Trojaner-Board - PC läuft sehr langsam, ständige Verzögerung

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - PC läuft sehr langsam, ständige Verzögerung (https://www.trojaner-board.de/154041-pc-laeuft-sehr-langsam-staendige-verzoegerung.html)

PC läuft sehr langsam, ständige Verzögerung

Hallo Zusammen

Ich wäre sehr froh um Hilfe. Mein PC läuft sehr langsam und es hat überall Werbung...
Vielen Dank im Voraus!

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014

Ran by Sabrina (administrator) on SABRINA-THINK on 18-05-2014 19:25:24

Running from C:\Users\Sabrina\Desktop

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

The only official download link for FRST:

Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 

Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

() C:\Windows\System32\nvwmi64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe

(UPEK Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

() C:\Windows\System32\nvwmi64.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe

(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe

(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe

(Swisscom) C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe

(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe

(Swisscom) C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Lenovo.) C:\Windows\System32\TpShocks.exe

() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

(Avanquest Software ) C:\Program Files (x86)\Digital Line Detect\DLG.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(Dropbox, Inc.) C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

() C:\Windows\Samsung\PanelMgr\SSMMgr.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Swisscom) C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe

() C:\Windows\Samsung\PanelMgr\caller64.exe

(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE

(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\ZOOM\TpScrex.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\System Update\SUService.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe

() C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2789160 2011-05-19] (Synaptics Incorporated)

HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [380776 2010-12-09] (Lenovo.)

HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2011-03-14] (Conexant systems, Inc.)

HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [40808 2011-05-31] (Lenovo Group Limited)

HKLM\...\Run: [ALCKRESI.EXE] => C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE [281960 2011-05-26] (Lenovo Group Limited)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-31] (Ricoh co.,Ltd.)

HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [112152 2011-01-17] (Intel Corporation)

HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor

HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-14] (Lenovo, Inc.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Samsung PanelMgr] => C:\Windows\Samsung\PanelMgr\ssmmgr.exe [606208 2009-10-13] ()

HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)

HKLM-x32\...\Run: [Swisscom Quick Help] => C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe [16668080 2013-10-02] (Swisscom)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (UPEK Inc.)

HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [LTT] => C:\Program Files\PC-Doctor\EnableToolbarW32.exe [23120 2011-06-27] (PC-Doctor, Inc.)

HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [AppSafe] => C:\Program Files (x86)\AppSafe\AppSafe.exe

AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)

AppInit_DLLs: ,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)

AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)

AppInit_DLLs-x32: ,C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)

Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk

ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk

ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files (x86)\Digital Line Detect\DLG.exe (Avanquest Software )

Startup: C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: proxy.lfrz.at:8080

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad

URLSearchHook: HKLM-x32 - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}

URLSearchHook: HKLM-x32 - SimilarWeb - {74198672-5F7D-4FE9-A611-4AC1D5A66A15} - C:\Program Files (x86)\SimilarWeb\SimilarWeb.dll (SimilarGroup)

URLSearchHook: HKCU - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}

URLSearchHook: HKCU - SimilarWeb - {74198672-5F7D-4FE9-A611-4AC1D5A66A15} - C:\Program Files (x86)\SimilarWeb\SimilarWeb.dll (SimilarGroup)

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_deCH472

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_deCH472

BHO: YoutubeAdblocker - {159BC49F-2CD6-4CB7-932B-1027665E58BD} - C:\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll No File

BHO: CaheoapMee - {4006E1A8-DBC1-85C2-AB05-C358A67FAC60} - C:\ProgramData\CaheoapMee\NwfY2HOswh.x64.dll ()

BHO: greaotssaVer - {4F72390C-3192-91EF-ECD9-D90061D298A2} - C:\Program Files (x86)\greaotssaVer\2ZKW9c.x64.dll No File

BHO: SNT - {847493A0-9B57-E1D5-FE2C-CC1B12BC46CB} - C:\Program Files (x86)\SNT\p7T2DTlA.x64.dll No File

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)

BHO-x32: Octh Class - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)

BHO-x32: CaheoapMee - {4006E1A8-DBC1-85C2-AB05-C358A67FAC60} - C:\ProgramData\CaheoapMee\NwfY2HOswh.dll ()

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - SimilarWeb - {74198672-5F7D-4FE9-A611-4AC1D5A66A15} - C:\Program Files (x86)\SimilarWeb\SimilarWeb.dll (SimilarGroup)

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{D5A2C57D-7554-4054-AE53-57D7A4D0B831}: [NameServer]195.186.216.33 195.186.152.33
 

FireFox:

========

FF ProfilePath: C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default

FF Homepage: https://www.google.ch/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: ExxsTiRaCooupon - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\ooeu24m3d@pkpojf.org [2014-05-16]

FF Extension: Swisscom Quick Help - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\{6A6114A5-EEF5-45F4-BCD1-B00A7B33E04B} [2014-01-13]

FF Extension: Firebug - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\firebug@software.joehewitt.com.xpi [2013-02-17]

FF HKLM-x32\...\Firefox\Extensions: [VIP@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client\

FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\ []

FF HKLM-x32\...\Firefox\Extensions: [{E4D8AFFF-DA7C-412F-A976-05ED142C7806}] - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\

FF Extension: Unlimited Data Manager - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\ []
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com

CHR RestoreOnStartup: "hxxp://www.google.com"

CHR Extension: (YTBBookMark) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\amabcieebhjofcnbdphdmfkfcdgfilgk [2014-01-04]

CHR Extension: (YouTube) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-02-25]

CHR Extension: (goreatsoAvver) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij [2014-01-04]

CHR Extension: (Google Search) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-02-25]

CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpicgdnjfnbkibnicdnnpkkpklkjkki [2013-04-12]

CHR Extension: (Speedy Shopper) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ganlifbpkcplnldliibcbegplfmcfigp [2014-01-04]

CHR Extension: (SNT) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcgmnfaeohlofnjigiimjlbjleaomlei [2014-01-04]

CHR Extension: (ExxsTiRaCooupon) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcjmphdcljedddkheginnckbjccchepe [2014-05-16]

CHR Extension: (YoutubeAdblocker) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba [2014-01-04]

CHR Extension: (Norton Identity Protection) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2012-02-25]

CHR Extension: (Gmail) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-02-25]

CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-01-15]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

S2 1a34a8e0; C:\Program Files (x86)\GSSvc.dll [146768 2014-01-04] ()

S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [478056 2011-08-31] (Lenovo.)

R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)

R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2513752 2014-03-04] ()

R2 SesamService; C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe [1482240 2011-05-16] (Swisscom)

R2 SwiCardDetectSvc; C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe [307568 2010-09-22] (Sierra Wireless, Inc.)

R2 UDM Service; C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe [182128 2011-05-20] (Swisscom)

R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [82544 2011-06-30] (Symantec Corporation)
 

==================== Drivers (Whitelisted) ====================
 

S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-25] (Samsung Electronics Co., Ltd.)

S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2011-02-18] (Huawei Technologies Co., Ltd.)

R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [301512 2014-03-04] (NVIDIA Corporation)

R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13840 2009-03-13] (UPEK Inc.)

R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [41536 2009-09-24] (Lenovo (United States) Inc.)

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()

R3 WtSmpAdap; C:\Windows\System32\DRIVERS\wtsmpadap.sys [56688 2011-04-11] (Swisscom)

R1 WtSmpFlt; C:\Windows\System32\DRIVERS\wtsmpflt.sys [409456 2011-04-11] (Swisscom)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 vpnva; system32\DRIVERS\vpnva64.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-05-18 19:20 - 2014-05-18 19:25 - 00023637 _____ () C:\Users\Sabrina\Desktop\FRST.txt

2014-05-16 23:40 - 2014-05-16 23:41 - 00000000 ____D () C:\ProgramData\CaheoapMee

2014-05-16 23:17 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-16 23:17 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-16 23:17 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-16 23:17 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-16 23:17 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-16 23:17 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-13 21:16 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-13 21:16 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-13 21:16 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-05-13 21:16 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-05-13 21:15 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-05-13 21:15 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-05-13 21:15 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-05-13 21:15 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-05-13 21:15 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2014-05-13 21:15 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2014-05-13 21:15 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2014-05-13 21:15 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-05-13 21:15 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-05-13 21:15 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-05-13 21:15 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2014-05-13 21:15 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-05-13 21:15 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2014-05-13 21:15 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2014-05-13 21:15 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-05-13 21:15 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-07 20:02 - 2014-05-07 20:03 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe

2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd

2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe

2014-05-05 08:03 - 2014-05-05 08:03 - 00641568 _____ () C:\Users\Sabrina\Downloads\download-adobe-type-manager.exe

2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe

2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe

2014-05-05 07:40 - 2014-05-05 08:07 - 00000000 ____D () C:\Program Files (x86)\CrossFnt

2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe

2014-05-05 07:32 - 2014-05-05 07:32 - 00050473 ____R () C:\Users\Sabrina\Desktop\schriften.zipx

2014-05-04 22:15 - 2014-05-05 08:13 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit

2014-05-04 22:15 - 2014-05-04 22:15 - 00001066 _____ () C:\Users\Sabrina\Desktop\Orbit.lnk

2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense

2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Orbit

2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Program Files (x86)\Orbitdownloader

2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe

2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2014-05-04 21:41 - 2014-05-13 00:13 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job

2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe

2014-05-04 21:39 - 2014-05-18 18:40 - 00000300 _____ () C:\Windows\Tasks\AppCloudUpdater.job

2014-05-04 21:39 - 2014-05-04 21:39 - 00003254 _____ () C:\Windows\System32\Tasks\AppCloudUpdater

2014-05-04 21:39 - 2014-05-04 21:39 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\AppCloudUpdater

2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml

2014-05-04 21:34 - 2012-05-15 07:13 - 00144896 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll

2014-05-04 21:34 - 2012-05-15 06:20 - 00104448 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll

2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\SysWOW64\NV

2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\system32\NV

2014-05-04 21:28 - 2014-05-04 21:31 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe

2014-05-04 21:25 - 2014-03-04 20:35 - 02513752 _____ () C:\Windows\system32\nvwmi64.exe

2014-05-04 21:25 - 2014-03-04 20:35 - 00004084 _____ () C:\Windows\system32\nvPerfProvider.man

2014-05-04 21:25 - 2014-03-04 18:17 - 00595232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA

2014-05-04 21:23 - 2014-03-04 20:35 - 30389192 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 25257816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 22973896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 18312672 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 18225104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 15879264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 15232424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 12672288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-05-04 21:23 - 2014-03-04 20:35 - 11638736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 11587736 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 09731624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 09688888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 03131848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 03123544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 02936152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 02752856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 01883480 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433276.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433276.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 01249080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00888776 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00880984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00860104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00850888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00301512 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvkflt.sys

2014-05-04 21:23 - 2014-03-04 20:35 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00031576 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys

2014-05-04 21:18 - 2014-05-04 21:22 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe

2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf

2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)

2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)

2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)

2014-05-04 20:04 - 2014-05-04 20:05 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf

2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp

2014-05-04 19:45 - 2014-05-04 19:45 - 00323712 _____ (MiniApp) C:\Users\Sabrina\Downloads\Utopia Regular.exe

2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf

2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip

2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip

2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\WinZip

2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\Program Files\WinZip

2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi

2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx

2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter

2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor

2014-05-04 18:26 - 2014-05-04 21:08 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5

2014-05-04 18:26 - 2014-05-04 18:29 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI

2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe

2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe

2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files

2014-05-04 18:13 - 2014-05-04 18:14 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi

2014-05-04 18:08 - 2014-05-04 18:09 - 00000020 _____ () C:\Windows\ø÷Í

2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸

2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe

2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener

2014-05-04 17:02 - 2014-05-04 17:07 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe

2014-05-04 16:44 - 2014-05-17 00:24 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-04 16:44 - 2014-05-04 16:46 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe

2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster

2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe

2014-05-03 08:33 - 2012-09-18 15:27 - 00501760 _____ () C:\Windows\system32\ZSHP1020.EXE

2014-05-03 08:33 - 2012-09-18 15:27 - 00192512 _____ () C:\Windows\system32\ZLhp1020.DLL

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle

2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java

2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe

2014-04-22 03:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-04-22 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-04-22 03:00 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-04-22 03:00 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-04-22 03:00 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-04-22 03:00 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-04-22 03:00 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-04-22 03:00 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-04-22 03:00 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-04-22 03:00 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-04-22 03:00 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-04-22 03:00 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-04-22 03:00 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-04-22 03:00 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-04-22 03:00 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-04-22 03:00 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-04-22 03:00 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-04-22 03:00 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-04-22 03:00 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-04-22 03:00 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-04-22 03:00 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-04-22 03:00 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-04-22 03:00 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-04-22 03:00 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-04-22 03:00 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-04-22 03:00 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-04-22 03:00 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-04-22 03:00 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-04-22 03:00 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-04-22 03:00 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-04-22 03:00 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-04-22 03:00 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-04-22 03:00 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-04-22 03:00 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-04-22 03:00 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-04-22 03:00 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-04-22 03:00 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-04-22 03:00 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-04-22 03:00 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-04-22 03:00 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-04-22 03:00 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-04-22 03:00 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-04-22 03:00 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-04-22 03:00 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
 

==================== One Month Modified Files and Folders =======
 

2014-05-18 19:25 - 2014-05-18 19:20 - 00023637 _____ () C:\Users\Sabrina\Desktop\FRST.txt

2014-05-18 19:25 - 2013-10-17 22:06 - 00000000 ____D () C:\FRST

2014-05-18 19:19 - 2014-01-31 18:47 - 02067456 _____ (Farbar) C:\Users\Sabrina\Desktop\FRST64.exe

2014-05-18 19:19 - 2014-01-31 18:47 - 00000000 ____D () C:\Users\Sabrina\Desktop\FRST-OlderVersion

