Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 12.04.2015, 14:59   #1
PunYing
 
Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund - Standard

Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund



Guten Tag zusammen,

Als ich heute morgen ein bisschen im Internet Explorer gebrowst habe, hat sich andauernd Werbung geöffnet und JavaScript hat sich deaktiviert. Ich habe mich natürlch gewundert und meinen PC neugestartet und als ich dann den IE wieder geöffnet habe, hats ihn total zerschossen. Google sieht ganz komisch aus und ich bin dann auf Firefox umgestiegen. Dort öffnet sich auch Werbung beim Klicken, aber irgendwie wird der Tab sofort wieder geschlossen und kann weiterarbeiten. Ich habe dann einen Scan mit Malwarebytes Anti-Malware gemacht und alles gefundene gelöscht.

Außerdem läuft im Hintergrund mehrere Programme namens "lomrdjhy", das auch manchmal im Vordergrund als komplett weißes Fenster da ist. Dann X-e ich das immer weg.

Ich hoffe, ihr könnt mir helfen...

Wie es in der Anleitung vom Forum steh, hab ich auch einige Logs:

Addition

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-04-2015
Ran by Tim² at 2015-04-12 14:33:05
Running from C:\Users\Tim²\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKLM-x32\...\uTorrent) (Version: 3.3.0.29126 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
ABC-Schutz-Simulator 1.1 (HKLM-x32\...\{8694B919-8C39-41FB-875E-0FC8E3EE3216}_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{C23EE7CE-C1A3-4F94-A8F0-9E0AC9C6DE6E}) (Version: 1.1 - Eyeo GmbH)
Adblock Plus for IE (HKLM-x32\...\{fd97d1e2-368a-4cd9-af63-8eeff938044a}) (Version: 1.1 - )
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Photoshop CS3 (HKLM-x32\...\Adobe_5f143314a5d434c8511097393d17397) (Version: 10.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Aerosoft's - Aerosoft Launcher (HKLM-x32\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.2.0.3 - Aerosoft)
aerosoft's - Berlin-Wittenberg (HKLM-x32\...\{04D946B3-0B81-41A4-A793-B59000EAEAA8}) (Version: 1.00 - aerosoft)
aerosoft's - Berlin-Wittenberg (HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\{04D946B3-0B81-41A4-A793-B59000EAEAA8}) (Version: 1.00 - aerosoft)
aerosoft's - Koeln-Duesseldorf (HKLM-x32\...\{D2379705-565A-40AB-B2F6-5CD70D599AE2}) (Version: 1.01 - aerosoft)
aerosoft's - OMSI 2 - Addon Wien (HKLM-x32\...\{FFAB9F9B-C38C-4FC2-A1EC-1099D2832D18}) (Version: 1.10 - aerosoft)
aerosoft's - OMSI 2 - Drei Generationen (HKLM-x32\...\{C88376AA-BF64-40F4-9AD6-F8A18DA394F2}) (Version: 1.10 - aerosoft)
aerosoft's - OMSI 2 - Hamburg (HKLM-x32\...\{5BF6B590-F7F5-46B5-B5F4-B0CA93423AD6}) (Version: 2.02 - aerosoft)
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Aiseesoft AVCHD Video Konverter 6.2.16 (HKLM-x32\...\{160B528D-725A-45d3-B98B-53ADA7E118AF}_is1) (Version:  - )
AMD Catalyst Install Manager (HKLM\...\{00957033-C081-5235-665A-A014A6E2FF7B}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Ashampoo AppLauncher (Medion) v.1.0.0 (HKLM-x32\...\Ashampoo AppLauncher (Medion)_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Audio Recorder Pro 3.70 (HKLM-x32\...\Audio Recorder Pro_is1) (Version:  - )
AutoIt v3.3.12.0 (HKLM-x32\...\AutoItv3) (Version: 3.3.12.0 - AutoIt Team)
Bandicam (HKLM-x32\...\Bandicam) (Version: 2.0.3.674 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandisoft.com)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.0.0.0 - Electronic Arts)
Battlefield Heroes (HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}) (Version:  - EA Digital illusions)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Battlestations: Midway (HKLM-x32\...\{6BC0CDD6-E0C2-434D-9365-23E79E42DA95}) (Version: 1.00.0000 - Ihr Firmenname)
Bing Bar (HKLM-x32\...\{3611CA6C-5FCA-4900-A329-6A118123CCFC}) (Version: 7.1.355.0 - Microsoft Corporation)
Blue Byte Game Channel (HKLM-x32\...\Blue Byte Game Channel) (Version:  - UbiSoft)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.4.4079 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{8DCCC556-265B-478A-8B32-C12DA988BA74}) (Version: 0.9.4.4079 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Bus-Simulator 2012 (HKLM-x32\...\Bus-Simulator 2012_is1) (Version:  - astragon)
Car Mechanic Simulator 2014 Demo (HKLM-x32\...\Steam App 277990) (Version:  - Red Dot Games)
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)
ClearSkinFX for Digital Cameras (HKLM-x32\...\ClearSkinFX for Digital Cameras_is1) (Version:  - )
Clone Wars (HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\SOE-Clone Wars) (Version:  - Sony Online Entertainment)
Construction-Simulator 2015 (HKLM-x32\...\Steam App 289950) (Version:  - weltenbauer. Software Entwicklung GmbH)
Contents (x32 Version: 15.0.0.258 - Corel Corporation) Hidden
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Corel VideoStudio Pro X5 (HKLM-x32\...\_{1A1BD41E-9854-4957-8959-F9559A8862A7}) (Version: 15.0.0.258 - Corel Corporation)
CPUID CPU-Z 1.70 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Cube World version 0.0.1 (HKLM-x32\...\{D692A0E0-1BBB-4E9C-826E-4254EE330830}_is1) (Version: 0.0.1 - Picroma)
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.3124 - CyberLink Corp.)
CyberLink PhotoNow (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.7717 - CyberLink Corp.)
CyberLink PowerDirector (Version: 9.0.0.3815c - CyberLink Corp.) Hidden
CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.)
CyberLink PowerRecover (Version: 5.7.0.0913 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Demolition Company Gold (HKLM-x32\...\DemolitionCompanyDE_is1) (Version:  - GIANTS Software)
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
diclovit's mod pack 9.6.1 (HKLM-x32\...\{28B1238E-1C18-4637-A2B7-95315E94EB29}_is1) (Version: 9.6.1 - diclovit)
Die Polizei 2013 (HKLM-x32\...\Die Polizei 2013) (Version:  - Quadriga Games)
Die Siedler IV (HKLM-x32\...\S4Uninst) (Version:  - )
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.17.60 - Electronic Arts)
Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.0.81 - Electronic Arts)
Die Sims™ 3 Traumkarrieren (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)
DJ_AIO_NS_LP_DocCD (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden
DJ_AIO_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
DJ_AIO_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
DJ_AIO_Software_min (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
eazyzoom (HKLM-x32\...\{08E284AA-B39A-4027-889B-B68E370EA20C}) (Version: 1.1.0.30 - eazyzoom)
Emergency4 (HKLM-x32\...\{9A4C534E-431F-4A17-97D4-D1682B19A054}) (Version: 1.03.001 - )
Empire: Total War (HKLM-x32\...\Steam App 10500) (Version:  - The Creative Assembly)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.0.2 - SCS Software)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
Euro Truck Simulator 2 Multiplayer 0.1.0.9 Alpha R3 (HKLM-x32\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 0.1.0.9 Alpha R3 - ETS2MP Team)
F2100 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
F2100_Help (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden
Fahrzeit Vol.7 'Spätschicht' (HKLM-x32\...\C8AE2E19-F404-4A20-9590-4DFCB959692E_is1) (Version: 1.0 - 3DZUG)
Feuer- und Notfallsimulation Wegberg Version 6.0 (HKLM-x32\...\{Wegberg-Modifikation-6-0}_is1) (Version: 6.0 - Marco H.)
Feuerwehr-Simulator 2010 (HKLM-x32\...\FFsim) (Version:  - )
Firefighters 2014 (HKLM-x32\...\Steam App 291910) (Version:  - VIS - Visual Imagination Software)
Flughafen-Feuerwehr-Simulator 2013 Version 1.0 (HKLM-x32\...\{86D596F4-CB90-4F4B-B752-8A55D0C62664}_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalleri (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalleriet (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free M4a to MP3 Converter 7.2 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
Free YouTube Download Manager (HKLM-x32\...\{0f2d7150-ef69-406d-abd8-3d6627a6031c}) (Version: 1.0.0.4 - Freetec)
Free YouTube Download Manager (x32 Version: 1.0.0.4 - Freetec) Hidden
Freemake Video Converter Version 4.1.4 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.4 - Ellora Assets Corporation)
Galeria de Fotografias (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galeria fotografii (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Gameforge Live 1.0 "Legend" (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 1.1.1724 - Gameforge)
GIANTS Editor 4.1.9 (HKLM-x32\...\giants_editor_4.1.9_is1) (Version: 4.1.9 - GIANTS Software GmbH)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.118 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Green Line 3 Sprachtrainer (HKLM-x32\...\{EE6F9172-D644-4C45-9892-2F22AF49F88C}) (Version: 1.00.000 - Klett)
Handset WinDriver 1.02.02.00 (HKLM-x32\...\Handset WinDriver) (Version: 1.02.02.00 - Huawei technologies Co., Ltd.)
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet All-In-One Software (HKLM\...\{2CB8566A-8EA6-417A-BAB1-1B10A88C79BB}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
ICA (x32 Version: 15.0.0.258 - Corel Corporation) Hidden
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.20 - Intel(R) Corporation) Hidden
Internet Explorer Toolbar 4.8 by SweetPacks (x32 Version: 4.8.0000 - SweetIM Technologies Ltd.) Hidden <==== ATTENTION
IPM_VS_Pro (x32 Version: 15.0 - Corel Corporation) Hidden
ISCOM (x32 Version: 15.0.0.258 - Corel Corporation) Hidden
Java 7 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417025FF}) (Version: 7.0.250 - Oracle)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{653C1B5A-3287-47B1-8613-0745D4E771C4}) (Version: 15.0.0.463 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 15.0.0.463 - Kaspersky Lab) Hidden
Kehrmaschinen-Simulator 2011 (HKLM-x32\...\Kehrmaschinen-Simulator 2011_is1) (Version:  - astragon)
Landwirtschafts Simulator 15 (HKLM-x32\...\FarmingSimulator2015DE_is1) (Version: 1.1.0.0 - GIANTS Software)
Landwirtschafts Simulator 2013 (HKLM-x32\...\FarmingSimulator2013DE_is1) (Version: 1.0 - GIANTS Software)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Logitech G430 Driver (HKLM-x32\...\G430_Driver) (Version: 8.53.0.2 - Logitech)
Logitech Gaming Software 8.56 (HKLM\...\Logitech Gaming Software) (Version: 8.56.109 - Logitech Inc.)
LONDON CITY AIRPORT  (HKLM-x32\...\LONDON CITY AIRPORT FSX Accelaration pack/sp2) (Version: FSX Accelaration pack/sp2 - )
Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
Man Lion's City 2.10 (HKLM-x32\...\Man Lion's City 2.10) (Version:  - )
MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Medal of Honor Allied Assault (HKLM-x32\...\{0DEA94ED-915A-4834-A87E-388D012C8E02}) (Version:  - )
Mediathek (HKLM-x32\...\{EFFED0C0-5299-422E-AFE6-8B8066D18A2A}) (Version: 1.4.0 - Medion)
Medion Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
Medion Home Cinema 10 (x32 Version: 10.1924 - CyberLink Corp.) Hidden
Microsoft Combat Flight Simulator 2 (HKLM-x32\...\Combat Flight Simulator 2.0) (Version:  - )
Microsoft Flight Simulator SimConnect Client v10.0.62608.0 (HKLM-x32\...\{33D89314-361A-4495-A1E1-0ACBCE08F78D}) (Version: 10.0.62608.0 - Microsoft Corporation)
Microsoft Flight Simulator X: Steam Edition (HKLM-x32\...\Steam App 314160) (Version:  - Microsoft Game Studios)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Mobile Partner (HKLM-x32\...\Mobile Partner) (Version: 21.005.15.00.705 - Huawei Technologies Co.,Ltd)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 33.1.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1.1 (x86 de)) (Version: 33.1.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
NaturalReaderFree (HKLM-x32\...\{262EFBD9-A907-490F-81F4-561FDD3A8C5C}) (Version: 1.00.0000 - Naturalsoft limited)
Next Car Game Free Technology Demo (HKLM-x32\...\Next Car Game Free Technology Demo) (Version:  - Bugbear Entertainment)
Nostale(DE) (HKLM-x32\...\NosTale(DE)_is1) (Version:  - Gameforge 4D GmbH)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.5 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
Oblivion (HKLM-x32\...\{C66BF9FD-D367-4E13-8EB8-385FFEA20DB3}) (Version: 1.2.0416 - Bethesda Softworks)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
OMSI - Der Omnibussimulator (HKLM-x32\...\{9AE850A4-B89D-4875-A159-B1B64D717EFB}) (Version: 1.04 - aerosoft)
OMSI 2 (HKLM-x32\...\Steam App 252530) (Version:  - MR-Software GbR)
OMSI Addon Manager Version 1.2.4 (HKLM-x32\...\{32B08666-1587-435D-988C-7958A04B218A}_is1) (Version: 1.2.4 - Jan Kiesewalter)
Origin (HKLM-x32\...\Origin) (Version: 9.1.10.2728 - Electronic Arts, Inc.)
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
PhotoFiltre 7 (HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\PhotoFiltre 7) (Version:  - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Pluspack Nürnberg-Saalfeld (HKLM-x32\...\{044E5F9A-EDAC-45EE-9471-340965CF8AA6}) (Version: 1.0 - vizzart)
Podstawowe programy Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
PriceFountain (remove only) (HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\PriceFountain) (Version: 1.0.8.6 - Price Fountain) <==== ATTENTION!
Professional Farmer 2014 Demo (HKLM-x32\...\Steam App 264930) (Version:  - PlayWay S.A.)
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
ProTrain Perfect 2 - Aufgabenfix - (HKLM-x32\...\{0E3DB576-9B7D-43FA-9F4B-D09A86899DAB}) (Version: 1.0.1 - Blue Sky Interactive)
ProTrain Perfect 2 - Nürnberg - Saalfeld - (HKLM-x32\...\{1FE4482C-E7EC-4A88-B3EE-AC13054E789E}) (Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect 2 - Streckenupdate - (HKLM-x32\...\{9547B52A-58E0-4AB5-B159-506728C5404B}) (Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect 2 (HKLM-x32\...\AuranTS2009_ptp2_is1) (Version:  - Auran)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
QuickLaunch (HKLM-x32\...\{A802F1E3-34C8-4C84-9948-C1C4E37D0FA9}) (Version: 1.00.0019 - Lenovo Group Limited)
QuickShare (HKLM-x32\...\{CC1C2EE8-8E03-4D79-9758-C208D4438A3E}) (Version: 1.146.60.12450 - Linkury Inc.) <==== ATTENTION
Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Railtraction BR 648 Coradia Lint41 (HKLM-x32\...\{6DB7926B-7DBB-438E-8D66-6CCCC25F0C25}) (Version: 1.0.2 - Railtraction)
Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 5.3.25.0 - Razer Inc.)
Real Heroes Firefighter (HKLM-x32\...\Real Heroes - Firefighter_is1) (Version:  - rondomedia)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.23.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7293 - Realtek Semiconductor Corp.)
RESCUE 2013 (HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\RESCUE 2013) (Version: 1.00.00.00 - rondomedia GmbH)
RESCUE 2013 DEMO (HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\RESCUE 2013 DEMO) (Version: 1.00.00.00 - rondomedia GmbH)
Rettungswagen Simulator 2012 (HKLM-x32\...\Rettungswagen Simulator 2012) (Version:  - )
Rettungswagen Simulator 2014 (HKLM-x32\...\Rettungswagen Simulator 2014) (Version: 1.0 - Z-Software GmbH)
Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version:  - Piranha Bytes)
RoadRider  0.1.5.9.4 (HKLM-x32\...\{2653CE3E-058A-4DCE-8116-2A9643A83099}) (Version:  - Tyroonis)
RTS Wegberg Version 2.0 (HKLM-x32\...\{RTS-Wegberg-2-0}_is1) (Version: 2.0 - Marco H.)
Sandboxie 3.76 (64-bit) (HKLM\...\Sandboxie) (Version: 3.76 - SANDBOXIE L.T.D)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Setup (x32 Version: 15.0.0.258 - Corel Corporation) Hidden
Share (x32 Version: 15.0.0.258 - Corel Corporation) Hidden
Share64 (Version: 15.0.0.258 - Corel Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Silent Hunter 5 (HKLM-x32\...\{AC61C594-5F86-4BE9-ABAF-763C6A8E2302}) (Version: 1.2.0 - Ubisoft)
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts)
Ski Region Simulator (HKLM-x32\...\Steam App 270950) (Version:  - Giants Software)
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
SmartSound Common Data (HKLM-x32\...\InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}) (Version: 1.1.0 - SmartSound Software Inc.)
SmartSound Common Data (x32 Version: 1.1.0 - SmartSound Software Inc.) Hidden
SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.6 - SmartSound Software Inc.)
SmartSound Quicktracks 5 (x32 Version: 5.1.6 - SmartSound Software Inc.) Hidden
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
SpinTires Tech Demo (June 060613) (HKLM-x32\...\{9AF7D6F5-50A5-432C-9F7B-83BCE03B11A0}) (Version: 1.3 - Oovee)
Sprachtrainer Fonts (HKLM-x32\...\{FBCF2ED3-AFB5-475E-BF9A-30BEAD366FBC}) (Version: 1.00.01 - Ernst Klett Verlag GmbH)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Stronghold (HKLM-x32\...\{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}) (Version:  - )
Stronghold Crusader (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version:  - )
Super Mario 3 Editable (HKLM-x32\...\Super Mario 3 Editable) (Version:  - )
Super Mario Bros. X version 1.3 (HKLM-x32\...\{C9EAEE6B-741F-421D-B9CE-9FA300DA92AD}_is1) (Version: 1.3 - SuperMarioBrothers.org)
SweetIM Bundle by SweetPacks (HKLM-x32\...\SweetIM Bundle by SweetPacks) (Version: 1.0.0.0 - SweetPacks LTD) <==== ATTENTION
TaD Premium Pack II (DEMO) (HKLM-x32\...\TaD Premium Pack II (DEMO)) (Version:  - )
TeamSpeak 3 Client (HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
Train Simulator 2014 (HKLM-x32\...\Steam App 24010) (Version:  - RailSimulator.com)
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Update for PriceFountain (HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\Price Fountain) (Version:  - Update for PriceFountain) <==== ATTENTION
VAFS5 (HKLM-x32\...\309E6243-31FB-434E-9FF5-9AFEB1542DAD) (Version: 5.1.1.20 - VAFINANCIALS)
Vegas Pro 11.0 (64-bit) (HKLM\...\{7E3B2D0F-029B-11E2-BD68-F04DA23A5C58}) (Version: 11.0.701 - Sony)
Versystem Soundboard (HKLM-x32\...\VersystemSoundboard) (Version:  - )
vi-view uninstall (HKLM-x32\...\vi-view uninstall) (Version:  - vi-view) <==== ATTENTION
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
VMLite Workstation (HKLM\...\{197F2BEF-2705-406E-8CEB-8E404FFFE414}) (Version: 3.2.6 - VMLite)
VSClassic (x32 Version: 15.0.0.258 - Corel Corporation) Hidden
VSHelp (x32 Version: 15.0.0.258 - Corel Corporation) Hidden
VSPro (x32 Version: 15.0.0.258 - Corel Corporation) Hidden
WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 3.0.2.1739 - 1&1 Mail & Media GmbH)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
Werkfeuerwehr-Simulator 2014 Version 1.0 (HKLM-x32\...\{A98167B4-4E26-4DA4-A57C-74A3ED3C845D}_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version:  - )
WinRAR 4.20 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Xilisoft HD Video Converter (HKLM-x32\...\Xilisoft HD Video Converter) (Version: 7.8.6.20150206 - Xilisoft)
XMedia Recode Version 3.1.7.4 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.7.4 - XMedia Recode)
XTab (HKLM-x32\...\XTab) (Version: 4.0.2.1615 - XTab system) <==== ATTENTION
Συλλογή φωτογραφιών (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

