Users\Admin\Downloads\adwcleaner_3.211.exe
2014-05-27 10:13 - 2014-05-27 10:13 - 01016261 _____ (Thisisu) C:\Users\coxson\Downloads\JRT.exe
2014-05-27 10:09 - 2014-05-27 10:09 - 00000000 ____D () C:\Users\coxson\AppData\Local\Eraser 6
2014-05-27 10:09 - 2014-05-27 10:09 - 00000000 ____D () C:\Users\Admin\AppData\Local\Eraser 6
2014-05-27 09:51 - 2014-05-27 09:51 - 09110456 _____ (The Eraser Project) C:\Users\Admin\Downloads\Eraser_6.0.10.2620.exe
2014-05-27 09:34 - 2014-05-27 09:34 - 00000000 ____D () C:\Users\Admin\AppData\Local\Macromedia
2014-05-27 09:24 - 2014-05-27 09:24 - 04892480 _____ (WinZip International LLC ) C:\Users\coxson\Downloads\wzmp_8.exe
2014-05-27 09:24 - 2014-05-27 09:24 - 04892480 _____ (WinZip International LLC ) C:\Users\coxson\Downloads\wzmp_8 (1).exe
2014-05-27 09:00 - 2014-05-27 09:00 - 24677393 _____ () C:\Users\Admin\Downloads\vlc-2.1.3-win32.exe
2014-05-27 08:44 - 2013-11-25 10:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PWS
2014-05-27 08:30 - 2012-03-06 04:10 - 00001000 __RSH () C:\ProgramData\ntuser.pol
2014-05-26 18:57 - 2014-05-26 18:56 - 00002253 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-05-26 18:56 - 2014-05-26 18:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-26 18:56 - 2012-11-28 11:45 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-26 18:49 - 2014-05-26 16:21 - 00000000 ____D () C:\Program Files (x86)\Trojan Remover
2014-05-26 18:27 - 2014-05-26 18:27 - 39809104 _____ (Google Inc.) C:\Users\coxson\Downloads\ChromeStandaloneSetup_35.0.1916.114.exe
2014-05-26 17:40 - 2014-05-26 17:39 - 01327971 _____ () C:\Users\coxson\Downloads\adwcleaner_3.211.exe
2014-05-26 17:40 - 2014-05-26 17:39 - 01327971 _____ () C:\Users\coxson\Downloads\adwcleaner_3.211 (1).exe
2014-05-26 17:17 - 2013-06-18 10:44 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\Mozilla
2014-05-26 16:41 - 2012-11-28 11:55 - 00000000 ____D () C:\ProgramData\Temp
2014-05-26 16:35 - 2014-05-26 16:35 - 00000000 ____D () C:\Users\coxson\Documents\Simply Super Software
2014-05-26 16:32 - 2014-05-26 16:08 - 00000000 ____D () C:\Program Files (x86)\a-squared Free
2014-05-26 16:26 - 2013-06-18 10:44 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-26 16:23 - 2014-05-26 16:23 - 00000000 ____D () C:\ProgramData\Licenses
2014-05-26 16:15 - 2014-05-26 16:15 - 21407864 _____ (Simply Super Software ) C:\Users\coxson\Downloads\trjsetup690.exe
2014-05-26 16:06 - 2014-05-26 16:04 - 83704128 _____ (Emsi Software GmbH ) C:\Users\coxson\Downloads\a2FreeSetup27.exe
2014-05-26 16:06 - 2014-05-26 16:04 - 83704128 _____ (Emsi Software GmbH ) C:\Users\coxson\Downloads\a2FreeSetup27 (1).exe
2014-05-26 14:58 - 2012-12-11 16:28 - 00000000 ____D () C:\Users\Admin\AppData\Local\Mozilla
2014-05-26 14:56 - 2014-05-26 14:55 - 25200168 _____ (Mozilla) C:\Users\Admin\Downloads\Firefox_Setup_en28.0 (1).exe
2014-05-26 14:56 - 2014-05-14 12:35 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-26 14:55 - 2014-05-26 14:55 - 25200168 _____ (Mozilla) C:\Users\Admin\Downloads\Firefox_Setup_en28.0.exe
2014-05-26 14:04 - 2014-05-26 14:03 - 01327971 _____ () C:\Users\Admin\Downloads\adwcleaner_3.211 (1).exe
2014-05-26 13:58 - 2014-05-26 11:14 - 00000000 ____D () C:\Program Files\Unlocker
2014-05-26 13:31 - 2013-11-11 15:26 - 00000988 _____ () C:\Users\coxson\Desktop\Dropbox.lnk
2014-05-26 11:14 - 2014-05-26 11:14 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2014-05-26 10:25 - 2014-05-26 10:25 - 00000000 ____D () C:\Windows\ERUNT
2014-05-26 10:09 - 2014-05-26 10:09 - 00005408 _____ () C:\Users\coxson-local\Documents\cc_20140526_100939.reg
2014-05-26 10:08 - 2014-01-14 14:00 - 00000000 ____D () C:\Users\coxson-local\Tracing
2014-05-26 10:08 - 2013-11-18 00:29 - 00000000 ____D () C:\Users\coxson-local\AppData\Local\CrashDumps
2014-05-22 19:46 - 2012-12-18 22:11 - 00000000 ____D () C:\Users\coxson-local\AppData\Roaming\vlc
2014-05-22 14:04 - 2013-06-18 10:44 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\Nitro PDF
2014-05-22 13:59 - 2013-06-18 10:44 - 00013904 _____ () C:\Users\coxson\Sti_Trace.log
2014-05-22 10:47 - 2013-10-07 14:04 - 00000000 ____D () C:\Users\coxson-local\AppData\Roaming\Nitro PDF
2014-05-21 17:21 - 2014-05-21 17:21 - 00016054 _____ () C:\Users\Admin\Documents\cc_20140521_172059.reg
2014-05-21 17:14 - 2012-12-10 15:45 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-21 17:14 - 2012-12-10 15:45 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-21 15:45 - 2013-06-18 10:44 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\dvdcss
2014-05-20 18:12 - 2014-05-20 18:12 - 00000387 _____ () C:\Users\coxson\Desktop\Transcend (G) - Verknüpfung.lnk