2014-05-18 19:17 - 2012-02-25 18:46 - 00000466 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job

2014-05-18 19:01 - 2012-04-06 14:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-05-18 18:50 - 2012-02-13 08:46 - 01514595 _____ () C:\Windows\WindowsUpdate.log

2014-05-18 18:42 - 2012-02-13 08:16 - 00705124 _____ () C:\Windows\system32\perfh007.dat

2014-05-18 18:42 - 2012-02-13 08:16 - 00151492 _____ () C:\Windows\system32\perfc007.dat

2014-05-18 18:42 - 2009-07-14 07:13 - 01629508 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-05-18 18:40 - 2014-05-04 21:39 - 00000300 _____ () C:\Windows\Tasks\AppCloudUpdater.job

2014-05-18 18:39 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\UDM

2014-05-18 18:39 - 2012-02-13 09:42 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-05-18 08:06 - 2012-02-13 09:42 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-05-17 21:59 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-05-17 21:59 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-05-17 21:53 - 2012-04-03 22:34 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Dropbox

2014-05-17 21:52 - 2012-04-03 22:35 - 00000000 ___RD () C:\Users\Sabrina\Dropbox

2014-05-17 21:50 - 2014-01-04 19:04 - 00000464 ____H () C:\Windows\Tasks\GS.Enabler-S-926685765.job

2014-05-17 21:50 - 2012-02-13 09:01 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-05-17 21:49 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-05-17 21:49 - 2009-07-14 06:51 - 00117307 _____ () C:\Windows\setupact.log

2014-05-17 08:06 - 2013-03-12 15:20 - 00000000 ___RD () C:\Users\Sabrina\Virtual Machines

2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-05-17 00:24 - 2014-05-04 16:44 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-17 00:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-05-16 23:41 - 2014-05-16 23:40 - 00000000 ____D () C:\ProgramData\CaheoapMee

2014-05-16 23:41 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\fc124d4af23c6577

2014-05-16 23:20 - 2012-02-25 18:46 - 00003506 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest

2014-05-16 23:20 - 2012-02-25 18:46 - 00003448 _____ () C:\Windows\System32\Tasks\PCDEventLauncher

2014-05-16 23:17 - 2012-02-25 11:19 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-05-16 23:16 - 2013-08-02 03:00 - 00000000 ____D () C:\Windows\system32\MRT

2014-05-16 23:11 - 2012-08-29 07:47 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-05-16 23:11 - 2012-02-25 12:07 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Adobe

2014-05-16 23:04 - 2013-12-01 21:48 - 00001040 _____ () C:\Users\Sabrina\Desktop\Dropbox.lnk

2014-05-16 23:04 - 2013-12-01 21:47 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-05-14 21:01 - 2012-04-06 14:52 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-05-14 21:01 - 2012-04-06 14:52 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-05-14 21:01 - 2012-02-27 19:10 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-05-13 21:01 - 2012-02-25 11:40 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk

2014-05-13 00:13 - 2014-05-04 21:41 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job

2014-05-11 09:04 - 2012-05-22 17:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-05-11 01:34 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\WtDashboard

2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-10 15:18 - 2012-06-23 19:00 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Apple Computer

2014-05-10 00:23 - 2009-07-14 06:45 - 05256976 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-05-09 08:14 - 2014-05-13 21:16 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-09 08:11 - 2014-05-13 21:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-08 23:30 - 2012-02-13 09:42 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-05-08 23:30 - 2012-02-13 09:42 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-05-08 18:32 - 2012-03-01 12:27 - 00011311 _____ () C:\Users\Sabrina\AppData\Roaming\SmarThruOptions.xml

2014-05-07 20:03 - 2014-05-07 20:02 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe

2014-05-06 06:40 - 2014-05-16 23:17 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-06 06:17 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-06 05:25 - 2014-05-16 23:17 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-06 05:07 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-06 05:00 - 2014-05-16 23:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-06 04:10 - 2014-05-16 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-05 12:03 - 2012-02-25 18:47 - 00118016 _____ () C:\Users\Sabrina\AppData\Local\GDIPFONTCACHEV1.DAT

2014-05-05 11:59 - 2014-02-28 10:48 - 00000000 ____D () C:\Users\Sabrina\Documents\BVA

2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd

2014-05-05 08:13 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit

2014-05-05 08:07 - 2014-05-05 07:40 - 00000000 ____D () C:\Program Files (x86)\CrossFnt

2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe

2014-05-05 08:03 - 2014-05-05 08:03 - 00641568 _____ () C:\Users\Sabrina\Downloads\download-adobe-type-manager.exe

2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe

2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe

2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe

2014-05-05 07:32 - 2014-05-05 07:32 - 00050473 ____R () C:\Users\Sabrina\Desktop\schriften.zipx

2014-05-04 22:15 - 2014-05-04 22:15 - 00001066 _____ () C:\Users\Sabrina\Desktop\Orbit.lnk

2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense

2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Orbit

2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Program Files (x86)\Orbitdownloader

2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe

2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2014-05-04 21:45 - 2012-02-13 09:43 - 00000000 ____D () C:\Program Files (x86)\Windows Live

2014-05-04 21:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2014-05-04 21:43 - 2012-02-13 09:43 - 00204593 _____ () C:\Windows\DirectX.log

2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe

2014-05-04 21:41 - 2012-04-15 11:40 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Windows Live

2014-05-04 21:39 - 2014-05-04 21:39 - 00003254 _____ () C:\Windows\System32\Tasks\AppCloudUpdater

2014-05-04 21:39 - 2014-05-04 21:39 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\AppCloudUpdater

2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml

2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\SysWOW64\NV

2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\system32\NV

2014-05-04 21:34 - 2012-02-13 08:54 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\ProgramData\Intel

2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\Program Files\Common Files\Intel

2014-05-04 21:31 - 2014-05-04 21:28 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe

2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA

2014-05-04 21:22 - 2014-05-04 21:18 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe

2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter

2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor

2014-05-04 21:10 - 2010-11-21 05:47 - 00921524 _____ () C:\Windows\PFRO.log

2014-05-04 21:08 - 2014-05-04 18:26 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5

2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf

2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)

2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)

2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)

2014-05-04 20:05 - 2014-05-04 20:04 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf

2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp

2014-05-04 19:46 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\InstallMate

2014-05-04 19:45 - 2014-05-04 19:45 - 00323712 _____ (MiniApp) C:\Users\Sabrina\Downloads\Utopia Regular.exe

2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf

2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip

2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip

2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\ProgramData\WinZip

2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\Program Files\WinZip

2014-05-04 19:21 - 2012-02-25 18:45 - 00000000 ____D () C:\Users\Sabrina

2014-05-04 19:21 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi

2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx

2014-05-04 18:29 - 2014-05-04 18:26 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI

2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe

2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe

2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files

2014-05-04 18:14 - 2014-05-04 18:13 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi

2014-05-04 18:09 - 2014-05-04 18:08 - 00000020 _____ () C:\Windows\ø÷Í

2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸

2014-05-04 17:49 - 2012-03-06 07:54 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\CrashDumps

2014-05-04 17:37 - 2010-11-21 09:16 - 00000000 ___RD () C:\Users\Public\Recorded TV

2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe

2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener

2014-05-04 17:07 - 2014-05-04 17:02 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe

2014-05-04 16:46 - 2014-05-04 16:44 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe

2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster

2014-05-04 16:38 - 2012-02-25 18:46 - 00000528 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job

2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle

2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java

2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe

2014-04-29 09:42 - 2012-02-25 18:46 - 00004246 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask

2014-04-22 03:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
 

Some content of TEMP:

====================

C:\Users\Sabrina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpu67gov.dll

C:\Users\Sabrina\AppData\Local\Temp\IrsoDLL.dll

C:\Users\Sabrina\AppData\Local\Temp\nv3DVStreaming.dll

C:\Users\Sabrina\AppData\Local\Temp\nvSCPAPI.dll

C:\Users\Sabrina\AppData\Local\Temp\nvStereoApiI.dll

C:\Users\Sabrina\AppData\Local\Temp\nvStInst.exe

C:\Users\Sabrina\AppData\Local\Temp\Quarantine.exe

C:\Users\Sabrina\AppData\Local\Temp\Risweb32.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe

[2014-05-13 21:15] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C
 

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-05-10 17:39
 

==================== End Of Log ============================

Hallo und willkommen an Board, schnüffel :hallo:

Mein Name ist Machiavelli und werde bei Deinem Malware Problemen behilflich sein. Falls Du Dich im abgesicherten Modus befindest, würde ich Dir raten, alle Anweisungen von mir auszudrucken, um besseren Überblick auf die Gesamtsituation zu bekommen. Ich bin hier im Malwareteam und daher ist es mir möglich, Dir zu helfen.

Damit eine Bereinigung ermöglicht werden kann, musst Du ein paar Regeln/Tipps beachten:

Malware zu entfernen ist normalerweise recht schwierig
Heutige Malware kann sich sehr gut verstecken, so kann es sein, dass es bestimmte Tools nicht sehen. Eine Neuinstallation ist daher oft das klügere.
Bitte folge meinen Anweisung bis in das kleinste Detail
Falls Du was falsches machst, wie z.B. irgendwas fixt, was nicht durch mich genehmigt wurde, kann der PC dadurch beschädigt werden. Daher folge meinen Anweisungen ganz genau
Bleibe mit mir in Kontakt, bis Deine Probleme vollständig gelöst sind
Themen, in welchen innerhalb von 4 Tagen keine Antwort gepostet wird, werden geschlossen.
Bitte lasse keine anderen Tools laufen, während ich bereinige
Wenn Du Tools wie z.B. Malwarebytes etc. ohne meines Wissens laufen lässt, kann es unter Umständen Ergebnisse verfälschen.
Ließ meine Posts vollständig durch
Falls nicht, kann das zu schwerwiegenden Problemen (z.B. PC bootet nicht mehr) führen oder der Prozess der Malwareentfernung wird länger

Wo ist das Addition Log?

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013

Ran by Sabrina at 2013-10-17 22:07:22

Running from C:\Users\Sabrina\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

 Update for Microsoft Office 2007 (KB2508958) (x32)

Adobe AIR (x32 Version: 3.7.0.1530)

Adobe Extension Manager CS6 (x32 Version: 6.0)

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)

Adobe Help Manager (x32 Version: 4.0.244)

Adobe InDesign CS5 (x32 Version: 7.0)

Adobe Media Player (x32 Version: 1.8)

Adobe Photoshop 7.0.1 (x32 Version: 7.0.1)

Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)

Apple Application Support (x32 Version: 2.3)

Apple Mobile Device Support (Version: 5.2.0.6)

Apple Software Update (x32 Version: 2.1.3.127)

Avira Free Antivirus (x32 Version: 12.1.9.2500)

Bonjour (Version: 3.0.0.10)

Broadcom InConcert Maestro (Version: 1.0.1.1500)

Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.0.08057)

Cisco AnyConnect Secure Mobility Client (x32 Version: 3.0.08057)

Cisco Systems VPN Client 5.0.07.0290 (Version: 5.0.7)

Citrix Authentication Manager (x32 Version: 4.0.0.53726)

Citrix Endpoint Analysis Plugin (x32 Version: 4.5.5.0)

Citrix Receiver (DV) (x32 Version: 13.4.0.25)

Citrix Receiver (HDX Flash-Umleitung) (x32 Version: 13.4.0.25)

Citrix Receiver (USB) (x32 Version: 13.4.0.25)

Citrix Receiver (x32 Version: 13.4.0.25)

Citrix Receiver Inside (x32 Version: 3.4.0.29585)

Citrix Receiver Updater (x32 Version: 3.4.0.29577)

Citrix Receiver(Aero) (x32 Version: 13.4.0.25)

Conexant 20672 SmartAudio HD (Version: 8.32.23.0)

Corel WinDVD (x32 Version: 10.0.5.828)

Create Recovery Media (x32 Version: 1.20.0.00)

D3DX10 (x32 Version: 15.4.2368.0902)

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)

Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7 (Version: 1.00)

EasyRotator Wizard (x32 Version: 1.0.123)

EasyTax 2012 AG 1.02 (x32 Version: 1.02)

Evernote v. 4.2.3 (x32 Version: 4.2.3.15)

Free Audio Converter version 5.0.15.706 (x32 Version: 5.0.15.706)

Free DVD Video Converter version 2.0.9.706 (x32 Version: 2.0.9.706)

Free Video to Flash Converter version 5.0.15.706 (x32 Version: 5.0.15.706)

Free YouTube Download version 3.1.42.1212 (x32 Version: 3.1.42.1212)

Free YouTube to MP3 Converter version 3.11.37.1212 (x32 Version: 3.11.37.1212)

Google Chrome (x32 Version: 30.0.1599.69)

Google Earth Plug-in (x32 Version: 7.1.1.1888)

Google Toolbar for Internet Explorer (x32 Version: 1.0.0)

Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54)

Google Update Helper (x32 Version: 1.3.21.165)

IB Updater Service (x32 Version: 4.0.7.4)

Integrated Camera Driver Installer Package Ver.1.1.0.1147 (x32 Version: 1.1.0.1147)

Integrated Camera TWAIN (x32 Version: 1.0.11.1223)

Intel PROSet Wireless

Intel PROSet Wireless (x32)

Intel(R) Control Center (x32 Version: 1.2.1.1007)

Intel(R) Identity Protection Technology 1.1.2.0 (x32 Version: 1.1.2.0)

Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)

Intel(R) Processor Graphics (x32 Version: 8.15.10.2321)

Intel(R) PROSet/Wireless WiFi Software (Version: 14.2.0000)

Internet Explorer Toolbar 4.6 by SweetPacks (x32 Version: 4.6.0003)

iTunes (Version: 10.6.3.25)

Kalender-Excel-8.8 (x32 Version: 8.8)

Lenovo Auto Scroll Utility (Version: 1.10)