ATTENTION: System Restore is disabled.
Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => 
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job =>  <==== ATTENTION
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job =>  <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => 
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => 
Task: C:\WINDOWS\Tasks\Price Fountain.job => 

==================== Loaded Modules (whitelisted) ==============

2015-04-12 10:05 - 2015-04-12 10:05 - 01149440 _____ () C:\ProgramData\eazyzoom\1.1.0.30\lomr6jhy.dll
2015-04-12 10:06 - 2015-04-12 10:06 - 00449024 _____ () C:\ProgramData\eazyzoom\1.1.0.30\lomrdjhy.exe
2015-04-12 10:06 - 2015-04-12 10:06 - 00245760 _____ () C:\ProgramData\eazyzoom\1.1.0.30\lomr3jhy.exe
2015-04-12 10:05 - 2015-04-12 10:05 - 00561152 _____ () C:\ProgramData\eazyzoom\1.1.0.30\lomr6jhy.exe
2014-09-16 23:02 - 2014-09-16 23:02 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2014-09-16 23:02 - 2014-09-16 23:02 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-09-16 23:02 - 2014-09-16 23:02 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2014-09-16 23:02 - 2014-09-16 23:02 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tammgF119.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tammgR119.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tammgF119.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tammgR119.sys => ""="Driver"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2194363954-2173886408-846520025-1006\Control Panel\Desktop\\Wallpaper -> C:\Users\Tim²\Pictures\DSCN1115.JPG
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "GameforgeLive"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\StartupApproved\Run: => "Cauryferi"
HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\StartupApproved\Run: => "pricefountainw.exe"
HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\StartupApproved\Run: => "Skype"

==================== Accounts: =============================

Administrator (S-1-5-21-2194363954-2173886408-846520025-500 - Administrator - Disabled)
******* (S-1-5-21-2194363954-2173886408-846520025-1005 - Limited - Enabled) => C:\Users\*******
Gast (S-1-5-21-2194363954-2173886408-846520025-501 - Limited - Disabled)
Hio (S-1-5-21-2194363954-2173886408-846520025-1007 - Administrator - Enabled) => C:\Users\Hio
Michi (S-1-5-21-2194363954-2173886408-846520025-1008 - Limited - Enabled) => C:\Users\Michi
Tim (S-1-5-21-2194363954-2173886408-846520025-1002 - Limited - Enabled) => C:\Users\Tim
Tim² (S-1-5-21-2194363954-2173886408-846520025-1006 - Limited - Enabled) => C:\Users\Tim²

==================== Faulty Device Manager Devices =============

Name: VMLite Host-Only Ethernet Adapter
Description: VMLite Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: VMLite Inc.
Service: VBoxNetAdp
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/12/2015 00:57:12 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (04/12/2015 00:30:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm lomrdjhy.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 78c

Startzeit: 01d0750752e5c917

Endzeit: 4294967295

Anwendungspfad: C:\ProgramData\eazyzoom\1.1.0.30\lomrdjhy.exe

Berichts-ID: ea69138f-e0fe-11e4-82f3-d8cb8a19534b

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (04/12/2015 11:58:59 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (04/12/2015 11:39:24 AM) (Source: MsiInstaller) (EventID: 11309) (User: Tims-Pc)
Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt.  System error 3.  Verify that the file exists and that you can access it.