2014-05-20 15:10 - 2013-06-18 10:48 - 00000000 ____D () C:\Users\coxson\AppData\Local\Mozilla
2014-05-20 13:43 - 2014-05-20 13:43 - 00001146 _____ () C:\Users\coxson\Documents\cc_20140520_134330.reg
2014-05-20 13:09 - 2014-05-20 13:08 - 00014716 _____ () C:\Users\coxson\Documents\cc_20140520_130838.reg
2014-05-20 12:45 - 2014-05-20 12:45 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-05-20 12:45 - 2014-05-20 12:45 - 00000828 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-20 12:45 - 2014-05-20 12:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-20 12:45 - 2014-05-20 12:45 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-20 12:43 - 2014-05-20 12:43 - 03671432 _____ (Piriform Ltd) C:\Users\coxson\Downloads\ccsetup413_slim.exe
2014-05-20 12:43 - 2014-05-20 12:43 - 00961360 _____ (Chip Digital GmbH) C:\Users\coxson\Downloads\CCleaner - CHIP-Downloader.exe
2014-05-20 11:39 - 2012-12-11 16:27 - 00000000 ____D () C:\Users\Admin\Desktop\FirefoxPortable
2014-05-15 22:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-15 18:44 - 2012-12-10 15:49 - 00000000 ___RD () C:\Users\coxson-local\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-15 18:44 - 2012-12-10 15:49 - 00000000 ___RD () C:\Users\coxson-local\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 12:01 - 2013-06-18 10:44 - 00000000 ____D () C:\Users\coxson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 10:47 - 2014-05-06 19:07 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 10:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-15 10:28 - 2012-12-05 11:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 10:20 - 2013-07-26 09:44 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 10:08 - 2012-12-03 00:54 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 14:14 - 2013-11-14 10:48 - 00000000 ____D () C:\Program Files (x86)\Mp3tag
2014-05-14 12:34 - 2014-05-14 12:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-14 12:31 - 2014-05-20 13:00 - 00629584 _____ (Chip Digital GmbH) C:\Users\coxson\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2014-05-14 12:07 - 2012-12-01 23:00 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 12:07 - 2012-12-01 23:00 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 12:07 - 2012-12-01 23:00 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-13 14:33 - 2014-05-20 15:04 - 01325827 _____ () C:\Users\coxson\Downloads\adwcleaner (1).exe
2014-05-13 14:11 - 2014-05-20 13:00 - 00283144 _____ (Mozilla) C:\Users\coxson\Downloads\Firefox Setup Stub 29.0.1.exe
2014-05-13 14:06 - 2014-05-20 13:00 - 00629584 _____ (Chip Digital GmbH) C:\Users\coxson\Downloads\Firefox - CHIP-Downloader.exe
2014-05-13 13:39 - 2014-05-27 11:13 - 01325827 _____ () C:\Users\coxson\Downloads\adwcleaner.exe
2014-05-13 13:39 - 2014-05-27 11:12 - 01325827 _____ () C:\Users\coxson\Desktop\adwcleaner.exe
2014-05-09 08:14 - 2014-05-14 20:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 20:14 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-08 18:36 - 2012-12-10 15:45 - 00000000 ____D () C:\Users\Admin
2014-05-07 18:39 - 2013-06-25 10:44 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-07 18:39 - 2013-06-25 10:44 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-06 02:46 - 2014-05-15 10:23 - 17847808 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 02:21 - 2014-05-15 10:23 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 02:21 - 2014-05-15 10:23 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 01:32 - 2014-05-15 10:23 - 12347392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 01:14 - 2014-05-15 10:23 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 01:14 - 2014-05-15 10:23 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-05 15:25 - 2013-06-28 19:43 - 00000000 ____D () C:\Users\coxson-local\AppData\Roaming\XnView
2014-05-05 12:57 - 2014-05-05 12:57 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-05 12:57 - 2014-05-05 12:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-05 12:56 - 2014-05-05 12:57 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-05 12:56 - 2014-05-05 12:57 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-05 12:56 - 2014-05-05 12:57 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-05 12:56 - 2014-05-05 12:57 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-05 12:56 - 2013-06-17 12:32 - 00000000 ____D () C:\Program Files (x86)\Java

Some content of TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\Quarantine.exe
C:\Users\coxson\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpx_pm3i.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-29 17:19

==================== End Of Log ==================