Lenovo Patch Utility (x32 Version: 1.0.1.1)

Lenovo Patch Utility 64 bit (Version: 1.2.0.1)

Lenovo Registration (x32 Version: 1.0.4)

Lenovo SimpleTap (Version: 3.0.0010.00)

Lenovo System Interface Driver (Version: 1.05)

Lenovo ThinkVantage Toolbox (Version: 6.0.5849.23)

Lenovo User Guide (x32 Version: 1.0.0008.00)

Lenovo Warranty Information (x32 Version: 1.0.0005.00)

Lenovo Welcome (x32 Version: 3.00.006.0)

Macromedia Contribute 3 (x32 Version: 3.0.2.2326)

Macromedia Dreamweaver 8 (x32 Version: 8.0.0.2751)

Macromedia Extension Manager (x32 Version: 1.7.270)

Macromedia Fireworks 8 (x32 Version: 8.0.0.777)

Macromedia Flash 8 (x32 Version: 8.00.0000)

Macromedia Flash 8 Video Encoder (x32 Version: 1.00.0000)

Macromedia HomeSite+ (x32)

Message Center Plus (x32 Version: 2.0.0012.00)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Office 2007 Service Pack 3 (SP3) (x32)

Microsoft Office 2010 Service Pack 1 (SP1) (x32)

Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)

Microsoft Office Home and Student 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)

Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Outlook Connector (x32 Version: 14.0.5118.5000)

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Professional Plus 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)

Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)

Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft SkyDrive (HKCU Version: 16.4.6013.0910)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)

Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)

Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)

Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)

Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)

Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)

Mozilla Maintenance Service (x32 Version: 24.0)

MSVCRT (x32 Version: 15.4.2862.0708)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

Nur Entfernen der CopyTrans Suite möglich (HKCU Version: 2.36)

NVIDIA 3D Vision Treiber 306.97 (Version: 306.97)

NVIDIA Grafiktreiber 306.97 (Version: 306.97)

NVIDIA HD-Audiotreiber 1.2.23.3 (Version: 1.2.23.3)

NVIDIA Install Application (Version: 2.1002.85.551)

NVIDIA Optimus 1.10.8 (Version: 1.10.8)

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.0697)

NVIDIA Systemsteuerung 306.97 (Version: 306.97)

NVIDIA Update Components (Version: 1.10.8)

On Screen Display (Version: 6.50.00)

Online Plug-in (x32 Version: 13.4.0.25)

PDF Settings CS5 (x32 Version: 10.0)

PDFCreator (x32 Version: 1.2.3)

Picasa 3 (x32 Version: 3.9)

Private Tax 2011 1.4 (x32 Version: 1.4)

Programmer's Notepad (x32 Version: 2.3.4.2350)

ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14)

QuickTime (x32 Version: 7.73.80.64)

R for Windows 2.14.1 (Version: 2.14.1)

RapidBoot (Version: 1.11)

Readiris Pro 10 (x32)

Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (Version: 1.00)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0)

RICOH_Media_Driver_v2.14.18.01 (x32 Version: 2.14.18.01)

Samsung CLX-3170 Series (x32)

Secure Download Manager (x32 Version: 3.0.3)

Self-Service Plug-in (x32 Version: 3.4.0.33684)

SimilarWeb (x32 Version: 0.0.0.1)

SmarThru 4 (x32)

SmarThru PC Fax (x32)

SweetIM for Messenger 3.7 (x32 Version: 3.7.0005)

Swisscom Quick Help (x32 Version: 3.3.2.340)

System Update (x32 Version: 4.01.0015)

TDM-GCC (x32 Version: 1.1006.0)

ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 6.4.0.1500)

ThinkPad FullScreen Magnifier (Version: 2.40)

ThinkPad Modem Adapter (Version: 7.80.5.0)

ThinkPad Power Management Driver (Version: 1.61.00.11)

ThinkPad Power Manager (x32 Version: 3.63)

ThinkPad UltraNav Driver (Version: 15.3.8.0)

ThinkPad UltraNav Utility (x32 Version: 2.13.0)

ThinkVantage Active Protection System (Version: 1.73)

ThinkVantage AutoLock (Version: 1.03)

ThinkVantage Communications Utility (Version: 2.07)

ThinkVantage Fingerprint Software (Version: 5.9.4.6882)

Tinn-R 2.3.7.1 (x32)

TopStyle Lite (Version 3.0) (x32 Version: 3.1.0)

Unlimited Data Manager 10.0.0 (x32 Version: 10.0.21168.0)

Update for 2007 Microsoft Office System (KB967642) (x32)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2494150) (x32)

Update for Microsoft Office 2010 (KB2553065) (x32)

Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2566458) (x32)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2827325) 32-Bit Edition (x32)

Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)

Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)

Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)

Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)

Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)

Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)

Update für Microsoft Office Excel 2007 Help (KB963678) (x32)

Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)

Update für Microsoft Office Word 2007 Help (KB963665) (x32)

Update Manager for SweetPacks 1.0 (x32 Version: 1.0.0005)

VIP Access (x32 Version: 2.0.2.140)

VLC media player 2.0.2 (x32 Version: 2.0.2)

Wajam (x32 Version: 1.76)

Windows Driver Package - Intel (e1cexpress) Net  (12/21/2010 11.8.84.0) (Version: 12/21/2010 11.8.84.0)

Windows Driver Package - Intel System  (09/10/2010 9.2.0.1011) (Version: 09/10/2010 9.2.0.1011)

Windows Driver Package - Intel System  (11/20/2010 9.2.0.1016) (Version: 11/20/2010 9.2.0.1016)

Windows Driver Package - Intel USB  (12/21/2010 9.2.0.1021) (Version: 12/21/2010 9.2.0.1021)

Windows Driver Package - Lenovo 1.61.00.11 (11/11/2010 1.61.00.11) (Version: 11/11/2010 1.61.00.11)

Windows Driver Package - Synaptics (SynTP) Mouse  (05/19/2011 15.3.8.0) (Version: 05/19/2011 15.3.8.0)

Windows Live Communications Platform (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3555.0308)

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)

Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)

Windows Live Installer (x32 Version: 15.4.3502.0922)

Windows Live Language Selector (Version: 15.4.3555.0308)

Windows Live Movie Maker (x32 Version: 15.4.3502.0922)

Windows Live Photo Common (x32 Version: 15.4.3502.0922)

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)

Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)

Windows Live SOXE (x32 Version: 15.4.3502.0922)

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)

Windows Live UX Platform (x32 Version: 15.4.3502.0922)

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)

Windows XP Mode (Version: 1.3.7600.16422)

WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0)

WinVPP 1.3.4 (x32 Version: 1.3.4)

Wondershare Vivideo(Build 2.0.0.12) (x32)
 

==================== Restore Points  =========================
 

15-09-2013 08:24:19 Geplanter Prüfpunkt

15-09-2013 09:45:46 Windows Update

22-09-2013 18:37:41 Geplanter Prüfpunkt

24-09-2013 01:00:27 Windows Update

03-10-2013 09:32:13 Macromedia Dreamweaver 8 wird entfernt

03-10-2013 09:41:15 Macromedia Dreamweaver 8 wird installiert

03-10-2013 10:01:21 Macromedia Dreamweaver 8 wird entfernt

03-10-2013 10:10:13 Macromedia Dreamweaver 8 wird installiert

12-10-2013 01:00:50 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0BC77D44-74FA-455A-B587-E73CE62C5990} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-13] (Google Inc.)

Task: {11EF87FA-F5C4-4F01-89D7-E8ECB43B7D7C} - System32\Tasks\MCP => C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-28] ()

Task: {3BE08FEC-0FC8-441D-939E-C609A500E540} - System32\Tasks\AdobeAAMUpdater-1.0-Sabrina-THINK-Sabrina => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)

Task: {3D74BFA3-1C0A-4739-B737-FCDF6999E8B4} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2011-12-21] (Lenovo)

Task: {73978FBE-6EAD-4932-8803-2008ACAD057D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated)

Task: {7629E501-D646-44BF-8DF0-85E237916E4B} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)

Task: {7EBBFFA8-F9C9-4534-8D6D-8A9AC2815D03} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {94B59A78-1266-4B6B-983C-AA7837A977BC} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)

Task: {957D2B91-634E-4D2B-9EE4-85AE74F41DFC} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.)

Task: {C32FF76B-6D11-4288-8203-8954890ED5EB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {DBC194AD-8A8E-4AAA-BFE4-C43BFCEBA7C5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-13] (Google Inc.)

Task: {EF259D21-F761-4E73-8FA3-F6DDC6A2B365} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PWMIDTSV.EXE [2011-08-31] (Lenovo Group Limited)

Task: {F2E147F1-A5C9-45E3-B2D9-9940C0B51F8D} - System32\Tasks\Lenovo\SimpleTap\Start SimpleTap for Sabrina-THINK.Sabrina => C:\Program Files\Lenovo\SimpleTap\SimpleTap.exe [2011-12-21] (Lenovo)

Task: {F3B604C6-B7CE-4E96-B52F-0B4A5F5B3B23} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe

Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe
 

==================== Loaded Modules (whitelisted) =============
 
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 

Name: Cisco Systems VPN Adapter for 64-bit Windows

Description: Cisco Systems VPN Adapter for 64-bit Windows

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Cisco Systems

Service: CVirtA

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Cisco Systems

Service: vpnva

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (10/17/2013 09:24:14 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: svchost.exe_WbioSrvc, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1677

Ausnahmecode: 0x80004004

Fehleroffset: 0x000000000000940d

ID des fehlerhaften Prozesses: 0x7f4

Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_WbioSrvc0

Pfad der fehlerhaften Anwendung: svchost.exe_WbioSrvc1

Pfad des fehlerhaften Moduls: svchost.exe_WbioSrvc2

Berichtskennung: svchost.exe_WbioSrvc3
 

Error: (10/17/2013 09:20:29 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (10/17/2013 08:56:59 PM) (Source: PC-Doctor) (User: )

Description: (15072) Asapi: (20:56:59:3020)(15072) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12007) failed with error: 317
 

Error: (10/17/2013 08:56:59 PM) (Source: PC-Doctor) (User: )

Description: (15072) Asapi: (20:56:59:2710)(15072) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12007) failed with error: 317
 

Error: (10/15/2013 06:25:55 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 2028
 

Error: (10/15/2013 06:25:55 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 2028
 

Error: (10/15/2013 06:25:55 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (10/15/2013 06:25:54 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 1030
 

Error: (10/15/2013 06:25:54 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 1030
 

Error: (10/15/2013 06:25:54 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 
 

System errors:

=============

Error: (10/17/2013 09:24:19 PM) (Source: Service Control Manager) (User: )

Description: Dienst "Windows-Biometriedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (10/17/2013 09:24:18 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (10/17/2013 09:24:18 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (10/17/2013 09:24:10 PM) (Source: iaStor) (User: )

Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
 

Error: (10/17/2013 09:24:01 PM) (Source: BROWSER) (User: )

Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{E089CE53-2835-477B-AD7E-785AC58EF460}" zu oft fehl.

Der Sicherungssuchdienst wird beendet.
 

Error: (10/17/2013 09:23:58 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.
 

Error: (10/17/2013 09:20:09 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%20
 

Error: (10/17/2013 09:09:53 PM) (Source: iaStor) (User: )

Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
 

Error: (10/17/2013 09:03:35 PM) (Source: BROWSER) (User: )

Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{E089CE53-2835-477B-AD7E-785AC58EF460}" zu oft fehl.

Der Sicherungssuchdienst wird beendet.
 

Error: (10/16/2013 09:11:05 PM) (Source: BROWSER) (User: )

Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{E089CE53-2835-477B-AD7E-785AC58EF460}" zu oft fehl.

Der Sicherungssuchdienst wird beendet.
 
 

Microsoft Office Sessions:

=========================

Error: (07/22/2013 01:47:56 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 52 seconds with 0 seconds of active time.  This session ended with a crash.

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4
Bitte starte http://filepony.de/icon/frst.pngFRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

Bitte poste mir die Inhalte der Logs von Adwarecleaner, MBAM, JRT und FRST hier in den Thread.

Code:

# AdwCleaner v3.209 - Bericht erstellt am 18/05/2014 um 20:10:19

# Aktualisiert 18/05/2014 von Xplode

# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)

# Benutzername : Sabrina - SABRINA-THINK

# Gestartet von : C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe

# Option : Löschen
 

***** [ Dienste ] *****
 

[#] Dienst Gelöscht : 1a34a8e0
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\CaheoapMee

Ordner Gelöscht : C:\Program Files (x86)\CaheoapMee

Ordner Gelöscht : C:\Users\Administrator\AppData\Local\torch

Ordner Gelöscht : C:\Users\Gast\AppData\Local\torch

Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\torch

Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Temp\OCS

Ordner Gelöscht : C:\Users\Sabrina\AppData\Roaming\AppCloudUpdater

Ordner Gelöscht : C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\ooeu24m3d@pkpojf.org

Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij

Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij

Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij

Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij

Ordner Gelöscht : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij

Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba

Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba

Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba

Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba

Ordner Gelöscht : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba

Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcjmphdcljedddkheginnckbjccchepe

Datei Gelöscht : C:\Program Files (x86)\GSSvc.dll

Datei Gelöscht : C:\Windows\Tasks\AppCloudUpdater.job

Datei Gelöscht : C:\Windows\System32\Tasks\AppCloudUpdater
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ChEapMe.ChEapMe

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ChEapMe.ChEapMe.5.1

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{1a34a8e0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4006E1A8-DBC1-85C2-AB05-C358A67FAC60}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4006E1A8-DBC1-85C2-AB05-C358A67FAC60}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4006E1A8-DBC1-85C2-AB05-C358A67FAC60}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gelöscht : HKCU\Software\AppCloudUpdater

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\RegisteredApplicationsEx

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}

Schlüssel Gelöscht : HKLM\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}

Schlüssel Gelöscht : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}

Schlüssel Gelöscht : HKLM\Software\GS.Enabler

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppCloudUpdater
 

***** [ Browser ] *****
 

#NAME?
 