Error: (04/12/2015 11:00:17 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (04/11/2015 07:19:25 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4

Error: (04/11/2015 07:19:25 PM) (Source: Perflib) (EventID: 1010) (User: )
Description: C:\Windows\System32\winspool.drvSpooler4

Error: (04/11/2015 07:19:24 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (04/11/2015 07:19:24 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 

Error: (04/11/2015 07:19:24 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\WINDOWS\system32\msdtcuiu.DLL4


System errors:
=============
Error: (04/12/2015 01:37:57 PM) (Source: DCOM) (EventID: 10010) (User: Tims-Pc)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (04/12/2015 01:37:27 PM) (Source: DCOM) (EventID: 10010) (User: Tims-Pc)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (04/12/2015 00:57:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "tammgF119 service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (04/12/2015 00:57:12 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (04/12/2015 00:55:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Mobile Partner. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (04/12/2015 00:55:56 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Mobile Partner. OUC erreicht.

Error: (04/12/2015 00:55:42 PM) (Source: SbieSvc) (EventID: 9153) (User: )
Description: SBIE9153 Treiber kann nicht gestartet werden (SbieDrv)

Error: (04/12/2015 00:55:37 PM) (Source: SbieDrv) (EventID: 1103) (User: )
Description: SBIE1103 Sandboxie-Treiber (SbieDrv) version 3.76 konnte nicht gestartet werden

Error: (04/12/2015 00:55:37 PM) (Source: SbieDrv) (EventID: 1105) (User: )
Description: SBIE1105 Unbekannte Betriebssystem-Version: 6.3

Error: (04/12/2015 11:59:32 AM) (Source: SbieSvc) (EventID: 9153) (User: )
Description: SBIE9153 Treiber kann nicht gestartet werden (SbieDrv)


Microsoft Office Sessions:
=========================
Error: (04/12/2015 00:57:12 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (04/12/2015 00:30:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: lomrdjhy.exe0.0.0.078c01d0750752e5c9174294967295C:\ProgramData\eazyzoom\1.1.0.30\lomrdjhy.exeea69138f-e0fe-11e4-82f3-d8cb8a19534b

Error: (04/12/2015 11:58:59 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (04/12/2015 11:39:24 AM) (Source: MsiInstaller) (EventID: 11309) (User: Tims-Pc)
Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt.  System error 3.  Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (04/12/2015 11:00:17 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (04/11/2015 07:19:25 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4

Error: (04/11/2015 07:19:25 PM) (Source: Perflib) (EventID: 1010) (User: )
Description: C:\Windows\System32\winspool.drvSpooler4

Error: (04/11/2015 07:19:24 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (04/11/2015 07:19:24 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 

Error: (04/11/2015 07:19:24 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\WINDOWS\system32\msdtcuiu.DLL4


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
Percentage of memory in use: 31%
Total physical RAM: 8127.9 MB
Available physical RAM: 5592.64 MB
Total Pagefile: 9407.9 MB
Available Pagefile: 6099.48 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:869.36 GB) (Free:387.71 GB) NTFS
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:43.97 GB) NTFS
Drive h: () (Removable) (Total:15.02 GB) (Free:2.45 GB) FAT32

==================== MBR & Partition Table ==================

==================== End Of Log ============================
         

defogger_disable

Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:31 on 12/04/2015 (Hio)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Alt 12.04.2015, 15:02   #2
PunYing
 
Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund - Standard

Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund



FRST


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-04-2015
Ran by Tim² (ATTENTION: The logged in user is not administrator) on TIMS-PC on 12-04-2015 14:32:17
Running from C:\Users\Tim²\Downloads
Loaded Profiles: Tim & ******* & Tim² & Hio & Michi (Available profiles: Tim & ****** & Tim² & Hio & Michi)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

Failed to access process -> smss.exe
Failed to access process -> csrss.exe
Failed to access process -> csrss.exe
Failed to access process -> wininit.exe
Failed to access process -> winlogon.exe
Failed to access process -> services.exe
Failed to access process -> lsass.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> dwm.exe
Failed to access process -> atiesrxx.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> atieclxx.exe
Failed to access process -> svchost.exe
Failed to access process -> spoolsv.exe
Failed to access process -> svchost.exe
Failed to access process -> armsvc.exe
Failed to access process -> avp.exe
Failed to access process -> mDNSResponder.exe
Failed to access process -> HD-LogRotatorService.exe
Failed to access process -> HD-UpdaterService.exe
Failed to access process -> CLMSMonitorService.exe
Failed to access process -> CLMSServer.exe
Failed to access process -> svchost.exe
Failed to access process -> dasHost.exe
Failed to access process -> lomrajhy.exe
Failed to access process -> ouc.exe
Failed to access process -> svchost.exe
Failed to access process -> lomrwjhy.exe
Failed to access process -> svchost.exe
Failed to access process -> PnkBstrA.exe
Failed to access process -> PsiService_2.exe
Failed to access process -> GameScannerService.exe
Failed to access process -> RichVideo64.exe
Failed to access process -> RzKLService.exe
Failed to access process -> svchost.exe
Failed to access process -> TeamViewer_Service.exe
Failed to access process -> VMLiteService.exe
Failed to access process -> WmiPrvSE.exe
Failed to access process -> svchost.exe
Failed to access process -> svchost.exe
Failed to access process -> WUDFHost.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
(Microsoft Corporation) C:\Windows\System32\WpcMon.exe
Failed to access process -> SearchIndexer.exe
() C:\ProgramData\eazyzoom\1.1.0.30\lomrdjhy.exe
() C:\ProgramData\eazyzoom\1.1.0.30\lomr3jhy.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\ProgramData\eazyzoom\1.1.0.30\lomr6jhy.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
Failed to access process -> OriginClientService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\klwtblfs.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
Failed to access process -> PnkBstrB.exe
Failed to access process -> SeaPort.EXE
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\livecomm.exe
Failed to access process -> SearchProtocolHost.exe
Failed to access process -> SearchFilterHost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7637208 2014-07-15] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [11877656 2014-09-16] (Logitech Inc.)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-20] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [GameforgeLive] => C:\Program Files (x86)\GameforgeLive\gfl_client.exe [3034496 2014-08-07] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-08] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-09-11] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [98256 2015-01-26] (Razer Inc.)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2015-03-17] (Malwarebytes Corporation)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\Run: [uTorrent] => C:\Users\Tim²\AppData\Roaming\uTorrent\uTorrent.exe [1051984 2013-02-20] (BitTorrent Inc.)
HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [765200 2012-12-16] (SANDBOXIE L.T.D)
HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2889408 2015-04-09] (Valve Corporation)
HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-2194363954-2173886408-846520025-1006\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tim²\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tim²\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tim²\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tim²\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tim²\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tim²\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tim²\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tim²\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
GroupPolicyUsers\S-1-5-21-2194363954-2173886408-846520025-1006\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://myhome.vi-view.com/?type=hp&ts=1420388967&from=cor&uid=ST1000DM003-9YN162_Z1D33NAGXXXXZ1D33NAG
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://myhome.vi-view.com/web/?type=ds&ts=1420388967&from=cor&uid=ST1000DM003-9YN162_Z1D33NAGXXXXZ1D33NAG&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://myhome.vi-view.com/?type=hp&ts=1420388967&from=cor&uid=ST1000DM003-9YN162_Z1D33NAGXXXXZ1D33NAG
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1420388967&from=cor&uid=ST1000DM003-9YN162_Z1D33NAGXXXXZ1D33NAG&q={searchTerms}
HKU\S-1-5-21-2194363954-2173886408-846520025-1006\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKU\S-1-5-21-2194363954-2173886408-846520025-1006\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
HKU\S-1-5-21-2194363954-2173886408-846520025-1006\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://visualbee.delta-search.com/?affID=121376&tt=gc_&babsrc=HP_ss&mntrId=1463D43D7E2F485C
URLSearchHook: [S-1-5-21-2194363954-2173886408-846520025-1002] ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: [S-1-5-21-2194363954-2173886408-846520025-1005] ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: [S-1-5-21-2194363954-2173886408-846520025-1007] ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: [S-1-5-21-2194363954-2173886408-846520025-1008] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1420388967&from=cor&uid=ST1000DM003-9YN162_Z1D33NAGXXXXZ1D33NAG&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1420388967&from=cor&uid=ST1000DM003-9YN162_Z1D33NAGXXXXZ1D33NAG&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1420388967&from=cor&uid=ST1000DM003-9YN162_Z1D33NAGXXXXZ1D33NAG&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1420388967&from=cor&uid=ST1000DM003-9YN162_Z1D33NAGXXXXZ1D33NAG&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2194363954-2173886408-846520025-1006 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-2194363954-2173886408-846520025-1006 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1420388967&from=cor&uid=ST1000DM003-9YN162_Z1D33NAGXXXXZ1D33NAG&q={searchTerms}
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-10-09] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-06-22] (Oracle Corporation)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-06-22] (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2013-10-08] (Adblock Plus)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-10-09] (Kaspersky Lab ZAO)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25] (Microsoft Corporation.)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2013-10-08] (Adblock Plus)
Toolbar: HKLM - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
Toolbar: HKLM-x32 - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll [2013-08-22] (Microsoft Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25] (Microsoft Corporation.)
DPF: HKLM-x32 {784797A8-342D-4072-9486-03C8D0F2F0A1} hxxp://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.203.0.cab
DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.96.0.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Tim²\AppData\Roaming\Mozilla\Firefox\Profiles\9ouh5dex.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-05] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll [2013-06-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-06-22] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-05] ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.11.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-01-31] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2014-10-09] ()
FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2014-10-09] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-10-09] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-03-02] (Pando Networks)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2015-04-12] (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2015-04-12] (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2194363954-2173886408-846520025-1006: @soe.sony.com/installer,version=1.0.3 -> C:\Users\Tim²\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\npsoe.dll [2012-03-19] ()
FF Plugin HKU\S-1-5-21-2194363954-2173886408-846520025-1006: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tim²\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-11-25] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2194363954-2173886408-846520025-1006: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-04-21] (Ubisoft)
FF user.js: detected! => C:\Users\Tim²\AppData\Roaming\Mozilla\Firefox\Profiles\9ouh5dex.default\user.js [2014-09-07]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\vi-view.xml [2015-01-04]
FF Extension: EazyZoom - C:\Users\Tim²\AppData\Roaming\Mozilla\Firefox\Profiles\9ouh5dex.default\Extensions\do@cireleg.com [2015-04-12]
FF Extension: WEB.DE MailCheck - C:\Users\Tim²\AppData\Roaming\Mozilla\Firefox\Profiles\9ouh5dex.default\Extensions\toolbar@web.de [2015-04-12]
FF Extension: Adblock Plus - C:\Users\Tim²\AppData\Roaming\Mozilla\Firefox\Profiles\9ouh5dex.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-07]
FF Extension: UITBAutoInstaller - C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\{edd7fc99-d65c-4979-85c2-ddeed30c50c7} [2015-04-12]
FF HKLM-x32\...\Firefox\Extensions: [ocr@babylon.com] - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\ocr@babylon.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Ngăn chặn trang web nguy hiểm - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2014-08-31]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Bàn phím ảo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-08-31]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Công cụ kiểm tra liên kết của Kaspersky - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2014-08-31]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2014-08-31]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
FF Extension: An toàn giao dịch tài chính - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2014-08-31]
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Hio\AppData\Roaming\Mozilla\Firefox\Profiles\8csep4al.default\extensions\faststartff@gmail.com