 

#NAME?
 

[ Datei : C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\prefs.js ]
 

Zeile gelöscht : user_pref("extensions.NCi_3WXY.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.ind[...]
 

#NAME?
 

[ Datei : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht [Search Provider] : hxxp://isearch.avg.com/search?cid={993F16F5-AA8A-498A-A825-52390C043FB5}&mid=&lang=&ds=&pr=&d=&v=&sap=dsp&q={searchTerms}

Gelöscht [Search Provider] : hxxp://websearch.searchsunmy.info/?l=1&q={searchTerms}&pid=377&r=2014/01/04&hid=6896541430164809529&lg=EN&cc=CH&unqvl=45

Gelöscht [Extension] : cmnkecdffcoibofckamdddfgeohpikij

Gelöscht [Extension] : jcjmphdcljedddkheginnckbjccchepe

Gelöscht [Extension] : mfpknoifpolmopniafjdmhgpeobpcbba
 

*************************
 

AdwCleaner[R0].txt - [9030 octets] - [21/10/2013 14:26:05]

AdwCleaner[R1].txt - [5322 octets] - [11/01/2014 13:58:23]

AdwCleaner[R2].txt - [1860 octets] - [12/01/2014 12:41:12]

AdwCleaner[R3].txt - [2715 octets] - [13/01/2014 17:03:55]

AdwCleaner[R4].txt - [1431 octets] - [22/01/2014 22:19:06]

AdwCleaner[R5].txt - [1547 octets] - [31/01/2014 18:51:19]

AdwCleaner[R6].txt - [6884 octets] - [18/05/2014 20:07:57]

AdwCleaner[S0].txt - [8615 octets] - [21/10/2013 14:27:20]

AdwCleaner[S1].txt - [5034 octets] - [11/01/2014 13:59:23]

AdwCleaner[S2].txt - [1921 octets] - [12/01/2014 12:42:37]

AdwCleaner[S3].txt - [2784 octets] - [13/01/2014 17:10:01]

AdwCleaner[S4].txt - [1492 octets] - [22/01/2014 22:20:25]

AdwCleaner[S5].txt - [1608 octets] - [31/01/2014 18:58:35]

AdwCleaner[S6].txt - [6536 octets] - [18/05/2014 20:10:19]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S6].txt - [6596 octets] ##########

Code:

# AdwCleaner v3.209 - Bericht erstellt am 18/05/2014 um 20:10:19

# Aktualisiert 18/05/2014 von Xplode

# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)

# Benutzername : Sabrina - SABRINA-THINK

# Gestartet von : C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe

# Option : Löschen
 

***** [ Dienste ] *****
 

[#] Dienst Gelöscht : 1a34a8e0
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\CaheoapMee

Ordner Gelöscht : C:\Program Files (x86)\CaheoapMee

Ordner Gelöscht : C:\Users\Administrator\AppData\Local\torch

Ordner Gelöscht : C:\Users\Gast\AppData\Local\torch

Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\torch

Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Temp\OCS

Ordner Gelöscht : C:\Users\Sabrina\AppData\Roaming\AppCloudUpdater

Ordner Gelöscht : C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\ooeu24m3d@pkpojf.org

Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij

Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij

Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij

Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij

Ordner Gelöscht : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij

Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba

Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba

Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba

Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba

Ordner Gelöscht : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba

Ordner Gelöscht : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcjmphdcljedddkheginnckbjccchepe

Datei Gelöscht : C:\Program Files (x86)\GSSvc.dll

Datei Gelöscht : C:\Windows\Tasks\AppCloudUpdater.job

Datei Gelöscht : C:\Windows\System32\Tasks\AppCloudUpdater
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ChEapMe.ChEapMe

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ChEapMe.ChEapMe.5.1

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{1a34a8e0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4006E1A8-DBC1-85C2-AB05-C358A67FAC60}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4006E1A8-DBC1-85C2-AB05-C358A67FAC60}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4006E1A8-DBC1-85C2-AB05-C358A67FAC60}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gelöscht : HKCU\Software\AppCloudUpdater

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\RegisteredApplicationsEx

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}

Schlüssel Gelöscht : HKLM\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}

Schlüssel Gelöscht : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}

Schlüssel Gelöscht : HKLM\Software\GS.Enabler

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppCloudUpdater
 

***** [ Browser ] *****
 

#NAME?
 
 

#NAME?
 

[ Datei : C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\prefs.js ]
 

Zeile gelöscht : user_pref("extensions.NCi_3WXY.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.ind[...]
 

#NAME?
 

[ Datei : C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht [Search Provider] : hxxp://isearch.avg.com/search?cid={993F16F5-AA8A-498A-A825-52390C043FB5}&mid=&lang=&ds=&pr=&d=&v=&sap=dsp&q={searchTerms}

Gelöscht [Search Provider] : hxxp://websearch.searchsunmy.info/?l=1&q={searchTerms}&pid=377&r=2014/01/04&hid=6896541430164809529&lg=EN&cc=CH&unqvl=45

Gelöscht [Extension] : cmnkecdffcoibofckamdddfgeohpikij

Gelöscht [Extension] : jcjmphdcljedddkheginnckbjccchepe

Gelöscht [Extension] : mfpknoifpolmopniafjdmhgpeobpcbba
 

*************************
 

AdwCleaner[R0].txt - [9030 octets] - [21/10/2013 14:26:05]

AdwCleaner[R1].txt - [5322 octets] - [11/01/2014 13:58:23]

AdwCleaner[R2].txt - [1860 octets] - [12/01/2014 12:41:12]

AdwCleaner[R3].txt - [2715 octets] - [13/01/2014 17:03:55]

AdwCleaner[R4].txt - [1431 octets] - [22/01/2014 22:19:06]

AdwCleaner[R5].txt - [1547 octets] - [31/01/2014 18:51:19]

AdwCleaner[R6].txt - [6884 octets] - [18/05/2014 20:07:57]

AdwCleaner[S0].txt - [8615 octets] - [21/10/2013 14:27:20]

AdwCleaner[S1].txt - [5034 octets] - [11/01/2014 13:59:23]

AdwCleaner[S2].txt - [1921 octets] - [12/01/2014 12:42:37]

AdwCleaner[S3].txt - [2784 octets] - [13/01/2014 17:10:01]

AdwCleaner[S4].txt - [1492 octets] - [22/01/2014 22:20:25]

AdwCleaner[S5].txt - [1608 octets] - [31/01/2014 18:58:35]

AdwCleaner[S6].txt - [6536 octets] - [18/05/2014 20:10:19]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S6].txt - [6596 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows 7 Professional x64

Ran by Sabrina on 18.05.2014 at 20:44:59.50

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Successfully deleted the following from C:\Users\Sabrina\AppData\Roaming\mozilla\firefox\profiles\9ulbhy7c.default\prefs.js
 

user_pref("extensions.p1LpPE.url", "hxxp://gethexnow.com/sync2/?q=hfZ9ofV9CShEAen0rHC6tMqLDe49CNU0n9YMCMlNhd9FqdaFrdnFqHaHrjaMBzqUojw9rdwFrTwFrdr8qih7hfs0pihPBMn0rjkEpdsGpdwEr

Emptied folder: C:\Users\Sabrina\AppData\Roaming\mozilla\firefox\profiles\9ulbhy7c.default\minidumps [27 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 18.05.2014 at 21:17:00.40

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014

Ran by Sabrina (administrator) on SABRINA-THINK on 18-05-2014 21:34:29

Running from C:\Users\Sabrina\Desktop

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

() C:\Windows\System32\nvwmi64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe

(UPEK Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe

(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe

(Swisscom) C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe

(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe

(Swisscom) C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

() C:\Windows\System32\nvwmi64.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\ZOOM\TpScrex.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Lenovo.) C:\Windows\System32\TpShocks.exe

() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

(Avanquest Software ) C:\Program Files (x86)\Digital Line Detect\DLG.exe

(Dropbox, Inc.) C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

() C:\Windows\Samsung\PanelMgr\SSMMgr.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Swisscom) C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe

(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Windows\Samsung\PanelMgr\caller64.exe

(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\System Update\SUService.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe

() C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2789160 2011-05-19] (Synaptics Incorporated)

HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [380776 2010-12-09] (Lenovo.)

HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2011-03-14] (Conexant systems, Inc.)

HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [40808 2011-05-31] (Lenovo Group Limited)

HKLM\...\Run: [ALCKRESI.EXE] => C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE [281960 2011-05-26] (Lenovo Group Limited)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-31] (Ricoh co.,Ltd.)

HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [112152 2011-01-17] (Intel Corporation)

HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor

HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-14] (Lenovo, Inc.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Samsung PanelMgr] => C:\Windows\Samsung\PanelMgr\ssmmgr.exe [606208 2009-10-13] ()

HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)

HKLM-x32\...\Run: [Swisscom Quick Help] => C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe [16668080 2013-10-02] (Swisscom)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (UPEK Inc.)

HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [LTT] => C:\Program Files\PC-Doctor\EnableToolbarW32.exe [23120 2011-06-27] (PC-Doctor, Inc.)

HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [AppSafe] => C:\Program Files (x86)\AppSafe\AppSafe.exe

AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)

AppInit_DLLs: , C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)

AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)

AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)

Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk

ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk

ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files (x86)\Digital Line Detect\DLG.exe (Avanquest Software )

Startup: C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: proxy.lfrz.at:8080

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad

URLSearchHook: HKLM-x32 - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}

URLSearchHook: HKCU - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_deCH472

BHO: YoutubeAdblocker - {159BC49F-2CD6-4CB7-932B-1027665E58BD} - C:\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll No File

BHO: greaotssaVer - {4F72390C-3192-91EF-ECD9-D90061D298A2} - C:\Program Files (x86)\greaotssaVer\2ZKW9c.x64.dll No File

BHO: SNT - {847493A0-9B57-E1D5-FE2C-CC1B12BC46CB} - C:\Program Files (x86)\SNT\p7T2DTlA.x64.dll No File

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{D5A2C57D-7554-4054-AE53-57D7A4D0B831}: [NameServer]195.186.216.33 195.186.152.33
 

FireFox:

========

FF ProfilePath: C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default

FF Homepage: https://www.google.ch/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Swisscom Quick Help - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\{6A6114A5-EEF5-45F4-BCD1-B00A7B33E04B} [2014-01-13]

FF Extension: Firebug - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\firebug@software.joehewitt.com.xpi [2013-02-17]

FF HKLM-x32\...\Firefox\Extensions: [VIP@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client\

FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\ []

FF HKLM-x32\...\Firefox\Extensions: [{E4D8AFFF-DA7C-412F-A976-05ED142C7806}] - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\

FF Extension: Unlimited Data Manager - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\ []
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com

CHR RestoreOnStartup: "hxxp://www.google.com"

CHR Extension: (YTBBookMark) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\amabcieebhjofcnbdphdmfkfcdgfilgk [2014-01-04]

CHR Extension: (YouTube) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-02-25]

CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij [2014-01-04]

CHR Extension: (Google Search) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-02-25]

CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpicgdnjfnbkibnicdnnpkkpklkjkki [2013-04-12]

CHR Extension: (Speedy Shopper) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ganlifbpkcplnldliibcbegplfmcfigp [2014-01-04]

CHR Extension: (SNT) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcgmnfaeohlofnjigiimjlbjleaomlei [2014-01-04]

CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcjmphdcljedddkheginnckbjccchepe [2014-05-16]

CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba [2014-01-04]

CHR Extension: (Norton Identity Protection) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2012-02-25]

CHR Extension: (Gmail) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-02-25]

CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-01-15]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [478056 2011-08-31] (Lenovo.)

R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)

R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2513752 2014-03-04] ()

R2 SesamService; C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe [1482240 2011-05-16] (Swisscom)

R2 SwiCardDetectSvc; C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe [307568 2010-09-22] (Sierra Wireless, Inc.)

R2 UDM Service; C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe [182128 2011-05-20] (Swisscom)

R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [82544 2011-06-30] (Symantec Corporation)
 

==================== Drivers (Whitelisted) ====================
 

S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-25] (Samsung Electronics Co., Ltd.)

S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2011-02-18] (Huawei Technologies Co., Ltd.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-18] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)

R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [301512 2014-03-04] (NVIDIA Corporation)

R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13840 2009-03-13] (UPEK Inc.)

R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [41536 2009-09-24] (Lenovo (United States) Inc.)

R3 WtSmpAdap; C:\Windows\System32\DRIVERS\wtsmpadap.sys [56688 2011-04-11] (Swisscom)

R1 WtSmpFlt; C:\Windows\System32\DRIVERS\wtsmpflt.sys [409456 2011-04-11] (Swisscom)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 vpnva; system32\DRIVERS\vpnva64.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-05-18 21:17 - 2014-05-18 21:17 - 00001065 _____ () C:\Users\Sabrina\Desktop\JRT.txt

2014-05-18 20:44 - 2014-05-18 20:44 - 01016261 _____ (Thisisu) C:\Users\Sabrina\Downloads\JRT(2).exe

2014-05-18 20:17 - 2014-05-18 20:40 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-18 20:17 - 2014-05-18 20:17 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-05-18 20:17 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-05-18 20:17 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-05-18 20:17 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-05-18 20:16 - 2014-05-18 20:16 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Sabrina\Downloads\mbam-setup-2.0.1.1004.exe

2014-05-18 20:08 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-05-18 20:07 - 2014-05-18 20:07 - 01328723 _____ () C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe

2014-05-18 19:20 - 2014-05-18 21:34 - 00023140 _____ () C:\Users\Sabrina\Desktop\FRST.txt

2014-05-16 23:17 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-16 23:17 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-16 23:17 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-16 23:17 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-16 23:17 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-16 23:17 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-13 21:16 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-13 21:16 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-13 21:16 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-05-13 21:16 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-05-13 21:15 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-05-13 21:15 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-05-13 21:15 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-05-13 21:15 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-05-13 21:15 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2014-05-13 21:15 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2014-05-13 21:15 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2014-05-13 21:15 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-05-13 21:15 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-05-13 21:15 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-05-13 21:15 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2014-05-13 21:15 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-05-13 21:15 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2014-05-13 21:15 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2014-05-13 21:15 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-05-13 21:15 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-07 20:02 - 2014-05-07 20:03 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe

2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd

2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe

2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe

2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe

2014-05-05 07:40 - 2014-05-05 08:07 - 00000000 ____D () C:\Program Files (x86)\CrossFnt

2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe

2014-05-05 07:32 - 2014-05-05 07:32 - 00050473 ____R () C:\Users\Sabrina\Desktop\schriften.zipx

2014-05-04 22:15 - 2014-05-18 19:31 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit

2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense

2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe

2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2014-05-04 21:41 - 2014-05-13 00:13 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job

2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe

2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml

2014-05-04 21:34 - 2012-05-15 07:13 - 00144896 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll

2014-05-04 21:34 - 2012-05-15 06:20 - 00104448 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll

2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\SysWOW64\NV

2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\system32\NV

2014-05-04 21:28 - 2014-05-04 21:31 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe

2014-05-04 21:25 - 2014-03-04 20:35 - 02513752 _____ () C:\Windows\system32\nvwmi64.exe

2014-05-04 21:25 - 2014-03-04 20:35 - 00004084 _____ () C:\Windows\system32\nvPerfProvider.man

2014-05-04 21:25 - 2014-03-04 18:17 - 00595232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA

2014-05-04 21:23 - 2014-03-04 20:35 - 30389192 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 25257816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 22973896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 18312672 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 18225104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 15879264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 15232424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 12672288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-05-04 21:23 - 2014-03-04 20:35 - 11638736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 11587736 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 09731624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 09688888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 03131848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 03123544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 02936152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 02752856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 01883480 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433276.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433276.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 01249080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00888776 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00880984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00860104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00850888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00301512 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvkflt.sys

2014-05-04 21:23 - 2014-03-04 20:35 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00031576 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys

2014-05-04 21:18 - 2014-05-04 21:22 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe

2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf

2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)

2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)

2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)

2014-05-04 20:04 - 2014-05-04 20:05 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf

2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp

2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf

2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip

2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip

2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\WinZip

2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\Program Files\WinZip

2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi

2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx

2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter

2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor

2014-05-04 18:26 - 2014-05-04 21:08 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5

2014-05-04 18:26 - 2014-05-04 18:29 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI

2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe

2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe

2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files

2014-05-04 18:13 - 2014-05-04 18:14 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi

2014-05-04 18:08 - 2014-05-04 18:09 - 00000020 _____ () C:\Windows\ø÷Í

2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸

2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe

2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener

2014-05-04 17:02 - 2014-05-04 17:07 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe

2014-05-04 16:44 - 2014-05-17 00:24 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-04 16:44 - 2014-05-04 16:46 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe

2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster

2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe

2014-05-03 08:33 - 2012-09-18 15:27 - 00501760 _____ () C:\Windows\system32\ZSHP1020.EXE

2014-05-03 08:33 - 2012-09-18 15:27 - 00192512 _____ () C:\Windows\system32\ZLhp1020.DLL

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle

2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java

2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe

2014-04-22 03:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-04-22 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-04-22 03:00 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-04-22 03:00 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-04-22 03:00 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-04-22 03:00 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-04-22 03:00 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-04-22 03:00 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-04-22 03:00 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-04-22 03:00 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-04-22 03:00 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-04-22 03:00 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-04-22 03:00 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-04-22 03:00 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-04-22 03:00 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-04-22 03:00 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-04-22 03:00 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-04-22 03:00 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-04-22 03:00 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-04-22 03:00 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-04-22 03:00 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-04-22 03:00 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-04-22 03:00 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-04-22 03:00 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-04-22 03:00 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-04-22 03:00 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-04-22 03:00 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-04-22 03:00 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-04-22 03:00 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-04-22 03:00 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-04-22 03:00 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-04-22 03:00 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-04-22 03:00 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-04-22 03:00 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-04-22 03:00 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-04-22 03:00 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-04-22 03:00 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-04-22 03:00 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-04-22 03:00 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-04-22 03:00 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-04-22 03:00 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-04-22 03:00 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-04-22 03:00 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-04-22 03:00 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
 

==================== One Month Modified Files and Folders =======
 

2014-05-18 21:35 - 2012-02-13 09:42 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-05-18 21:34 - 2014-05-18 19:20 - 00023140 _____ () C:\Users\Sabrina\Desktop\FRST.txt

2014-05-18 21:34 - 2013-10-17 22:06 - 00000000 ____D () C:\FRST

2014-05-18 21:17 - 2014-05-18 21:17 - 00001065 _____ () C:\Users\Sabrina\Desktop\JRT.txt

2014-05-18 21:01 - 2012-04-06 14:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-05-18 20:48 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-05-18 20:48 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-05-18 20:45 - 2012-02-13 08:16 - 00705124 _____ () C:\Windows\system32\perfh007.dat

2014-05-18 20:45 - 2012-02-13 08:16 - 00151492 _____ () C:\Windows\system32\perfc007.dat

2014-05-18 20:45 - 2009-07-14 07:13 - 01629508 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-05-18 20:44 - 2014-05-18 20:44 - 01016261 _____ (Thisisu) C:\Users\Sabrina\Downloads\JRT(2).exe

2014-05-18 20:42 - 2012-04-03 22:35 - 00000000 ___RD () C:\Users\Sabrina\Dropbox

2014-05-18 20:42 - 2012-04-03 22:34 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Dropbox

2014-05-18 20:41 - 2012-02-13 09:42 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-05-18 20:40 - 2014-05-18 20:17 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-18 20:40 - 2014-01-04 19:04 - 00000464 ____H () C:\Windows\Tasks\GS.Enabler-S-926685765.job

2014-05-18 20:40 - 2012-02-13 09:01 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-05-18 20:40 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-05-18 20:40 - 2009-07-14 06:51 - 00117419 _____ () C:\Windows\setupact.log

2014-05-18 20:39 - 2012-02-13 08:46 - 01532887 _____ () C:\Windows\WindowsUpdate.log

2014-05-18 20:39 - 2010-11-21 05:47 - 00922862 _____ () C:\Windows\PFRO.log

2014-05-18 20:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Web

2014-05-18 20:17 - 2014-05-18 20:17 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-05-18 20:17 - 2013-10-21 14:04 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-05-18 20:16 - 2014-05-18 20:16 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Sabrina\Downloads\mbam-setup-2.0.1.1004.exe

2014-05-18 20:11 - 2012-02-25 18:46 - 00000466 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job

2014-05-18 20:10 - 2013-10-21 14:25 - 00000000 ____D () C:\AdwCleaner

2014-05-18 20:07 - 2014-05-18 20:07 - 01328723 _____ () C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe

2014-05-18 19:56 - 2012-02-25 18:46 - 00003506 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest

2014-05-18 19:56 - 2012-02-25 18:46 - 00003448 _____ () C:\Windows\System32\Tasks\PCDEventLauncher

2014-05-18 19:31 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit

2014-05-18 19:30 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\fc124d4af23c6577

2014-05-18 19:19 - 2014-01-31 18:47 - 02067456 _____ (Farbar) C:\Users\Sabrina\Desktop\FRST64.exe

2014-05-18 19:19 - 2014-01-31 18:47 - 00000000 ____D () C:\Users\Sabrina\Desktop\FRST-OlderVersion

2014-05-18 18:39 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\UDM

2014-05-17 08:06 - 2013-03-12 15:20 - 00000000 ___RD () C:\Users\Sabrina\Virtual Machines

2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-05-17 00:24 - 2014-05-04 16:44 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-17 00:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-05-16 23:17 - 2012-02-25 11:19 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-05-16 23:16 - 2013-08-02 03:00 - 00000000 ____D () C:\Windows\system32\MRT

2014-05-16 23:11 - 2012-08-29 07:47 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-05-16 23:11 - 2012-02-25 12:07 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Adobe

2014-05-16 23:04 - 2013-12-01 21:48 - 00001040 _____ () C:\Users\Sabrina\Desktop\Dropbox.lnk

2014-05-16 23:04 - 2013-12-01 21:47 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-05-14 21:01 - 2012-04-06 14:52 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-05-14 21:01 - 2012-04-06 14:52 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-05-14 21:01 - 2012-02-27 19:10 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-05-13 21:01 - 2012-02-25 11:40 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk

2014-05-13 00:13 - 2014-05-04 21:41 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job

2014-05-11 09:04 - 2012-05-22 17:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-05-11 01:34 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\WtDashboard

2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-10 15:18 - 2012-06-23 19:00 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Apple Computer

2014-05-10 00:23 - 2009-07-14 06:45 - 05256976 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-05-09 08:14 - 2014-05-13 21:16 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-09 08:11 - 2014-05-13 21:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-08 23:30 - 2012-02-13 09:42 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-05-08 23:30 - 2012-02-13 09:42 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-05-08 18:32 - 2012-03-01 12:27 - 00011311 _____ () C:\Users\Sabrina\AppData\Roaming\SmarThruOptions.xml

2014-05-07 20:03 - 2014-05-07 20:02 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe

2014-05-06 06:40 - 2014-05-16 23:17 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-06 06:17 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-06 05:25 - 2014-05-16 23:17 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-06 05:07 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-06 05:00 - 2014-05-16 23:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-06 04:10 - 2014-05-16 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-05 12:03 - 2012-02-25 18:47 - 00118016 _____ () C:\Users\Sabrina\AppData\Local\GDIPFONTCACHEV1.DAT

2014-05-05 11:59 - 2014-02-28 10:48 - 00000000 ____D () C:\Users\Sabrina\Documents\BVA

2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd

2014-05-05 08:07 - 2014-05-05 07:40 - 00000000 ____D () C:\Program Files (x86)\CrossFnt

2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe

2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe

2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe

2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe

2014-05-05 07:32 - 2014-05-05 07:32 - 00050473 ____R () C:\Users\Sabrina\Desktop\schriften.zipx

2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense

2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe

2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2014-05-04 21:45 - 2012-02-13 09:43 - 00000000 ____D () C:\Program Files (x86)\Windows Live

2014-05-04 21:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2014-05-04 21:43 - 2012-02-13 09:43 - 00204593 _____ () C:\Windows\DirectX.log

2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe

2014-05-04 21:41 - 2012-04-15 11:40 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Windows Live

2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml

2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\SysWOW64\NV

2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\system32\NV

2014-05-04 21:34 - 2012-02-13 08:54 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\ProgramData\Intel

2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\Program Files\Common Files\Intel

2014-05-04 21:31 - 2014-05-04 21:28 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe

2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA

2014-05-04 21:22 - 2014-05-04 21:18 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe

2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter

2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor

2014-05-04 21:08 - 2014-05-04 18:26 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5

2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf

2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)

2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)

2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)

2014-05-04 20:05 - 2014-05-04 20:04 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf

2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp

2014-05-04 19:46 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\InstallMate

2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf

2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip

2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip

2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\ProgramData\WinZip

2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\Program Files\WinZip

2014-05-04 19:21 - 2012-02-25 18:45 - 00000000 ____D () C:\Users\Sabrina

2014-05-04 19:21 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi

2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx

2014-05-04 18:29 - 2014-05-04 18:26 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI

2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe

2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe

2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files

2014-05-04 18:14 - 2014-05-04 18:13 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi

2014-05-04 18:09 - 2014-05-04 18:08 - 00000020 _____ () C:\Windows\ø÷Í

2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸

2014-05-04 17:49 - 2012-03-06 07:54 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\CrashDumps

2014-05-04 17:37 - 2010-11-21 09:16 - 00000000 ___RD () C:\Users\Public\Recorded TV

2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe

2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener

2014-05-04 17:07 - 2014-05-04 17:02 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe

2014-05-04 16:46 - 2014-05-04 16:44 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe

2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster

2014-05-04 16:38 - 2012-02-25 18:46 - 00000528 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job

2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle

2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java

2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe

2014-04-29 09:42 - 2012-02-25 18:46 - 00004246 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask

2014-04-22 03:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
 

Some content of TEMP:

====================

C:\Users\Sabrina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp40zz8g.dll

C:\Users\Sabrina\AppData\Local\Temp\IrsoDLL.dll

C:\Users\Sabrina\AppData\Local\Temp\nv3DVStreaming.dll

C:\Users\Sabrina\AppData\Local\Temp\nvSCPAPI.dll

C:\Users\Sabrina\AppData\Local\Temp\nvStereoApiI.dll

C:\Users\Sabrina\AppData\Local\Temp\nvStInst.exe

C:\Users\Sabrina\AppData\Local\Temp\Quarantine.exe

C:\Users\Sabrina\AppData\Local\Temp\Risweb32.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe

[2014-05-13 21:15] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C
 

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-05-10 17:39
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013

Ran by Sabrina at 2013-10-17 22:07:22

Running from C:\Users\Sabrina\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

 Update for Microsoft Office 2007 (KB2508958) (x32)

Adobe AIR (x32 Version: 3.7.0.1530)

Adobe Extension Manager CS6 (x32 Version: 6.0)

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)

Adobe Help Manager (x32 Version: 4.0.244)

Adobe InDesign CS5 (x32 Version: 7.0)

Adobe Media Player (x32 Version: 1.8)

Adobe Photoshop 7.0.1 (x32 Version: 7.0.1)

Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)

Apple Application Support (x32 Version: 2.3)

Apple Mobile Device Support (Version: 5.2.0.6)

Apple Software Update (x32 Version: 2.1.3.127)