Chrome: 
=======
CHR Profile: C:\Users\Tim²\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Tim²\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-24]
CHR Extension: (Google Docs) - C:\Users\Tim²\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-24]
CHR Extension: (Google Drive) - C:\Users\Tim²\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-24]
CHR Extension: (YouTube) - C:\Users\Tim²\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-24]
CHR Extension: (Adblock Plus) - C:\Users\Tim²\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-04-02]
CHR Extension: (Google Search) - C:\Users\Tim²\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-24]
CHR Extension: (Kaspersky Protection) - C:\Users\Tim²\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2015-01-24]
CHR Extension: (Google Sheets) - C:\Users\Tim²\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-24]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Tim²\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13]
CHR Extension: (Google Wallet) - C:\Users\Tim²\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-24]
CHR Extension: (Gmail) - C:\Users\Tim²\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-24]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-08] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-08] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-08] (BlueStack Systems, Inc.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2014-12-03] (Macrovision Europe Ltd.) [File not signed]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-04-12] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-04-12] (globalUpdate) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 judkabpirw; C:\ProgramData\eazyzoom\1.1.0.30\lomrajhy.exe [586224 2015-04-12] ()
R2 lmhosts; C:\Windows\system32\svchost.exe [38792 2014-11-21] (Microsoft Corporation)
R2 lmhosts; C:\Windows\SysWOW64\svchost.exe [33088 2014-11-21] (Microsoft Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
S2 Mobile Partner. RunOuc; C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [246112 2014-07-27] ()
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NlaSvc; C:\Windows\System32\svchost.exe [38792 2014-11-21] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\SysWOW64\svchost.exe [33088 2014-11-21] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [38792 2014-11-21] (Microsoft Corporation)
R2 nsi; C:\Windows\SysWOW64\svchost.exe [33088 2014-11-21] (Microsoft Corporation)
R2 nuqchxi; C:\ProgramData\eazyzoom\1.1.0.30\lomrwjhy.exe [250352 2015-04-12] ()
R3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-04-10] (Electronic Arts)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2015-04-01] ()
R2 PnkBstrB; C:\WINDOWS\SysWOW64\PnkBstrB.exe [348672 2015-04-12] ()
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [186560 2015-01-31] ()
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [129168 2015-01-26] (Razer Inc.)
S2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [123664 2012-12-16] (SANDBOXIE L.T.D)
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [297984 2014-04-09] () [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
R2 VMLiteService; C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe [426600 2010-08-21] (VMLite, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-03-31] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-03-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2014-06-10] ()
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-08] (BlueStack Systems)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 CM_VENDER_CMD; C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys [17104 2014-07-31] (Windows (R) Win 7 DDK provider)
R3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2013-07-03] (LogMeIn Inc.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2012-07-27] (Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [142344 2014-10-09] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [771272 2014-10-09] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [67680 2014-03-19] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2014-06-10] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [136408 2015-04-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
R3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1975000 2013-07-31] (Realtek Semiconductor Corporation                           )
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-01-31] (Razer, Inc.)
S3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [202632 2012-12-16] (SANDBOXIE L.T.D)
R1 VBoxDrv; C:\Windows\System32\drivers\VBoxDrv.sys [204328 2010-08-11] (VMLite, Inc.)
S3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [146216 2010-08-11] (VMLite, Inc.)
R3 VBoxNetFlt; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [165800 2010-08-11] (VMLite, Inc.)
R1 vmlitedrv; C:\Windows\System32\drivers\vmlitedrv.sys [14952 2010-08-03] (VMLite, Inc.)
R3 vmlitestor; C:\Windows\system32\DRIVERS\vmlitestor.sys [177768 2010-08-11] (VMLite, Inc.)
R1 VMLiteUSBMon; C:\Windows\System32\drivers\vmliteusbmon.sys [135272 2010-08-18] (VMLite, Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-03-31] (Microsoft Corporation)
R3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-11-21] (Microsoft Corporation)
S1 tammgF119; \??\C:\WINDOWS\system32\Drivers\tammgF119.sys [X]
S1 tammgR119; \??\C:\WINDOWS\system32\Drivers\tammgR119.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-12 14:32 - 2015-04-12 14:32 - 00033037 _____ () C:\Users\Tim²\Downloads\FRST.txt
2015-04-12 14:32 - 2015-04-12 14:32 - 00000000 ____D () C:\FRST
2015-04-12 14:31 - 2015-04-12 14:32 - 02095616 _____ (Farbar) C:\Users\Tim²\Downloads\FRST64.exe
2015-04-12 14:31 - 2015-04-12 14:31 - 00000468 _____ () C:\Users\Tim²\Downloads\defogger_disable.log
2015-04-12 14:30 - 2015-04-12 14:30 - 00050477 _____ () C:\Users\Tim²\Downloads\Defogger.exe
2015-04-12 12:33 - 2015-04-12 12:35 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-04-12 12:33 - 2015-04-12 12:33 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-04-12 12:33 - 2015-04-12 12:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-04-12 12:33 - 2015-04-12 12:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-12 12:33 - 2015-04-12 12:33 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-04-12 12:33 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-04-12 12:33 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-04-12 12:33 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-04-12 12:32 - 2015-04-12 12:32 - 00000000 ____D () C:\Program Files (x86)\WEB.DE MailCheck
2015-04-12 11:39 - 2015-04-12 12:57 - 00000970 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-04-12 11:39 - 2015-04-12 11:57 - 00000974 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-04-12 11:39 - 2015-04-12 11:39 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2015-04-12 11:35 - 2015-04-12 11:35 - 00002320 _____ () C:\WINDOWS\patsearch.bin
2015-04-12 11:35 - 2015-04-12 11:35 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf
2015-04-12 11:34 - 2015-04-12 11:34 - 00000000 ____D () C:\ProgramData\eazyzoom
2015-04-10 20:24 - 2015-04-10 20:27 - 31344869 _____ () C:\Users\Tim²\Downloads\BR 648 Nord-Pack 1.1.zip
2015-04-10 18:44 - 2015-04-10 18:44 - 00000000 ____D () C:\Users\Tim²\AppData\Roaming\Railtraction
2015-04-10 18:37 - 2015-04-10 18:43 - 85608221 _____ () C:\Users\Tim²\Downloads\br648.zip
2015-04-02 19:02 - 2015-04-02 19:09 - 00000000 ____D () C:\FSX
2015-04-02 19:00 - 2015-04-02 19:03 - 39770178 _____ () C:\Users\Tim²\Downloads\ivap-v2.0.2-b2773.zip
2015-04-02 17:25 - 2015-04-02 17:25 - 00117312 _____ (Gibson Research Corp.) C:\Users\Hio\Downloads\securable.exe
2015-04-02 17:11 - 2010-08-18 12:30 - 00135272 _____ (VMLite, Inc.) C:\WINDOWS\system32\Drivers\vmliteusbmon.sys
2015-04-02 16:39 - 2015-04-02 16:39 - 00000000 ____D () C:\Users\Tim²\VMLites
2015-04-02 16:39 - 2015-04-02 16:39 - 00000000 ____D () C:\Users\Tim²\AppData\Roaming\AMD
2015-04-02 16:20 - 2015-04-02 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMLite Workstation
2015-04-02 16:20 - 2015-04-02 16:20 - 00000000 ____D () C:\Program Files\VMLite
2015-04-02 16:20 - 2010-08-11 14:39 - 00204328 _____ (VMLite, Inc.) C:\WINDOWS\system32\Drivers\VBoxDrv.sys
2015-04-02 16:20 - 2010-08-03 20:28 - 00014952 _____ (VMLite, Inc.) C:\WINDOWS\system32\Drivers\vmlitedrv.sys
2015-04-02 16:13 - 2015-04-02 16:18 - 68253288 _____ (VMLite, Inc.) C:\Users\Tim²\Downloads\VMLiteWorkstationSetup326 (1).exe
2015-04-02 15:42 - 2015-04-02 15:42 - 00000794 _____ () C:\WINDOWS\KB942288-v3.log
2015-04-02 15:40 - 2015-04-02 15:41 - 03327000 _____ () C:\Users\Tim²\Downloads\WindowsXP-KB942288-v3-x86.exe
2015-04-02 15:35 - 2015-04-02 16:10 - 486678800 _____ (Microsoft Corporation) C:\Users\Tim²\Downloads\WindowsXPMode_de-de (1).exe
2015-04-02 15:15 - 2015-04-02 15:34 - 270913032 _____ (Microsoft Corporation) C:\Users\Tim²\Downloads\WindowsXPMode_de-de.exe
2015-04-02 12:21 - 2014-11-10 01:19 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-04-02 12:21 - 2014-11-10 01:19 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-04-02 12:21 - 2014-11-10 01:18 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-04-02 12:21 - 2014-11-10 01:18 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-04-02 12:21 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-04-02 12:21 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-04-02 12:20 - 2014-07-24 05:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2015-04-02 12:20 - 2014-07-24 05:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2015-03-31 22:41 - 2015-03-31 22:41 - 00769536 _____ () C:\Users\Tim²\Downloads\MicrosoftFixit50639.msi
2015-03-31 22:22 - 2015-03-31 22:22 - 00000000 __SHD () C:\Users\Tim²\AppData\Local\EmieUserList
2015-03-31 22:22 - 2015-03-31 22:22 - 00000000 __SHD () C:\Users\Tim²\AppData\Local\EmieSiteList
2015-03-31 22:22 - 2015-03-31 22:22 - 00000000 __SHD () C:\Users\Tim²\AppData\Local\EmieBrowserModeList
2015-03-31 22:20 - 2015-03-31 22:20 - 00000000 ___HD () C:\Program Files (x86)\InstallJammer Registry
2015-03-31 22:20 - 2015-03-31 22:20 - 00000000 ____D () C:\Program Files (x86)\VAFS5
2015-03-31 21:58 - 2015-03-31 21:58 - 00002350 _____ () C:\Users\Tim²\Desktop\Sicherer Zahlungsverkehr.lnk
2015-03-31 21:58 - 2015-03-31 21:58 - 00000000 __SHD () C:\Recovery
2015-03-31 21:58 - 2015-03-31 21:52 - 00000000 ___DC () C:\WINDOWS\Panther
2015-03-31 21:57 - 2015-03-31 21:57 - 00001454 _____ () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-31 21:56 - 2015-03-31 21:56 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-03-31 21:56 - 2015-03-31 21:56 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-03-31 21:56 - 2015-03-31 21:56 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-03-31 21:56 - 2015-03-31 21:56 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-03-31 21:56 - 2015-03-31 21:56 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-03-31 21:56 - 2015-03-31 21:56 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-03-31 21:56 - 2015-03-31 21:56 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-03-31 21:56 - 2015-03-31 21:56 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-03-31 21:56 - 2015-03-31 21:56 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-03-31 21:56 - 2015-03-31 21:56 - 00000654 __RSH () C:\Users\Tim²\ntuser.pol
2015-03-31 21:56 - 2015-03-31 21:56 - 00000020 ___SH () C:\Users\Tim²\ntuser.ini
2015-03-31 21:55 - 2015-03-31 21:55 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-03-31 21:55 - 2015-03-31 21:55 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2015-03-31 21:55 - 2015-03-31 21:55 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-03-31 21:55 - 2015-03-31 21:55 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-03-31 21:55 - 2015-03-31 21:55 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-03-31 21:55 - 2015-03-31 21:55 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-03-31 21:55 - 2015-03-31 21:55 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-03-31 21:55 - 2015-03-31 21:55 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2015-03-31 21:55 - 2015-03-31 21:55 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-03-31 21:55 - 2015-03-31 21:55 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2015-03-31 21:55 - 2015-03-31 21:55 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-03-31 21:55 - 2015-03-31 21:55 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-03-31 21:55 - 2015-03-31 21:55 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2015-03-31 21:55 - 2015-03-31 21:55 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-03-31 21:54 - 2015-04-02 09:27 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-03-31 21:54 - 2015-03-31 21:54 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-03-31 21:54 - 2015-03-31 21:54 - 04178944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-03-31 21:54 - 2015-03-31 21:54 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 01113920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-03-31 21:54 - 2015-03-31 21:54 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00264000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-03-31 21:54 - 2015-03-31 21:54 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-03-31 21:54 - 2015-03-31 21:54 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2015-03-31 21:54 - 2015-03-31 21:54 - 00044024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-03-31 21:54 - 2015-03-31 21:54 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2015-03-31 21:54 - 2015-03-31 21:54 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-03-31 21:53 - 2015-03-31 21:53 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-03-31 21:53 - 2015-03-31 21:53 - 00513488 _____ () C:\WINDOWS\SysWOW64\locale.nls
2015-03-31 21:53 - 2015-03-31 21:53 - 00513488 _____ () C:\WINDOWS\system32\locale.nls
2015-03-31 21:53 - 2015-03-31 21:53 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 00396419 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-03-31 21:53 - 2015-03-31 21:53 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-03-31 21:53 - 2015-03-31 21:53 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2015-03-31 21:53 - 2015-03-31 21:53 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-03-31 21:53 - 2015-03-31 21:53 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2015-03-31 21:53 - 2015-03-31 21:53 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 25021440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 19720192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 14398976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 12827648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 06035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 04300288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 02257408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-03-31 21:52 - 2015-03-31 21:52 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-03-31 21:52 - 2015-03-31 21:52 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-03-31 21:52 - 2015-03-31 21:52 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-03-31 21:52 - 2015-03-31 21:52 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-03-31 21:52 - 2015-03-31 21:52 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2015-03-31 21:52 - 2015-03-31 21:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2015-03-31 21:51 - 2015-03-31 21:51 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-03-31 21:51 - 2015-03-31 21:51 - 02484224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-03-31 21:51 - 2015-03-31 21:51 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-03-31 21:51 - 2015-03-31 21:51 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-03-31 21:51 - 2015-03-31 21:51 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-03-31 21:51 - 2015-03-31 21:51 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-03-31 21:51 - 2015-03-31 21:51 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-03-31 21:51 - 2015-03-31 21:51 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-03-31 21:51 - 2015-03-31 21:51 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-03-31 21:51 - 2015-03-31 21:51 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-03-31 21:50 - 2015-03-31 21:50 - 22291584 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-03-31 21:50 - 2015-03-31 21:50 - 19731824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-03-31 21:50 - 2015-03-31 21:50 - 02501368 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-03-31 21:50 - 2015-03-31 21:50 - 02207488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-03-31 21:50 - 2015-03-31 21:50 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-03-31 21:50 - 2015-03-31 21:50 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-03-31 21:50 - 2015-03-31 21:50 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll
2015-03-31 21:50 - 2015-03-31 21:50 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll
2015-03-31 21:50 - 2015-03-31 21:50 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-03-31 21:50 - 2015-03-31 21:50 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2015-03-31 21:50 - 2015-03-31 21:50 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2015-03-31 21:50 - 2015-03-31 21:50 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-03-31 21:50 - 2015-03-31 21:50 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-03-31 21:50 - 2015-03-31 21:50 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-03-31 21:50 - 2015-03-31 21:50 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-03-31 21:50 - 2015-03-31 21:50 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-03-31 21:50 - 2015-03-31 21:50 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-03-31 21:50 - 2015-03-31 21:50 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-03-31 21:50 - 2015-03-31 21:50 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-03-31 21:47 - 2015-03-31 21:47 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2015-03-31 21:47 - 2015-03-31 21:47 - 00000000 ____D () C:\Program Files\Reference Assemblies
2015-03-31 21:47 - 2015-03-31 21:47 - 00000000 ____D () C:\Program Files\MSBuild
2015-03-31 21:47 - 2015-03-31 21:47 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2015-03-31 21:47 - 2015-03-31 21:47 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-03-31 21:46 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-03-31 21:46 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-03-31 21:46 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-03-31 21:46 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-03-31 21:39 - 2015-04-12 11:15 - 01108929 _____ () C:\WINDOWS\WindowsUpdate.log
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default\Startmenü
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Programme
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\ProgramData\Startmenü
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\ProgramData\Dokumente
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2015-03-31 21:39 - 2015-03-31 21:39 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2015-03-31 21:38 - 2015-03-31 21:38 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2015-03-31 21:17 - 2015-03-31 21:17 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-03-31 21:07 - 2015-04-12 14:31 - 00000000 ____D () C:\Users\Hio
2015-03-31 21:07 - 2015-04-12 12:54 - 00000000 ____D () C:\Users\Tim²
2015-03-31 21:07 - 2015-03-31 21:38 - 00057153 _____ () C:\WINDOWS\diagwrn.xml
2015-03-31 21:07 - 2015-03-31 21:38 - 00057153 _____ () C:\WINDOWS\diagerr.xml
2015-03-31 21:07 - 2015-03-31 21:33 - 00000000 ____D () C:\Users\Michi
2015-03-31 21:07 - 2015-03-31 21:32 - 00000000 ____D () C:\Users\Tim
2015-03-31 21:07 - 2015-03-31 21:32 - 00000000 ____D () C:\Users\*******
2015-03-31 21:07 - 2015-03-31 21:08 - 00000000 ___RD () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-31 21:07 - 2015-03-31 21:07 - 00000000 _SHDL () C:\Users\Tim²\Vorlagen
2015-03-31 21:07 - 2015-03-31 21:07 - 00000000 _SHDL () C:\Users\Tim²\Startmenü
2015-03-31 21:07 - 2015-03-31 21:07 - 00000000 _SHDL () C:\Users\Tim²\Netzwerkumgebung
2015-03-31 21:07 - 2015-03-31 21:07 - 00000000 _SHDL () C:\Users\Tim²\Lokale Einstellungen
2015-03-31 21:07 - 2015-03-31 21:07 - 00000000 _SHDL () C:\Users\Tim²\Eigene Dateien
2015-03-31 21:07 - 2015-03-31 21:07 - 00000000 _SHDL () C:\Users\Tim²\Druckumgebung
2015-03-31 21:07 - 2015-03-31 21:07 - 00000000 _SHDL () C:\Users\Tim²\Documents\Eigene Musik
2015-03-31 21:07 - 2015-03-31 21:07 - 00000000 _SHDL () C:\Users\Tim²\Documents\Eigene Bilder
2015-03-31 21:07 - 2015-03-31 21:07 - 00000000 _SHDL () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-03-31 21:07 - 2015-03-31 21:07 - 00000000 _SHDL () C:\Users\Tim²\AppData\Local\Verlauf
2015-03-31 21:07 - 2015-03-31 21:07 - 00000000 _SHDL () C:\Users\Tim²\AppData\Local\Anwendungsdaten
2015-03-31 21:07 - 2015-03-31 21:07 - 00000000 _SHDL () C:\Users\Tim²\Anwendungsdaten
2015-03-31 21:07 - 2014-11-21 12:52 - 00000000 ___RD () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-31 21:07 - 2014-11-21 12:52 - 00000000 ___RD () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-03-31 21:07 - 2014-11-21 05:42 - 00000369 _____ () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-03-31 21:07 - 2014-11-21 05:42 - 00000369 _____ () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-03-31 21:07 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-31 21:01 - 2015-03-31 21:01 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2015-03-31 21:01 - 2015-03-31 21:01 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2015-03-31 21:01 - 2015-03-31 21:01 - 00000000 ____D () C:\Program Files\Realtek
2015-03-31 21:01 - 2015-03-31 21:01 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2015-03-31 21:01 - 2015-03-31 21:01 - 00000000 ____D () C:\Program Files\AMD
2015-03-31 21:01 - 2015-03-31 21:01 - 00000000 _____ () C:\WINDOWS\ativpsrm.bin
2015-03-31 21:00 - 2015-03-31 21:00 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-03-31 21:00 - 2015-03-31 21:00 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2015-03-31 16:14 - 2015-03-31 16:14 - 00000000 __RHD () C:\ESD
2015-03-31 16:13 - 2015-03-31 16:13 - 01322960 _____ (Microsoft Corporation) C:\Users\Hio\Downloads\mediacreationtool.exe
2015-03-30 16:49 - 2015-03-30 16:49 - 00068781 _____ () C:\Users\Tim²\Downloads\FSX_ABSTURZ_FIX.RAR
2015-03-28 21:11 - 2015-03-28 21:11 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2015-03-28 18:25 - 2015-03-28 18:27 - 00000000 ____D () C:\Users\Tim²\Documents\Battlefield 3
2015-03-28 18:20 - 2015-03-28 18:20 - 00000000 ____D () C:\Users\Tim²\AppData\Local\ESN
2015-03-28 18:08 - 2015-03-28 20:44 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2015-03-28 18:08 - 2015-03-28 18:08 - 01533584 _____ () C:\Users\Tim²\Downloads\battlelog-web-plugins_2.6.2_157.exe
2015-03-28 18:02 - 2015-03-31 21:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
2015-03-28 18:02 - 2015-03-28 18:02 - 00001387 _____ () C:\Users\Public\Desktop\Battlefield 3.lnk
2015-03-28 15:03 - 2015-03-04 09:26 - 00011105 ____N () C:\WINDOWS\system32\AutoconfigV2.cab
2015-03-28 14:05 - 2015-03-28 14:09 - 40684373 _____ () C:\Users\Tim²\Downloads\oebb_1144_0.9.1.rar
2015-03-28 14:03 - 2015-03-28 14:04 - 09004320 _____ () C:\Users\Tim²\Downloads\oebb_1042_1142.zip
2015-03-28 14:02 - 2015-03-28 14:02 - 00127778 _____ () C:\Users\Tim²\Downloads\der_neue_zug_-_teil_1_fix.zip
2015-03-26 21:15 - 2015-03-26 21:15 - 00078070 _____ () C:\Users\Tim²\Downloads\re_in_richtung_aachen_nach_kln (1).zip
2015-03-26 09:45 - 2015-03-26 09:45 - 08379720 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 08369408 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 07558816 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 07077776 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 03471376 _____ () C:\WINDOWS\SysWOW64\atiumdva.cap
2015-03-26 09:45 - 2015-03-26 09:45 - 03437632 _____ () C:\WINDOWS\system32\atiumd6a.cap