Avira Free Antivirus (x32 Version: 12.1.9.2500)

Bonjour (Version: 3.0.0.10)

Broadcom InConcert Maestro (Version: 1.0.1.1500)

Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.0.08057)

Cisco AnyConnect Secure Mobility Client (x32 Version: 3.0.08057)

Cisco Systems VPN Client 5.0.07.0290 (Version: 5.0.7)

Citrix Authentication Manager (x32 Version: 4.0.0.53726)

Citrix Endpoint Analysis Plugin (x32 Version: 4.5.5.0)

Citrix Receiver (DV) (x32 Version: 13.4.0.25)

Citrix Receiver (HDX Flash-Umleitung) (x32 Version: 13.4.0.25)

Citrix Receiver (USB) (x32 Version: 13.4.0.25)

Citrix Receiver (x32 Version: 13.4.0.25)

Citrix Receiver Inside (x32 Version: 3.4.0.29585)

Citrix Receiver Updater (x32 Version: 3.4.0.29577)

Citrix Receiver(Aero) (x32 Version: 13.4.0.25)

Conexant 20672 SmartAudio HD (Version: 8.32.23.0)

Corel WinDVD (x32 Version: 10.0.5.828)

Create Recovery Media (x32 Version: 1.20.0.00)

D3DX10 (x32 Version: 15.4.2368.0902)

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)

Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7 (Version: 1.00)

EasyRotator Wizard (x32 Version: 1.0.123)

EasyTax 2012 AG 1.02 (x32 Version: 1.02)

Evernote v. 4.2.3 (x32 Version: 4.2.3.15)

Free Audio Converter version 5.0.15.706 (x32 Version: 5.0.15.706)

Free DVD Video Converter version 2.0.9.706 (x32 Version: 2.0.9.706)

Free Video to Flash Converter version 5.0.15.706 (x32 Version: 5.0.15.706)

Free YouTube Download version 3.1.42.1212 (x32 Version: 3.1.42.1212)

Free YouTube to MP3 Converter version 3.11.37.1212 (x32 Version: 3.11.37.1212)

Google Chrome (x32 Version: 30.0.1599.69)

Google Earth Plug-in (x32 Version: 7.1.1.1888)

Google Toolbar for Internet Explorer (x32 Version: 1.0.0)

Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54)

Google Update Helper (x32 Version: 1.3.21.165)

IB Updater Service (x32 Version: 4.0.7.4)

Integrated Camera Driver Installer Package Ver.1.1.0.1147 (x32 Version: 1.1.0.1147)

Integrated Camera TWAIN (x32 Version: 1.0.11.1223)

Intel PROSet Wireless

Intel PROSet Wireless (x32)

Intel(R) Control Center (x32 Version: 1.2.1.1007)

Intel(R) Identity Protection Technology 1.1.2.0 (x32 Version: 1.1.2.0)

Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)

Intel(R) Processor Graphics (x32 Version: 8.15.10.2321)

Intel(R) PROSet/Wireless WiFi Software (Version: 14.2.0000)

Internet Explorer Toolbar 4.6 by SweetPacks (x32 Version: 4.6.0003)

iTunes (Version: 10.6.3.25)

Kalender-Excel-8.8 (x32 Version: 8.8)

Lenovo Auto Scroll Utility (Version: 1.10)

Lenovo Patch Utility (x32 Version: 1.0.1.1)

Lenovo Patch Utility 64 bit (Version: 1.2.0.1)

Lenovo Registration (x32 Version: 1.0.4)

Lenovo SimpleTap (Version: 3.0.0010.00)

Lenovo System Interface Driver (Version: 1.05)

Lenovo ThinkVantage Toolbox (Version: 6.0.5849.23)

Lenovo User Guide (x32 Version: 1.0.0008.00)

Lenovo Warranty Information (x32 Version: 1.0.0005.00)

Lenovo Welcome (x32 Version: 3.00.006.0)

Macromedia Contribute 3 (x32 Version: 3.0.2.2326)

Macromedia Dreamweaver 8 (x32 Version: 8.0.0.2751)

Macromedia Extension Manager (x32 Version: 1.7.270)

Macromedia Fireworks 8 (x32 Version: 8.0.0.777)

Macromedia Flash 8 (x32 Version: 8.00.0000)

Macromedia Flash 8 Video Encoder (x32 Version: 1.00.0000)

Macromedia HomeSite+ (x32)

Message Center Plus (x32 Version: 2.0.0012.00)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Office 2007 Service Pack 3 (SP3) (x32)

Microsoft Office 2010 Service Pack 1 (SP1) (x32)

Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)

Microsoft Office Home and Student 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)

Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Outlook Connector (x32 Version: 14.0.5118.5000)

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Professional Plus 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)

Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)

Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft SkyDrive (HKCU Version: 16.4.6013.0910)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)

Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)

Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)

Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)

Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)

Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)

Mozilla Maintenance Service (x32 Version: 24.0)

MSVCRT (x32 Version: 15.4.2862.0708)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

Nur Entfernen der CopyTrans Suite möglich (HKCU Version: 2.36)

NVIDIA 3D Vision Treiber 306.97 (Version: 306.97)

NVIDIA Grafiktreiber 306.97 (Version: 306.97)

NVIDIA HD-Audiotreiber 1.2.23.3 (Version: 1.2.23.3)

NVIDIA Install Application (Version: 2.1002.85.551)

NVIDIA Optimus 1.10.8 (Version: 1.10.8)

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.0697)

NVIDIA Systemsteuerung 306.97 (Version: 306.97)

NVIDIA Update Components (Version: 1.10.8)

On Screen Display (Version: 6.50.00)

Online Plug-in (x32 Version: 13.4.0.25)

PDF Settings CS5 (x32 Version: 10.0)

PDFCreator (x32 Version: 1.2.3)

Picasa 3 (x32 Version: 3.9)

Private Tax 2011 1.4 (x32 Version: 1.4)

Programmer's Notepad (x32 Version: 2.3.4.2350)

ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14)

QuickTime (x32 Version: 7.73.80.64)

R for Windows 2.14.1 (Version: 2.14.1)

RapidBoot (Version: 1.11)

Readiris Pro 10 (x32)

Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (Version: 1.00)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0)

RICOH_Media_Driver_v2.14.18.01 (x32 Version: 2.14.18.01)

Samsung CLX-3170 Series (x32)

Secure Download Manager (x32 Version: 3.0.3)

Self-Service Plug-in (x32 Version: 3.4.0.33684)

SimilarWeb (x32 Version: 0.0.0.1)

SmarThru 4 (x32)

SmarThru PC Fax (x32)

SweetIM for Messenger 3.7 (x32 Version: 3.7.0005)

Swisscom Quick Help (x32 Version: 3.3.2.340)

System Update (x32 Version: 4.01.0015)

TDM-GCC (x32 Version: 1.1006.0)

ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 6.4.0.1500)

ThinkPad FullScreen Magnifier (Version: 2.40)

ThinkPad Modem Adapter (Version: 7.80.5.0)

ThinkPad Power Management Driver (Version: 1.61.00.11)

ThinkPad Power Manager (x32 Version: 3.63)

ThinkPad UltraNav Driver (Version: 15.3.8.0)

ThinkPad UltraNav Utility (x32 Version: 2.13.0)

ThinkVantage Active Protection System (Version: 1.73)

ThinkVantage AutoLock (Version: 1.03)

ThinkVantage Communications Utility (Version: 2.07)

ThinkVantage Fingerprint Software (Version: 5.9.4.6882)

Tinn-R 2.3.7.1 (x32)

TopStyle Lite (Version 3.0) (x32 Version: 3.1.0)

Unlimited Data Manager 10.0.0 (x32 Version: 10.0.21168.0)

Update for 2007 Microsoft Office System (KB967642) (x32)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2494150) (x32)

Update for Microsoft Office 2010 (KB2553065) (x32)

Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2566458) (x32)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2827325) 32-Bit Edition (x32)

Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)

Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)

Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)

Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)

Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)

Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)

Update für Microsoft Office Excel 2007 Help (KB963678) (x32)

Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)

Update für Microsoft Office Word 2007 Help (KB963665) (x32)

Update Manager for SweetPacks 1.0 (x32 Version: 1.0.0005)

VIP Access (x32 Version: 2.0.2.140)

VLC media player 2.0.2 (x32 Version: 2.0.2)

Wajam (x32 Version: 1.76)

Windows Driver Package - Intel (e1cexpress) Net  (12/21/2010 11.8.84.0) (Version: 12/21/2010 11.8.84.0)

Windows Driver Package - Intel System  (09/10/2010 9.2.0.1011) (Version: 09/10/2010 9.2.0.1011)

Windows Driver Package - Intel System  (11/20/2010 9.2.0.1016) (Version: 11/20/2010 9.2.0.1016)

Windows Driver Package - Intel USB  (12/21/2010 9.2.0.1021) (Version: 12/21/2010 9.2.0.1021)

Windows Driver Package - Lenovo 1.61.00.11 (11/11/2010 1.61.00.11) (Version: 11/11/2010 1.61.00.11)

Windows Driver Package - Synaptics (SynTP) Mouse  (05/19/2011 15.3.8.0) (Version: 05/19/2011 15.3.8.0)

Windows Live Communications Platform (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3555.0308)

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)

Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)

Windows Live Installer (x32 Version: 15.4.3502.0922)

Windows Live Language Selector (Version: 15.4.3555.0308)

Windows Live Movie Maker (x32 Version: 15.4.3502.0922)

Windows Live Photo Common (x32 Version: 15.4.3502.0922)

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)

Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)

Windows Live SOXE (x32 Version: 15.4.3502.0922)

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)

Windows Live UX Platform (x32 Version: 15.4.3502.0922)

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)

Windows XP Mode (Version: 1.3.7600.16422)

WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0)

WinVPP 1.3.4 (x32 Version: 1.3.4)

Wondershare Vivideo(Build 2.0.0.12) (x32)
 

==================== Restore Points  =========================
 

15-09-2013 08:24:19 Geplanter Prüfpunkt

15-09-2013 09:45:46 Windows Update

22-09-2013 18:37:41 Geplanter Prüfpunkt

24-09-2013 01:00:27 Windows Update

03-10-2013 09:32:13 Macromedia Dreamweaver 8 wird entfernt

03-10-2013 09:41:15 Macromedia Dreamweaver 8 wird installiert

03-10-2013 10:01:21 Macromedia Dreamweaver 8 wird entfernt

03-10-2013 10:10:13 Macromedia Dreamweaver 8 wird installiert

12-10-2013 01:00:50 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0BC77D44-74FA-455A-B587-E73CE62C5990} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-13] (Google Inc.)

Task: {11EF87FA-F5C4-4F01-89D7-E8ECB43B7D7C} - System32\Tasks\MCP => C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-28] ()

Task: {3BE08FEC-0FC8-441D-939E-C609A500E540} - System32\Tasks\AdobeAAMUpdater-1.0-Sabrina-THINK-Sabrina => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)

Task: {3D74BFA3-1C0A-4739-B737-FCDF6999E8B4} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2011-12-21] (Lenovo)

Task: {73978FBE-6EAD-4932-8803-2008ACAD057D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated)

Task: {7629E501-D646-44BF-8DF0-85E237916E4B} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)

Task: {7EBBFFA8-F9C9-4534-8D6D-8A9AC2815D03} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {94B59A78-1266-4B6B-983C-AA7837A977BC} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)

Task: {957D2B91-634E-4D2B-9EE4-85AE74F41DFC} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.)

Task: {C32FF76B-6D11-4288-8203-8954890ED5EB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {DBC194AD-8A8E-4AAA-BFE4-C43BFCEBA7C5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-13] (Google Inc.)

Task: {EF259D21-F761-4E73-8FA3-F6DDC6A2B365} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PWMIDTSV.EXE [2011-08-31] (Lenovo Group Limited)

Task: {F2E147F1-A5C9-45E3-B2D9-9940C0B51F8D} - System32\Tasks\Lenovo\SimpleTap\Start SimpleTap for Sabrina-THINK.Sabrina => C:\Program Files\Lenovo\SimpleTap\SimpleTap.exe [2011-12-21] (Lenovo)

Task: {F3B604C6-B7CE-4E96-B52F-0B4A5F5B3B23} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe

Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe
 

==================== Loaded Modules (whitelisted) =============
 
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 

Name: Cisco Systems VPN Adapter for 64-bit Windows

Description: Cisco Systems VPN Adapter for 64-bit Windows

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Cisco Systems

Service: CVirtA

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Cisco Systems

Service: vpnva

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (10/17/2013 09:24:14 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: svchost.exe_WbioSrvc, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1677

Ausnahmecode: 0x80004004

Fehleroffset: 0x000000000000940d

ID des fehlerhaften Prozesses: 0x7f4

Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_WbioSrvc0

Pfad der fehlerhaften Anwendung: svchost.exe_WbioSrvc1

Pfad des fehlerhaften Moduls: svchost.exe_WbioSrvc2

Berichtskennung: svchost.exe_WbioSrvc3
 

Error: (10/17/2013 09:20:29 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (10/17/2013 08:56:59 PM) (Source: PC-Doctor) (User: )

Description: (15072) Asapi: (20:56:59:3020)(15072) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12007) failed with error: 317
 

Error: (10/17/2013 08:56:59 PM) (Source: PC-Doctor) (User: )

Description: (15072) Asapi: (20:56:59:2710)(15072) libTonopahClient.DownloadManager - Error -- 135 HttpException : Http send request failed: getSystemErrormsg: FormatMessage(12007) failed with error: 317
 

Error: (10/15/2013 06:25:55 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 2028
 

Error: (10/15/2013 06:25:55 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 2028
 

Error: (10/15/2013 06:25:55 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (10/15/2013 06:25:54 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 1030
 

Error: (10/15/2013 06:25:54 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 1030
 

Error: (10/15/2013 06:25:54 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 
 

System errors:

=============

Error: (10/17/2013 09:24:19 PM) (Source: Service Control Manager) (User: )

Description: Dienst "Windows-Biometriedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (10/17/2013 09:24:18 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (10/17/2013 09:24:18 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (10/17/2013 09:24:10 PM) (Source: iaStor) (User: )

Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
 

Error: (10/17/2013 09:24:01 PM) (Source: BROWSER) (User: )

Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{E089CE53-2835-477B-AD7E-785AC58EF460}" zu oft fehl.