2015-03-26 09:45 - 2015-03-26 09:45 - 00843776 _____ (AMD) C:\WINDOWS\system32\coinst_14.50.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 00323252 _____ () C:\WINDOWS\system32\ativvaxy_vi.dat
2015-03-26 09:45 - 2015-03-26 09:45 - 00321712 _____ () C:\WINDOWS\system32\ativvaxy_vi_nd.dat
2015-03-26 09:45 - 2015-03-26 09:45 - 00238144 _____ () C:\WINDOWS\system32\ativvaxy_cz_nd.dat
2015-03-26 09:45 - 2015-03-26 09:45 - 00235008 _____ () C:\WINDOWS\system32\clinfo.exe
2015-03-26 09:45 - 2015-03-26 09:45 - 00234292 _____ () C:\WINDOWS\system32\ativvaxy_cik.dat
2015-03-26 09:45 - 2015-03-26 09:45 - 00232624 _____ () C:\WINDOWS\system32\ativvaxy_cik_nd.dat
2015-03-26 09:45 - 2015-03-26 09:45 - 00204952 _____ () C:\WINDOWS\SysWOW64\ativvsvl.dat
2015-03-26 09:45 - 2015-03-26 09:45 - 00204952 _____ () C:\WINDOWS\system32\ativvsvl.dat
2015-03-26 09:45 - 2015-03-26 09:45 - 00158944 _____ () C:\WINDOWS\system32\ativce03.dat
2015-03-26 09:45 - 2015-03-26 09:45 - 00157144 _____ () C:\WINDOWS\SysWOW64\ativvsva.dat
2015-03-26 09:45 - 2015-03-26 09:45 - 00157144 _____ () C:\WINDOWS\system32\ativvsva.dat
2015-03-26 09:45 - 2015-03-26 09:45 - 00144328 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 00140240 _____ () C:\WINDOWS\system32\samu_krnl_ci.sbin
2015-03-26 09:45 - 2015-03-26 09:45 - 00138832 _____ () C:\WINDOWS\system32\samu_krnl_isv_ci.sbin
2015-03-26 09:45 - 2015-03-26 09:45 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 00126848 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 00098816 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\OpenVideo64.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 00091648 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 00086528 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\OVDecode64.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 00083456 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\OpenVideo.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 00083312 _____ () C:\WINDOWS\system32\ativce02.dat
2015-03-26 09:45 - 2015-03-26 09:45 - 00073216 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\OVDecode.dll
2015-03-26 09:45 - 2015-03-26 09:45 - 00046128 _____ () C:\WINDOWS\system32\kapp_ci.sbin
2015-03-26 09:45 - 2015-03-26 09:45 - 00041936 _____ () C:\WINDOWS\system32\kapp_si.sbin
2015-03-26 09:44 - 2015-03-26 09:44 - 47899136 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 40987136 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 28354560 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 23621632 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 18959360 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2015-03-26 09:44 - 2015-03-26 09:44 - 15716352 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 14302208 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 11076784 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 09401480 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 05837312 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 04590592 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 01348928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 01214976 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 01187342 _____ () C:\WINDOWS\system32\amdocl_as64.exe
2015-03-26 09:44 - 2015-03-26 09:44 - 01127496 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 01061902 _____ () C:\WINDOWS\system32\amdocl_ld64.exe
2015-03-26 09:44 - 2015-03-26 09:44 - 00995342 _____ () C:\WINDOWS\SysWOW64\amdocl_as32.exe
2015-03-26 09:44 - 2015-03-26 09:44 - 00903168 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00798734 _____ () C:\WINDOWS\SysWOW64\amdocl_ld32.exe
2015-03-26 09:44 - 2015-03-26 09:44 - 00774656 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2015-03-26 09:44 - 2015-03-26 09:44 - 00765851 _____ () C:\WINDOWS\system32\amdicdxx.dat
2015-03-26 09:44 - 2015-03-26 09:44 - 00734861 _____ () C:\WINDOWS\system32\atiicdxx.dat
2015-03-26 09:44 - 2015-03-26 09:44 - 00631912 _____ () C:\WINDOWS\SysWOW64\atiapfxx.blb
2015-03-26 09:44 - 2015-03-26 09:44 - 00631912 _____ () C:\WINDOWS\system32\atiapfxx.blb
2015-03-26 09:44 - 2015-03-26 09:44 - 00589312 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2015-03-26 09:44 - 2015-03-26 09:44 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00442368 _____ () C:\WINDOWS\system32\amdmiracast.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2015-03-26 09:44 - 2015-03-26 09:44 - 00332800 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe
2015-03-26 09:44 - 2015-03-26 09:44 - 00244736 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2015-03-26 09:44 - 2015-03-26 09:44 - 00190976 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00146944 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00133632 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00118784 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atibtmon.exe
2015-03-26 09:44 - 2015-03-26 09:44 - 00118096 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00100032 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00065024 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00062464 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00058880 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00055808 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00052224 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00051200 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe
2015-03-26 09:44 - 2015-03-26 09:44 - 00049664 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00049152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00038912 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00031232 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2015-03-26 09:44 - 2015-03-26 09:44 - 00003917 _____ () C:\WINDOWS\SysWOW64\atipblag.dat
2015-03-26 09:44 - 2015-03-26 09:44 - 00003917 _____ () C:\WINDOWS\system32\atipblag.dat
2015-03-26 09:43 - 2015-03-26 09:43 - 00294600 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdacpksd.sys
2015-03-26 09:43 - 2015-03-26 09:43 - 00157248 _____ () C:\WINDOWS\system32\amde31a.dat
2015-03-26 09:43 - 2015-03-26 09:43 - 00134656 _____ () C:\WINDOWS\system32\amdhdl64.dll
2015-03-26 09:43 - 2015-03-26 09:43 - 00128384 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2015-03-26 09:43 - 2015-03-26 09:43 - 00123392 _____ () C:\WINDOWS\SysWOW64\amdhdl32.dll
2015-03-26 09:43 - 2015-03-26 09:43 - 00118096 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2015-03-26 09:43 - 2015-03-26 09:43 - 00095744 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2015-03-26 09:43 - 2015-03-26 09:43 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2015-03-24 17:52 - 2015-03-24 17:52 - 00001023 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2015-03-24 17:52 - 2015-03-24 17:52 - 00001011 _____ () C:\Users\Public\Desktop\Audacity.lnk
2015-03-24 17:52 - 2015-03-24 17:52 - 00000000 ____D () C:\Program Files (x86)\Audacity
2015-03-23 21:23 - 2015-03-23 21:25 - 22892794 _____ (Audacity Team ) C:\Users\Tim²\Downloads\audacity-win-2.0.6.exe
2015-03-23 21:21 - 2015-03-31 21:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Recorder Pro
2015-03-23 21:21 - 2015-03-23 21:21 - 00000000 ____D () C:\Program Files (x86)\Audio Recorder Pro
2015-03-23 21:20 - 2015-03-23 21:20 - 02015361 _____ (EZ SoftMagic, Inc. ) C:\Users\Tim²\Downloads\rcrdmate37.exe
2015-03-23 21:14 - 2015-03-31 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Naturalsoft
2015-03-23 21:14 - 2015-03-23 21:14 - 00002051 _____ () C:\Users\Public\Desktop\Demo.lnk
2015-03-23 21:14 - 2015-03-23 21:14 - 00002046 _____ () C:\Users\Public\Desktop\NaturalReader Free.lnk
2015-03-23 21:13 - 2015-03-23 21:13 - 00000000 ____D () C:\ProgramData\Naturalsoft
2015-03-23 21:13 - 2015-03-23 21:13 - 00000000 ____D () C:\Program Files (x86)\Naturalsoft
2015-03-23 21:12 - 2015-03-23 21:12 - 00000000 ____D () C:\Users\Tim²\Documents\Naturalsoft
2015-03-23 21:08 - 2015-03-23 21:11 - 19548464 _____ (Naturalsoft limited ) C:\Users\Tim²\Downloads\standardsetup.exe
2015-03-23 20:56 - 2015-03-23 21:00 - 21008112 _____ (NextUp.com ) C:\Users\Tim²\Downloads\textaloud-mp3_2243
2015-03-23 18:22 - 2015-03-23 18:22 - 00641353 _____ () C:\Users\Tim²\Downloads\AnsagenScriptKit.zip
2015-03-21 18:26 - 2015-03-21 18:27 - 03235042 _____ () C:\Users\Tim²\Downloads\blxt_me146_db_destinations_pack.zip
2015-03-21 17:59 - 2015-03-21 17:59 - 00313763 _____ () C:\Users\Tim²\Downloads\ice_935_nach_stralsund.zip
2015-03-21 17:56 - 2015-03-21 17:56 - 00149719 _____ () C:\Users\Tim²\Downloads\IC nach Berlin Hbf_0.zip
2015-03-21 16:01 - 2015-03-21 16:04 - 32628135 _____ () C:\Users\Tim²\Downloads\berlinwittenberg-update1-26 (1).exe
2015-03-21 16:00 - 2015-03-21 16:00 - 00984725 _____ () C:\Users\Tim²\Downloads\TW_DTG_ME146_Soundpack_2.1.rar
2015-03-21 15:58 - 2015-03-21 15:58 - 04627339 _____ () C:\Users\Tim²\Downloads\TW_RSC_ME146_Soundupdate_1.1.rar
2015-03-21 15:58 - 2015-03-21 15:58 - 00483706 _____ () C:\Users\Tim²\Downloads\TW_DTG_ME146_Soundpack_Update_2.2 (1).rwp
2015-03-21 15:25 - 2015-03-21 15:25 - 00257109 _____ () C:\Users\Tim²\Downloads\ec7.zip
2015-03-21 13:44 - 2015-03-21 13:44 - 00513293 _____ () C:\Users\Tim²\Downloads\ic_2356 (1).zip
2015-03-21 13:41 - 2015-03-21 13:41 - 00437376 _____ () C:\Users\Tim²\Downloads\re_4362.zip
2015-03-21 13:39 - 2015-03-21 13:39 - 00123305 _____ () C:\Users\Tim²\Downloads\ice_von_berlin_nach_mnchen_teil_1 (1).zip
2015-03-21 13:38 - 2015-04-10 20:31 - 00000000 ____D () C:\Users\Tim²\Desktop\TS
2015-03-21 13:34 - 2015-03-21 13:34 - 00441377 _____ () C:\Users\Tim²\Downloads\neujahrsnacht1.1.zip
2015-03-21 13:16 - 2015-03-21 13:16 - 00650657 _____ () C:\Users\Tim²\Downloads\lame3.99.5.zip
2015-03-21 13:15 - 2015-03-21 13:17 - 00000000 ____D () C:\Program Files (x86)\mp3DirectCut
2015-03-21 13:15 - 2015-03-21 13:15 - 00000000 ____D () C:\Users\Tim²\AppData\Roaming\mp3DirectCut
2015-03-21 13:12 - 2015-03-21 13:12 - 00308709 _____ () C:\Users\Tim²\Downloads\mp3DC220.exe
2015-03-21 10:42 - 2015-03-21 10:43 - 13273457 _____ () C:\Users\Tim²\Downloads\WR+GZ_71093_Karwendel.zip
2015-03-21 10:41 - 2015-03-21 10:41 - 00082666 _____ () C:\Users\Tim²\Downloads\WR_Weihnachtsueberraschung_2013.zip
2015-03-19 15:31 - 2015-03-19 15:32 - 08221876 _____ () C:\Users\Hio\Downloads\SW_ME_82818.zip
2015-03-16 18:32 - 2015-03-31 21:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\DCS
2015-03-15 21:22 - 2015-03-15 21:22 - 02754009 _____ () C:\Users\Tim²\Downloads\Solaris-Pack-Vestische-by-RW-Gladbeck-EXKLUSIV.rar
2015-03-15 21:21 - 2015-03-15 21:21 - 02766340 _____ () C:\Users\Tim²\Downloads\Solaris-Pack-BOGESTRA-by-RW-Gladbeck-EXKLUSIV.rar
2015-03-15 20:51 - 2015-03-15 20:51 - 228209129 _____ () C:\Users\Tim²\Downloads\Solaris Urbino BVG Releasepack.7z
2015-03-15 17:43 - 2015-03-15 17:43 - 00000781 _____ () C:\Users\Public\Desktop\Aerosoft Launcher.lnk
2015-03-15 17:35 - 2015-03-15 17:41 - 51754688 _____ (Acresso Software Inc. ) C:\Users\Tim²\Downloads\as_aerosoft-launcher_v1203.exe
2015-03-15 17:21 - 2015-03-15 17:21 - 00082079 _____ () C:\Users\Tim²\Downloads\GameKey1632Revealer (2).zip
2015-03-15 13:05 - 2015-03-15 13:05 - 02006022 _____ () C:\Users\Tim²\Downloads\Update-auf-V5.1.2.zip
2015-03-15 08:49 - 2015-03-15 10:27 - 881158639 _____ () C:\Users\Tim²\Downloads\Version 5.1 (mit Wien) inkl. Patches (5.1.5).rar
2015-03-14 14:23 - 2014-03-28 15:49 - 17725955 _____ () C:\Users\Tim²\Downloads\Class 375 DB Repaint für !LondonFavershamHighspeed!.rwp
2015-03-14 12:47 - 2015-03-15 08:42 - 881172959 _____ () C:\Users\Tim²\Downloads\Version 5.1 (ohne Wien) inkl. Patches (5.1.5).rar
2015-03-14 12:09 - 2015-03-14 12:13 - 36532905 _____ () C:\Users\Tim²\Downloads\class_375_db_repaint_0.zip
2015-03-13 15:51 - 2015-03-13 15:59 - 69337652 _____ () C:\Users\Tim²\Downloads\Version 5.1 (5.1.5) (2).rar
2015-03-13 15:13 - 2015-03-13 15:21 - 71015708 _____ () C:\Users\Tim²\Downloads\Version 5.1 (5.1.5)(1).rar
2015-03-13 14:48 - 2015-03-13 15:11 - 72024556 _____ () C:\Users\Tim²\Downloads\Version 5.1 (5.1.5) (1).rar
2015-03-13 14:41 - 2015-03-13 14:48 - 52068572 _____ () C:\Users\Tim²\Downloads\Version 5.1 (5.1.5).rar

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-12 14:31 - 2014-11-23 17:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-12 14:30 - 2015-01-04 18:30 - 00000300 _____ () C:\WINDOWS\Tasks\Price Fountain.job
2015-04-12 14:25 - 2013-03-21 08:38 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-04-12 14:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-04-12 13:52 - 2015-01-24 19:41 - 00001134 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-12 13:11 - 2014-08-31 18:33 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-04-12 13:03 - 2014-11-21 05:35 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-12 13:03 - 2014-11-21 04:45 - 00764340 _____ () C:\WINDOWS\system32\perfh007.dat
2015-04-12 13:03 - 2014-11-21 04:45 - 00159160 _____ () C:\WINDOWS\system32\perfc007.dat
2015-04-12 13:01 - 2013-10-24 17:20 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-12 13:01 - 2013-10-23 06:57 - 00348672 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.exe
2015-04-12 13:01 - 2013-02-10 21:10 - 00348672 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2015-04-12 13:01 - 2013-02-10 20:11 - 00280904 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2015-04-12 13:00 - 2013-10-12 18:21 - 00000000 ____D () C:\ProgramData\Origin
2015-04-12 12:57 - 2015-01-24 19:41 - 00001130 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-12 12:55 - 2015-01-04 18:30 - 00000000 ____D () C:\Program Files (x86)\XTab
2015-04-12 12:55 - 2015-01-04 18:29 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-04-12 12:55 - 2014-11-20 20:24 - 00014816 _____ () C:\WINDOWS\PFRO.log
2015-04-12 12:55 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\Offline Web Pages
2015-04-12 12:55 - 2013-08-22 16:46 - 00452107 _____ () C:\WINDOWS\setupact.log
2015-04-12 12:55 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-12 12:54 - 2013-05-19 11:11 - 00000000 ____D () C:\ProgramData\VisualBee
2015-04-12 11:53 - 2014-04-27 19:29 - 00000000 ____D () C:\Users\Tim²\AppData\Roaming\TS3Client
2015-04-11 17:57 - 2015-03-04 18:32 - 00000000 ____D () C:\Users\Tim²\Desktop\Aufnahmen Panasonic
2015-04-11 17:57 - 2013-05-07 18:57 - 00000000 ____D () C:\Users\Tim²\Desktop\NosTale
2015-04-11 13:57 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-04-10 21:11 - 2013-10-12 18:20 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-04-02 20:57 - 2015-01-24 19:47 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-02 19:15 - 2013-02-02 12:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games
2015-04-02 17:05 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2015-04-02 17:05 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2015-04-02 16:51 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-01 09:10 - 2013-10-23 06:57 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2015-04-01 08:42 - 2014-11-06 18:15 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense
2015-03-31 22:32 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2015-03-31 22:04 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-03-31 21:59 - 2013-02-02 13:41 - 00000000 ____D () C:\Users\Tim²\AppData\Local\Packages
2015-03-31 21:55 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2015-03-31 21:55 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2015-03-31 21:54 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-31 21:54 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-31 21:54 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-31 21:54 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-31 21:52 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-31 21:50 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2015-03-31 21:39 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration
2015-03-31 21:39 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2015-03-31 21:39 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2015-03-31 21:38 - 2015-03-03 21:20 - 00008164 _____ () C:\WINDOWS\comsetup.log
2015-03-31 21:35 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media
2015-03-31 21:35 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries
2015-03-31 21:23 - 2013-08-22 16:44 - 02310632 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-03-31 21:21 - 2015-02-25 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoIt v3
2015-03-31 21:21 - 2015-02-16 19:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories
2015-03-31 21:21 - 2015-02-15 00:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-03-31 21:21 - 2015-01-26 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\diclovit's mod pack
2015-03-31 21:21 - 2015-01-24 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-03-31 21:21 - 2015-01-17 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2015-03-31 21:21 - 2015-01-04 18:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Mario Bros. X
2015-03-31 21:21 - 2014-12-07 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media
2015-03-31 21:21 - 2014-12-07 14:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corel VideoStudio Pro X5
2015-03-31 21:21 - 2014-10-30 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Landwirtschafts Simulator 2015
2015-03-31 21:21 - 2014-10-14 22:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Demolition Company Gold
2015-03-31 21:21 - 2014-10-09 16:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2015-03-31 21:21 - 2014-10-04 17:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-03-31 21:21 - 2014-10-04 12:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2 Multiplayer
2015-03-31 21:21 - 2014-09-21 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2015-03-31 21:21 - 2014-08-31 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2015-03-31 21:21 - 2014-08-16 20:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2015-03-31 21:21 - 2014-07-27 18:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mobile Partner
2015-03-31 21:21 - 2014-06-16 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pflanzen gegen Zombies
2015-03-31 21:21 - 2014-06-15 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-03-31 21:21 - 2014-05-30 17:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2015-03-31 21:21 - 2014-05-24 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kehrmaschinen-Simulator 2011
2015-03-31 21:21 - 2014-05-09 12:48 - 00000000 ____D () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-03-31 21:21 - 2014-05-02 18:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABC-Schutz-Simulator
2015-03-31 21:21 - 2014-04-27 19:27 - 00000000 ____D () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-03-31 21:21 - 2014-04-15 16:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-03-31 21:21 - 2014-04-15 16:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-03-31 21:21 - 2014-04-15 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3
2015-03-31 21:21 - 2014-03-10 08:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
2015-03-31 21:21 - 2014-03-08 17:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SimCity™
2015-03-31 21:21 - 2014-03-06 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stronghold
2015-03-31 21:21 - 2014-01-28 20:19 - 00000000 ____D () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2015-03-31 21:21 - 2014-01-17 18:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RTS Wegberg
2015-03-31 21:21 - 2014-01-04 12:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Feuer- und Notfallsimulation Wegberg
2015-03-31 21:21 - 2013-11-02 15:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XMedia Recode
2015-03-31 21:21 - 2013-11-01 12:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OMSI Addon Manager
2015-03-31 21:21 - 2013-10-31 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aerosoft
2015-03-31 21:21 - 2013-10-27 20:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-03-31 21:21 - 2013-10-27 20:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2015-03-31 21:21 - 2013-10-24 18:06 - 00000000 ____D () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-03-31 21:21 - 2013-10-24 17:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-03-31 21:21 - 2013-10-14 16:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oovee
2015-03-31 21:21 - 2013-10-12 18:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-03-31 21:21 - 2013-09-14 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rettungswagen Simulator 2014
2015-03-31 21:21 - 2013-09-01 17:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cube World
2015-03-31 21:21 - 2013-08-27 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PTP2 Addons
2015-03-31 21:21 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-03-31 21:21 - 2013-08-05 16:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bus-Simulator 2012
2015-03-31 21:21 - 2013-08-01 18:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Werkfeuerwehr-Simulator 2014
2015-03-31 21:21 - 2013-07-22 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rettungswagen Simulator 2012
2015-03-31 21:21 - 2013-05-14 17:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Landwirtschafts Simulator 2013
2015-03-31 21:21 - 2013-05-07 18:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
2015-03-31 21:21 - 2013-03-29 12:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Feuerwehr-Simulator 2010
2015-03-31 21:21 - 2013-03-25 18:57 - 00000000 ____D () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-03-31 21:21 - 2013-03-19 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free M4a to MP3 Converter
2015-03-31 21:21 - 2013-03-14 08:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-03-31 21:21 - 2013-02-22 16:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2015-03-31 21:21 - 2013-02-21 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-03-31 21:21 - 2013-02-20 19:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2
2015-03-31 21:21 - 2013-02-06 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flughafen-Feuerwehr-Simulator 2013
2015-03-31 21:21 - 2013-02-02 17:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2015-03-31 21:21 - 2013-02-01 14:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2015-03-31 21:21 - 2012-11-09 16:40 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 3
2015-03-31 21:21 - 2012-11-09 16:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomeCinema
2015-03-31 21:21 - 2012-11-09 14:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Medion MediaPack 3
2015-03-31 21:21 - 2012-11-09 11:09 - 00000000 ____D () C:\WINDOWS\tr
2015-03-31 21:21 - 2012-11-09 11:09 - 00000000 ____D () C:\WINDOWS\sv
2015-03-31 21:21 - 2012-11-09 11:09 - 00000000 ____D () C:\WINDOWS\sl
2015-03-31 21:21 - 2012-11-09 11:09 - 00000000 ____D () C:\WINDOWS\pl
2015-03-31 21:21 - 2012-11-09 11:09 - 00000000 ____D () C:\WINDOWS\nl
2015-03-31 21:21 - 2012-11-09 11:09 - 00000000 ____D () C:\WINDOWS\it
2015-03-31 21:21 - 2012-11-09 11:09 - 00000000 ____D () C:\WINDOWS\hu
2015-03-31 21:21 - 2012-11-09 11:09 - 00000000 ____D () C:\WINDOWS\fr
2015-03-31 21:21 - 2012-11-09 11:09 - 00000000 ____D () C:\WINDOWS\es
2015-03-31 21:21 - 2012-11-09 11:09 - 00000000 ____D () C:\WINDOWS\da
2015-03-31 21:21 - 2012-11-09 11:08 - 00000000 ____D () C:\WINDOWS\el
2015-03-31 21:21 - 2012-11-09 11:08 - 00000000 ____D () C:\WINDOWS\de
2015-03-31 21:21 - 2012-11-09 10:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerRecover
2015-03-31 21:21 - 2012-07-26 11:43 - 00000000 ____D () C:\WINDOWS\en-GB
2015-03-31 21:17 - 2014-12-03 19:49 - 00000000 ____D () C:\WINDOWS\SysWOW64\spool
2015-03-31 21:17 - 2014-11-21 04:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2015-03-31 21:17 - 2014-11-21 04:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2015-03-31 21:17 - 2014-11-21 04:45 - 00000000 ____D () C:\WINDOWS\system32\WCN
2015-03-31 21:17 - 2013-12-15 11:33 - 00000000 __SHD () C:\WINDOWS\SysWOW64\AI_RecycleBin
2015-03-31 21:17 - 2013-08-22 17:37 - 00005217 _____ () C:\WINDOWS\DtcInstall.log
2015-03-31 21:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2015-03-31 21:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2015-03-31 21:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2015-03-31 21:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2015-03-31 21:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2015-03-31 21:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2015-03-31 21:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2015-03-31 21:17 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2015-03-31 21:17 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\oobe
2015-03-31 21:17 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2015-03-31 21:17 - 2013-03-13 17:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\xlive
2015-03-31 21:17 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated
2015-03-31 21:16 - 2014-11-21 12:51 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-03-31 21:15 - 2014-12-21 21:44 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-03-31 21:15 - 2014-11-21 05:13 - 00000000 ____D () C:\WINDOWS\ShellNew
2015-03-31 21:14 - 2015-03-12 18:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2015-03-31 21:14 - 2015-02-15 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
2015-03-31 21:14 - 2015-01-13 18:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft
2015-03-31 21:14 - 2014-09-09 11:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-03-31 21:14 - 2014-07-09 14:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mediachance
2015-03-31 21:14 - 2014-06-20 14:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2015-03-31 21:14 - 2014-06-10 09:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Playlogic
2015-03-31 21:14 - 2014-05-25 20:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-03-31 21:14 - 2014-05-17 18:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks
2015-03-31 21:14 - 2014-05-02 16:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\rondomedia
2015-03-31 21:14 - 2014-01-03 20:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\sixteen tons entertainment
2015-03-31 21:14 - 2013-12-14 20:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thrustmaster
2015-03-31 21:14 - 2013-10-01 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Klett
2015-03-31 21:14 - 2013-08-27 09:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auran
2015-03-31 21:14 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2015-03-31 21:14 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2015-03-31 21:14 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2015-03-31 21:14 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2015-03-31 21:14 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME
2015-03-31 21:14 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help
2015-03-31 21:14 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-03-31 21:14 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\System
2015-03-31 21:14 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-03-31 21:14 - 2013-07-21 18:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Byte
2015-03-31 21:14 - 2013-05-04 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freetec
2015-03-31 21:14 - 2013-04-16 18:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games
2015-03-31 21:14 - 2013-04-16 16:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefly Studios
2015-03-31 21:14 - 2013-03-09 16:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIANTS Software
2015-03-31 21:14 - 2012-11-08 14:55 - 00000000 ____D () C:\ProgramData\PRICache
2015-03-31 21:11 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2015-03-31 21:08 - 2014-04-26 15:00 - 00000000 ____D () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\aerosoft
2015-03-31 21:08 - 2013-02-13 15:03 - 00000000 ____D () C:\Users\Tim²\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games
2015-03-31 21:04 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2015-03-31 20:40 - 2013-01-31 18:34 - 01218977 _____ () C:\WINDOWS\WindowsUpdate (1).log
2015-03-29 20:07 - 2015-02-20 20:18 - 00000000 ____D () C:\Users\Tim²\Desktop\Audio
2015-03-28 21:20 - 2014-02-27 18:05 - 00000000 ___RD () C:\Users\Tim²\Dropbox
2015-03-28 21:01 - 2014-05-09 12:51 - 00001341 _____ () C:\Users\Tim²\Desktop\Dropbox.lnk
2015-03-28 18:25 - 2013-02-10 21:10 - 00000000 ____D () C:\Users\Tim²\AppData\Local\PunkBuster
2015-03-28 18:02 - 2012-11-09 11:07 - 00266438 _____ () C:\WINDOWS\DirectX.log
2015-03-26 16:43 - 2012-11-09 10:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-22 21:04 - 2013-02-24 19:19 - 00116224 ___SH () C:\Users\Tim²\Desktop\Thumbs.db
2015-03-22 15:53 - 2013-05-07 18:51 - 00001762 _____ () C:\WINDOWS\Sandboxie.ini
2015-03-21 20:45 - 2013-03-10 12:32 - 00451584 ___SH () C:\Users\Tim²\Downloads\Thumbs.db
2015-03-21 19:48 - 2015-01-06 20:54 - 00002048 _____ () C:\Users\Tim²\Desktop\funkspiel.txt
2015-03-21 15:47 - 2015-02-21 18:09 - 00000000 ____D () C:\Users\Tim²\Desktop\DB Repaint
2015-03-20 20:23 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2015-03-19 19:10 - 2014-03-23 13:56 - 00000000 ____D () C:\TempDump
2015-03-18 20:07 - 2013-08-30 21:30 - 00000000 ____D () C:\Users\Tim²\Desktop\Noch hochladen
2015-03-15 10:50 - 2013-03-19 16:18 - 795379027 _____ () C:\WINDOWS\MEMORY.DMP
2015-03-14 15:01 - 2013-08-27 08:56 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-03-14 14:52 - 2012-11-09 10:35 - 122905848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Files in the root of some directories =======