Der Sicherungssuchdienst wird beendet.
 

Error: (10/17/2013 09:23:58 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.
 

Error: (10/17/2013 09:20:09 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%20
 

Error: (10/17/2013 09:09:53 PM) (Source: iaStor) (User: )

Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
 

Error: (10/17/2013 09:03:35 PM) (Source: BROWSER) (User: )

Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{E089CE53-2835-477B-AD7E-785AC58EF460}" zu oft fehl.

Der Sicherungssuchdienst wird beendet.
 

Error: (10/16/2013 09:11:05 PM) (Source: BROWSER) (User: )

Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{E089CE53-2835-477B-AD7E-785AC58EF460}" zu oft fehl.

Der Sicherungssuchdienst wird beendet.
 
 

Microsoft Office Sessions:

=========================

Error: (07/22/2013 01:47:56 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 52 seconds with 0 seconds of active time.  This session ended with a crash.

Wo ist das Malwarebytes Log?

http://filepony.de/icon/malwarebytes_anti_malware.pngMBAM-Funde posten: So gehts...
Manchmal ist es wichtig zu wissen, welche Schadprogramme im Vorfeld ohne Anweisung der Helfer schon gelöscht wurden.
Daher benötige ich den Inhalt der Logdatei, in welcher der Suchlauf protokolliert wurde.

Starte MBAM.
Klicke auf Verlauf.
Klicke auf Anwendungsprotokolle.
Klicke auf das letzte Suchlaufprotokoll mit Funden.
Klicke auf "In Zwischenablage kopieren".
Poste den Inhalt in Code-Tags [CODE] [/CODE] durch Einfügen mit Strg+V als Antwort in Deinen Thread.

http://deeprybka.trojaner-board.de/b...mbamposten.gif

Code:

Malwarebytes Anti-Malware 2.0.1.1004
 

Improvements:

•   Database is now updated automatically after installation

•   Notifications are no longer displayed if the Dashboard is in focus to reduce redundant information

•   Significantly reduced the size of all tray notifications

•   Reduced the intensity of the colors used for tray notifications and status banners in the Dashboard

•   Database out of date and scan has never been run notifications now reduced in severity to orange instead of red
 

Issues Fixed:

•   All scheduled scans should now run without popping up the main UI so that users are not interrupted

Das ist das falsche Log. Siehe Post #6, da ist ne Anleitung, wie man ein MBAM Log postet.

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 18.05.2014

Suchlauf-Zeit: 20:39:06

Logdatei: 

Administrator: Ja
 

Version: 2.00.1.1004

Malware Datenbank: v2014.03.04.09

Rootkit Datenbank: v2014.02.20.01

Lizenz: Testversion

Malware Schutz: Aktiviert

Bösartiger Webseiten Schutz: Aktiviert

Chameleon: Deaktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x64

Dateisystem: NTFS

Benutzer: Sabrina
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 314237

Verstrichene Zeit: 20 Min, 37 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Shuriken: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(No malicious items detected)
 

Module: 0

(No malicious items detected)
 

Registrierungsschlüssel: 1

PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT, In Quarantäne, [b990d9268cee0531747e169bbb485ea2], 
 

Registrierungswerte: 1

PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT|URL, MYSTART, In Quarantäne, [b990d9268cee0531747e169bbb485ea2]
 

Registrierungsdaten: 0

(No malicious items detected)
 

Ordner: 0

(No malicious items detected)
 

Dateien: 1

PUP.Optional.Babylon.A, C:\Users\Sabrina\Downloads\Unlocker1.9.2.exe, In Quarantäne, [1f2ae01fb2c82e0832ab460129d820e0], 
 

Physische Sektoren: 0

(No malicious items detected)
 
 

(end)

Hey,

Schritt 1: FRST Fix

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: YoutubeAdblocker - {159BC49F-2CD6-4CB7-932B-1027665E58BD} - C:\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll No File

BHO: greaotssaVer - {4F72390C-3192-91EF-ECD9-D90061D298A2} - C:\Program Files (x86)\greaotssaVer\2ZKW9c.x64.dll No File

BHO: SNT - {847493A0-9B57-E1D5-FE2C-CC1B12BC46CB} - C:\Program Files (x86)\SNT\p7T2DTlA.x64.dll No File

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

2014-05-07 20:02 - 2014-05-07 20:03 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe

2014-05-18 19:30 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\fc124d4af23c6577

C:\Users\Sabrina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp40zz8g.dll

C:\Users\Sabrina\AppData\Local\Temp\IrsoDLL.dll

C:\Users\Sabrina\AppData\Local\Temp\nv3DVStreaming.dll

C:\Users\Sabrina\AppData\Local\Temp\nvSCPAPI.dll

C:\Users\Sabrina\AppData\Local\Temp\nvStereoApiI.dll

C:\Users\Sabrina\AppData\Local\Temp\nvStInst.exe

C:\Users\Sabrina\AppData\Local\Temp\Quarantine.exe

C:\Users\Sabrina\AppData\Local\Temp\Risweb32.exe

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2: FRST Scan

http://filepony.de/icon/frst.png http://deeprybka.trojaner-board.de/b...t/frstscan.png

Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

Schritt 3: TFC

Lade dir

TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

Öffne die TFC.exe.
Vista und Win 7 User mit Rechtsklick "als Administrator starten".
Schließe alle anderen Programme.
Drücke auf den Button Start.
Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Schritt 4: ESET

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 5: Frage

Wie läuft Dein System?

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-05-2014

Ran by Sabrina at 2014-05-18 22:13:24 Run:2

Running from C:\Users\Sabrina\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 18.05.2014

Suchlauf-Zeit: 20:39:06

Logdatei: 

Administrator: Ja
 

Version: 2.00.1.1004

Malware Datenbank: v2014.03.04.09

Rootkit Datenbank: v2014.02.20.01

Lizenz: Testversion

Malware Schutz: Aktiviert

Bösartiger Webseiten Schutz: Aktiviert

Chameleon: Deaktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x64

Dateisystem: NTFS

Benutzer: Sabrina
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 314237

Verstrichene Zeit: 20 Min, 37 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Shuriken: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(No malicious items detected)
 

Module: 0

(No malicious items detected)
 

Registrierungsschlüssel: 1

PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT, In Quarantäne, [b990d9268cee0531747e169bbb485ea2], 
 

Registrierungswerte: 1

PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT|URL, MYSTART, In Quarantäne, [b990d9268cee0531747e169bbb485ea2]
 

Registrierungsdaten: 0

(No malicious items detected)
 

Ordner: 0

(No malicious items detected)
 

Dateien: 1

PUP.Optional.Babylon.A, C:\Users\Sabrina\Downloads\Unlocker1.9.2.exe, In Quarantäne, [1f2ae01fb2c82e0832ab460129d820e0], 
 

Physische Sektoren: 0

(No malicious items detected)
 
 

(end)

*****************
 
 

==== End of Fixlog ====

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014

Ran by Sabrina (administrator) on SABRINA-THINK on 18-05-2014 22:14:05

Running from C:\Users\Sabrina\Desktop

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

() C:\Windows\System32\nvwmi64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe

(UPEK Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe

(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe

(Swisscom) C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe

(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe

(Swisscom) C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

() C:\Windows\System32\nvwmi64.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\ZOOM\TpScrex.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Lenovo.) C:\Windows\System32\TpShocks.exe

() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

(Avanquest Software ) C:\Program Files (x86)\Digital Line Detect\DLG.exe

(Dropbox, Inc.) C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

() C:\Windows\Samsung\PanelMgr\SSMMgr.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Swisscom) C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe

(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Windows\Samsung\PanelMgr\caller64.exe

(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\System Update\SUService.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe

() C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2789160 2011-05-19] (Synaptics Incorporated)

HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [380776 2010-12-09] (Lenovo.)

HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2011-03-14] (Conexant systems, Inc.)

HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [40808 2011-05-31] (Lenovo Group Limited)

HKLM\...\Run: [ALCKRESI.EXE] => C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE [281960 2011-05-26] (Lenovo Group Limited)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-31] (Ricoh co.,Ltd.)

HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [112152 2011-01-17] (Intel Corporation)

HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor

HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-14] (Lenovo, Inc.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Samsung PanelMgr] => C:\Windows\Samsung\PanelMgr\ssmmgr.exe [606208 2009-10-13] ()

HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)

HKLM-x32\...\Run: [Swisscom Quick Help] => C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe [16668080 2013-10-02] (Swisscom)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (UPEK Inc.)

HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [LTT] => C:\Program Files\PC-Doctor\EnableToolbarW32.exe [23120 2011-06-27] (PC-Doctor, Inc.)

HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [AppSafe] => C:\Program Files (x86)\AppSafe\AppSafe.exe

AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)

AppInit_DLLs: , C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)

AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)

AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)

Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk

ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk

ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files (x86)\Digital Line Detect\DLG.exe (Avanquest Software )

Startup: C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: proxy.lfrz.at:8080

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad

URLSearchHook: HKLM-x32 - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}

URLSearchHook: HKCU - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_deCH472

BHO: YoutubeAdblocker - {159BC49F-2CD6-4CB7-932B-1027665E58BD} - C:\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll No File

BHO: greaotssaVer - {4F72390C-3192-91EF-ECD9-D90061D298A2} - C:\Program Files (x86)\greaotssaVer\2ZKW9c.x64.dll No File

BHO: SNT - {847493A0-9B57-E1D5-FE2C-CC1B12BC46CB} - C:\Program Files (x86)\SNT\p7T2DTlA.x64.dll No File

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{D5A2C57D-7554-4054-AE53-57D7A4D0B831}: [NameServer]195.186.216.33 195.186.152.33
 

FireFox:

========

FF ProfilePath: C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default

FF Homepage: https://www.google.ch/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Swisscom Quick Help - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\{6A6114A5-EEF5-45F4-BCD1-B00A7B33E04B} [2014-01-13]

FF Extension: Firebug - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\firebug@software.joehewitt.com.xpi [2013-02-17]

FF HKLM-x32\...\Firefox\Extensions: [VIP@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client\

FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\ []

FF HKLM-x32\...\Firefox\Extensions: [{E4D8AFFF-DA7C-412F-A976-05ED142C7806}] - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\

FF Extension: Unlimited Data Manager - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\ []
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com

CHR RestoreOnStartup: "hxxp://www.google.com"

CHR Extension: (YTBBookMark) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\amabcieebhjofcnbdphdmfkfcdgfilgk [2014-01-04]

CHR Extension: (YouTube) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-02-25]

CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij [2014-01-04]

CHR Extension: (Google Search) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-02-25]

CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpicgdnjfnbkibnicdnnpkkpklkjkki [2013-04-12]

CHR Extension: (Speedy Shopper) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ganlifbpkcplnldliibcbegplfmcfigp [2014-01-04]

CHR Extension: (SNT) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcgmnfaeohlofnjigiimjlbjleaomlei [2014-01-04]

CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcjmphdcljedddkheginnckbjccchepe [2014-05-16]

CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba [2014-01-04]

CHR Extension: (Norton Identity Protection) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2012-02-25]

CHR Extension: (Gmail) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-02-25]

CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-01-15]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [478056 2011-08-31] (Lenovo.)

R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)

R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2513752 2014-03-04] ()

R2 SesamService; C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe [1482240 2011-05-16] (Swisscom)

R2 SwiCardDetectSvc; C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe [307568 2010-09-22] (Sierra Wireless, Inc.)

R2 UDM Service; C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe [182128 2011-05-20] (Swisscom)

R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [82544 2011-06-30] (Symantec Corporation)
 

==================== Drivers (Whitelisted) ====================
 

S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-25] (Samsung Electronics Co., Ltd.)

S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2011-02-18] (Huawei Technologies Co., Ltd.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-18] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)

R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [301512 2014-03-04] (NVIDIA Corporation)

R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13840 2009-03-13] (UPEK Inc.)

R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [41536 2009-09-24] (Lenovo (United States) Inc.)