2014-07-09 14:15 - 2014-07-09 14:15 - 0534878 _____ () C:\Program Files (x86)\cskinfx.zip
2014-05-28 17:27 - 2014-10-26 16:26 - 0012800 _____ () C:\Users\Tim²\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-05 16:33 - 2013-08-05 16:33 - 0000000 _____ () C:\Users\Tim²\AppData\Local\Input.xml
2013-02-18 15:05 - 2013-02-18 15:05 - 0001474 _____ () C:\Users\Tim²\AppData\Local\RecConfig.xml
2014-08-12 11:36 - 2014-08-12 11:36 - 0000860 _____ () C:\Users\Tim²\AppData\Local\recently-used.xbel
2013-08-05 16:32 - 2013-08-05 16:32 - 0000000 _____ () C:\Users\Tim²\AppData\Local\Settings.xml
2015-02-07 15:28 - 2015-02-07 15:28 - 0000000 _____ () C:\Users\Tim²\AppData\Local\{458AF548-DEFF-4255-A1A5-C1D1375E9878}
2014-06-15 15:21 - 2014-06-15 15:43 - 0000821 _____ () C:\ProgramData\hpzinstall.log
ZeroAccess:
C:\Users\Tim²\AppData\Local\Google\Desktop\Install

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================
         
--- --- ---
__________________


Alt 12.04.2015, 16:45   #3
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund - Standard

Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund



Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?[/b]

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!


Zitat:
Ran by Tim² (ATTENTION: The logged in user is not administrator) on TIMS-PC on 12-04-2015 14:32:17
Running from C:\Users\Tim²\Downloads
1. Unsere Tools brauchen immer Adminrechte!

2. Leider hast du unsere Anleitung nicht richtig befolgt:
Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind.
Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen.
Alle Tools bis zum Ende der Bereinigung auf dem Desktop lassen, evtl. benötigen wir manche öfter.


Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________
__________________

Alt 12.04.2015, 18:12   #4
PunYing
 
Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund - Standard

Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund



Hallo cosinus,

Entschuldigung... Da hab ich nicht richtig gelesen. Ich habs jetzt nochmal gemacht, aber der passt hier leider nicht rein... hat 1000 Buchstaben zu viel. Was soll ich da machen?

Von Anti-Malware hab ich auch ein Log. Diesmal auch mit Adminrechte, aber auch zu lang. Hat 100000 Zeichen zu viel.

Antwort

Themen zu Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund
.com, adware, converter, cpu-z, defender, desktop, failed, firefox, flash player, google, help, helper, home, internet, internet explorer, kaspersky, mp3, object, programm, scan, security, server, software, system error, werbung, windows




Ähnliche Themen: Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund


  1. Audio Werbung im Hintergrund ausgehend von "Steam"
    Plagegeister aller Art und deren Bekämpfung - 16.09.2015 (9)
  2. Link Klick öffnet zunächst eine Link Fremde Seite " Casino Werbung " " Siele Werbung " "Erotik Seiten " oder ähnliches!
    Plagegeister aller Art und deren Bekämpfung - 26.08.2015 (17)
  3. Diverse Malware ("CoolSaleCoupon", "ddownlloaditkeep", "omiga-plus", "SaveSense", "SaleItCoupon"); lahmer PC & viel Werbung!
    Plagegeister aller Art und deren Bekämpfung - 11.01.2015 (16)
  4. Programm wird andauernd minimiert durch "Suchergebnisse" + Firefox springt immer auf Startseite zurück
    Log-Analyse und Auswertung - 23.12.2014 (7)
  5. Firefox wird von Werbung zugespammt ("Ads by ss8" und jetzt "Ads bei info")
    Log-Analyse und Auswertung - 16.09.2014 (30)
  6. Anwendungen werden "in den Hintergrund" geschoben, "wisptis.exe" doppelt
    Log-Analyse und Auswertung - 28.07.2014 (11)
  7. "Antiviren Werbung" "Langsamer PC" "PC stürzt ab" Banner und Popups beim surfen
    Plagegeister aller Art und deren Bekämpfung - 05.11.2013 (28)
  8. Programm "IMINENT" und plötzlich komische Werbung z.B. bei Facebook
    Plagegeister aller Art und deren Bekämpfung - 20.08.2013 (13)
  9. Vermutlicher Trojaner/Rat/Stealer "RtVOsd.exe" oder ein anderes Programm (klicken im Hintergrund und cmd überträgt dateien ohne Auforderung)
    Plagegeister aller Art und deren Bekämpfung - 05.03.2013 (12)
  10. Im "Hintergrund" läuft ein Programm
    Plagegeister aller Art und deren Bekämpfung - 12.10.2011 (11)
  11. Internet Explorer öffnet sich selber mit Werbung, ein Fenster "Meldung von Website" ebenfalls
    Plagegeister aller Art und deren Bekämpfung - 24.05.2011 (3)
  12. Firefox: Weiterleitung auf "gostats.com" und Werbung "served by Yourprofitclub"
    Log-Analyse und Auswertung - 10.03.2011 (4)
  13. Firefox: Weiterleitung auf "gostats.com" und Werbung "served by Yourprofitclub"
    Log-Analyse und Auswertung - 05.03.2011 (23)
  14. IE öffnet PopUps die zum Teil auch "unsichtbar" im Hintergrund aktiviert werden
    Log-Analyse und Auswertung - 26.08.2010 (1)
  15. IE im Hintergrund aktiv trotz Firefox + Lautsprecher auf "mute"
    Log-Analyse und Auswertung - 09.08.2010 (16)
  16. Firefox öffnet dubiose "Antismalwar" und "Werbeseiten"
    Log-Analyse und Auswertung - 06.05.2010 (4)
  17. roter Hintergrund auf Desktop mit "Spyware" Werbung????
    Plagegeister aller Art und deren Bekämpfung - 15.05.2006 (6)

Zum Thema Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund - Guten Tag zusammen, Als ich heute morgen ein bisschen im Internet Explorer gebrowst habe, hat sich andauernd Werbung geöffnet und JavaScript hat sich deaktiviert. Ich habe mich natürlch gewundert und - Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund...
Archiv
Du betrachtest: Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.