R3 WtSmpAdap; C:\Windows\System32\DRIVERS\wtsmpadap.sys [56688 2011-04-11] (Swisscom)

R1 WtSmpFlt; C:\Windows\System32\DRIVERS\wtsmpflt.sys [409456 2011-04-11] (Swisscom)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 vpnva; system32\DRIVERS\vpnva64.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-05-18 22:14 - 2014-05-18 22:14 - 00448512 _____ (OldTimer Tools) C:\Users\Sabrina\Downloads\TFC.exe

2014-05-18 21:17 - 2014-05-18 21:17 - 00001065 _____ () C:\Users\Sabrina\Desktop\JRT.txt

2014-05-18 20:44 - 2014-05-18 20:44 - 01016261 _____ (Thisisu) C:\Users\Sabrina\Downloads\JRT(2).exe

2014-05-18 20:17 - 2014-05-18 20:40 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-18 20:17 - 2014-05-18 20:17 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-05-18 20:17 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-05-18 20:17 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-05-18 20:17 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-05-18 20:16 - 2014-05-18 20:16 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Sabrina\Downloads\mbam-setup-2.0.1.1004.exe

2014-05-18 20:08 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-05-18 20:07 - 2014-05-18 20:07 - 01328723 _____ () C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe

2014-05-18 19:20 - 2014-05-18 22:14 - 00023140 _____ () C:\Users\Sabrina\Desktop\FRST.txt

2014-05-16 23:17 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-16 23:17 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-16 23:17 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-16 23:17 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-16 23:17 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-16 23:17 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-13 21:16 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-13 21:16 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-13 21:16 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-05-13 21:16 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-05-13 21:15 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-05-13 21:15 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-05-13 21:15 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-05-13 21:15 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-05-13 21:15 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2014-05-13 21:15 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2014-05-13 21:15 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2014-05-13 21:15 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-05-13 21:15 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-05-13 21:15 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-05-13 21:15 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2014-05-13 21:15 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-05-13 21:15 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2014-05-13 21:15 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2014-05-13 21:15 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-05-13 21:15 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-07 20:02 - 2014-05-07 20:03 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe

2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd

2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe

2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe

2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe

2014-05-05 07:40 - 2014-05-05 08:07 - 00000000 ____D () C:\Program Files (x86)\CrossFnt

2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe

2014-05-05 07:32 - 2014-05-05 07:32 - 00050473 ____R () C:\Users\Sabrina\Desktop\schriften.zipx

2014-05-04 22:15 - 2014-05-18 19:31 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit

2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense

2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe

2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2014-05-04 21:41 - 2014-05-13 00:13 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job

2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe

2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml

2014-05-04 21:34 - 2012-05-15 07:13 - 00144896 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll

2014-05-04 21:34 - 2012-05-15 06:20 - 00104448 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll

2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\SysWOW64\NV

2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\system32\NV

2014-05-04 21:28 - 2014-05-04 21:31 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe

2014-05-04 21:25 - 2014-03-04 20:35 - 02513752 _____ () C:\Windows\system32\nvwmi64.exe

2014-05-04 21:25 - 2014-03-04 20:35 - 00004084 _____ () C:\Windows\system32\nvPerfProvider.man

2014-05-04 21:25 - 2014-03-04 18:17 - 00595232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA

2014-05-04 21:23 - 2014-03-04 20:35 - 30389192 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 25257816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 22973896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 18312672 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 18225104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 15879264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 15232424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 12672288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-05-04 21:23 - 2014-03-04 20:35 - 11638736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 11587736 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 09731624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 09688888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 03131848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 03123544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 02936152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 02752856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 01883480 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433276.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433276.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 01249080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00888776 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00880984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00860104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00850888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00301512 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvkflt.sys

2014-05-04 21:23 - 2014-03-04 20:35 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00031576 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys

2014-05-04 21:18 - 2014-05-04 21:22 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe

2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf

2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)

2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)

2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)

2014-05-04 20:04 - 2014-05-04 20:05 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf

2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp

2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf

2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip

2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip

2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\WinZip

2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\Program Files\WinZip

2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi

2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx

2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter

2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor

2014-05-04 18:26 - 2014-05-04 21:08 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5

2014-05-04 18:26 - 2014-05-04 18:29 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI

2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe

2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe

2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files

2014-05-04 18:13 - 2014-05-04 18:14 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi

2014-05-04 18:08 - 2014-05-04 18:09 - 00000020 _____ () C:\Windows\ø÷Í

2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸

2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe

2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener

2014-05-04 17:02 - 2014-05-04 17:07 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe

2014-05-04 16:44 - 2014-05-17 00:24 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-04 16:44 - 2014-05-04 16:46 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe

2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster

2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe

2014-05-03 08:33 - 2012-09-18 15:27 - 00501760 _____ () C:\Windows\system32\ZSHP1020.EXE

2014-05-03 08:33 - 2012-09-18 15:27 - 00192512 _____ () C:\Windows\system32\ZLhp1020.DLL

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle

2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java

2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe

2014-04-22 03:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-04-22 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-04-22 03:00 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-04-22 03:00 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-04-22 03:00 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-04-22 03:00 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-04-22 03:00 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-04-22 03:00 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-04-22 03:00 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-04-22 03:00 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-04-22 03:00 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-04-22 03:00 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-04-22 03:00 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-04-22 03:00 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-04-22 03:00 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-04-22 03:00 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-04-22 03:00 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-04-22 03:00 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-04-22 03:00 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-04-22 03:00 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-04-22 03:00 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-04-22 03:00 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-04-22 03:00 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-04-22 03:00 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-04-22 03:00 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-04-22 03:00 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-04-22 03:00 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-04-22 03:00 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-04-22 03:00 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-04-22 03:00 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-04-22 03:00 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-04-22 03:00 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-04-22 03:00 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-04-22 03:00 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-04-22 03:00 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-04-22 03:00 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-04-22 03:00 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-04-22 03:00 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-04-22 03:00 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-04-22 03:00 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-04-22 03:00 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-04-22 03:00 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-04-22 03:00 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-04-22 03:00 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
 

==================== One Month Modified Files and Folders =======
 

2014-05-18 22:14 - 2014-05-18 22:14 - 00448512 _____ (OldTimer Tools) C:\Users\Sabrina\Downloads\TFC.exe

2014-05-18 22:14 - 2014-05-18 19:20 - 00023140 _____ () C:\Users\Sabrina\Desktop\FRST.txt

2014-05-18 22:14 - 2013-10-17 22:06 - 00000000 ____D () C:\FRST

2014-05-18 22:01 - 2012-04-06 14:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-05-18 21:35 - 2012-02-13 09:42 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-05-18 21:17 - 2014-05-18 21:17 - 00001065 _____ () C:\Users\Sabrina\Desktop\JRT.txt

2014-05-18 20:48 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-05-18 20:48 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-05-18 20:45 - 2012-02-13 08:16 - 00705124 _____ () C:\Windows\system32\perfh007.dat

2014-05-18 20:45 - 2012-02-13 08:16 - 00151492 _____ () C:\Windows\system32\perfc007.dat

2014-05-18 20:45 - 2009-07-14 07:13 - 01629508 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-05-18 20:44 - 2014-05-18 20:44 - 01016261 _____ (Thisisu) C:\Users\Sabrina\Downloads\JRT(2).exe

2014-05-18 20:44 - 2012-02-13 08:46 - 01532887 _____ () C:\Windows\WindowsUpdate.log

2014-05-18 20:42 - 2012-04-03 22:35 - 00000000 ___RD () C:\Users\Sabrina\Dropbox

2014-05-18 20:42 - 2012-04-03 22:34 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Dropbox

2014-05-18 20:41 - 2012-02-13 09:42 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-05-18 20:40 - 2014-05-18 20:17 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-18 20:40 - 2014-01-04 19:04 - 00000464 ____H () C:\Windows\Tasks\GS.Enabler-S-926685765.job

2014-05-18 20:40 - 2012-02-13 09:01 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-05-18 20:40 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-05-18 20:40 - 2009-07-14 06:51 - 00117419 _____ () C:\Windows\setupact.log

2014-05-18 20:39 - 2010-11-21 05:47 - 00922862 _____ () C:\Windows\PFRO.log

2014-05-18 20:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Web

2014-05-18 20:17 - 2014-05-18 20:17 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-05-18 20:17 - 2013-10-21 14:04 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-05-18 20:16 - 2014-05-18 20:16 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Sabrina\Downloads\mbam-setup-2.0.1.1004.exe

2014-05-18 20:11 - 2012-02-25 18:46 - 00000466 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job

2014-05-18 20:10 - 2013-10-21 14:25 - 00000000 ____D () C:\AdwCleaner

2014-05-18 20:07 - 2014-05-18 20:07 - 01328723 _____ () C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe

2014-05-18 19:56 - 2012-02-25 18:46 - 00003506 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest

2014-05-18 19:56 - 2012-02-25 18:46 - 00003448 _____ () C:\Windows\System32\Tasks\PCDEventLauncher

2014-05-18 19:31 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit

2014-05-18 19:30 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\fc124d4af23c6577

2014-05-18 19:19 - 2014-01-31 18:47 - 02067456 _____ (Farbar) C:\Users\Sabrina\Desktop\FRST64.exe

2014-05-18 19:19 - 2014-01-31 18:47 - 00000000 ____D () C:\Users\Sabrina\Desktop\FRST-OlderVersion

2014-05-18 18:39 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\UDM

2014-05-17 08:06 - 2013-03-12 15:20 - 00000000 ___RD () C:\Users\Sabrina\Virtual Machines

2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-05-17 00:24 - 2014-05-04 16:44 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-17 00:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-05-16 23:17 - 2012-02-25 11:19 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-05-16 23:16 - 2013-08-02 03:00 - 00000000 ____D () C:\Windows\system32\MRT

2014-05-16 23:11 - 2012-08-29 07:47 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-05-16 23:11 - 2012-02-25 12:07 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Adobe

2014-05-16 23:04 - 2013-12-01 21:48 - 00001040 _____ () C:\Users\Sabrina\Desktop\Dropbox.lnk

2014-05-16 23:04 - 2013-12-01 21:47 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-05-14 21:01 - 2012-04-06 14:52 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-05-14 21:01 - 2012-04-06 14:52 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-05-14 21:01 - 2012-02-27 19:10 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-05-13 21:01 - 2012-02-25 11:40 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk

2014-05-13 00:13 - 2014-05-04 21:41 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job

2014-05-11 09:04 - 2012-05-22 17:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-05-11 01:34 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\WtDashboard

2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-10 15:18 - 2012-06-23 19:00 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Apple Computer

2014-05-10 00:23 - 2009-07-14 06:45 - 05256976 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-05-09 08:14 - 2014-05-13 21:16 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-09 08:11 - 2014-05-13 21:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-08 23:30 - 2012-02-13 09:42 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-05-08 23:30 - 2012-02-13 09:42 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-05-08 18:32 - 2012-03-01 12:27 - 00011311 _____ () C:\Users\Sabrina\AppData\Roaming\SmarThruOptions.xml

2014-05-07 20:03 - 2014-05-07 20:02 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe

2014-05-06 06:40 - 2014-05-16 23:17 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-06 06:17 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-06 05:25 - 2014-05-16 23:17 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-06 05:07 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-06 05:00 - 2014-05-16 23:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-06 04:10 - 2014-05-16 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-05 12:03 - 2012-02-25 18:47 - 00118016 _____ () C:\Users\Sabrina\AppData\Local\GDIPFONTCACHEV1.DAT

2014-05-05 11:59 - 2014-02-28 10:48 - 00000000 ____D () C:\Users\Sabrina\Documents\BVA

2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd

2014-05-05 08:07 - 2014-05-05 07:40 - 00000000 ____D () C:\Program Files (x86)\CrossFnt

2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe

2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe

2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe

2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe

2014-05-05 07:32 - 2014-05-05 07:32 - 00050473 ____R () C:\Users\Sabrina\Desktop\schriften.zipx

2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense

2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe

2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2014-05-04 21:45 - 2012-02-13 09:43 - 00000000 ____D () C:\Program Files (x86)\Windows Live

2014-05-04 21:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2014-05-04 21:43 - 2012-02-13 09:43 - 00204593 _____ () C:\Windows\DirectX.log

2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe

2014-05-04 21:41 - 2012-04-15 11:40 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Windows Live

2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml

2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\SysWOW64\NV

2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\system32\NV

2014-05-04 21:34 - 2012-02-13 08:54 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\ProgramData\Intel

2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\Program Files\Common Files\Intel

2014-05-04 21:31 - 2014-05-04 21:28 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe

2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA

2014-05-04 21:22 - 2014-05-04 21:18 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe

2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter

2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor

2014-05-04 21:08 - 2014-05-04 18:26 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5

2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf

2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)

2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)

2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)

2014-05-04 20:05 - 2014-05-04 20:04 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf

2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp

2014-05-04 19:46 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\InstallMate

2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf

2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip

2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip

2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\ProgramData\WinZip

2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\Program Files\WinZip

2014-05-04 19:21 - 2012-02-25 18:45 - 00000000 ____D () C:\Users\Sabrina

2014-05-04 19:21 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi

2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx

2014-05-04 18:29 - 2014-05-04 18:26 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI

2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe

2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe

2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files

2014-05-04 18:14 - 2014-05-04 18:13 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi

2014-05-04 18:09 - 2014-05-04 18:08 - 00000020 _____ () C:\Windows\ø÷Í

2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸

2014-05-04 17:49 - 2012-03-06 07:54 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\CrashDumps

2014-05-04 17:37 - 2010-11-21 09:16 - 00000000 ___RD () C:\Users\Public\Recorded TV

2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe

2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener

2014-05-04 17:07 - 2014-05-04 17:02 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe

2014-05-04 16:46 - 2014-05-04 16:44 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe

2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster

2014-05-04 16:38 - 2012-02-25 18:46 - 00000528 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job

2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle

2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java

2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe

2014-04-29 09:42 - 2012-02-25 18:46 - 00004246 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask

2014-04-22 03:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
 

Some content of TEMP:

====================

C:\Users\Sabrina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp40zz8g.dll

C:\Users\Sabrina\AppData\Local\Temp\IrsoDLL.dll

C:\Users\Sabrina\AppData\Local\Temp\nv3DVStreaming.dll

C:\Users\Sabrina\AppData\Local\Temp\nvSCPAPI.dll

C:\Users\Sabrina\AppData\Local\Temp\nvStereoApiI.dll

C:\Users\Sabrina\AppData\Local\Temp\nvStInst.exe

C:\Users\Sabrina\AppData\Local\Temp\Quarantine.exe

C:\Users\Sabrina\AppData\Local\Temp\Risweb32.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe

[2014-05-13 21:15] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C
 

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-05-10 17:39
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Warum mixt Du FRST Fixlog mit dem Malwarebytes Log?

Sorry, war der Meinung ich hab alles der Reihe nach gepostet.
Das ESET File folgt noch.
Herzlichen Dank für die Hilfe!

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=68b1296e4aba0d41a86cb19270476a99

# engine=16796

# end=stopped

# remove_checked=false

# archives_checked=false

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-01-25 03:26:34

# local_time=2014-01-25 04:26:34 (+0100, Mitteleuropäische Zeit)

# country="Switzerland"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=5893 16776573 100 94 24588 142293444 0 0

# scanned=138102

# found=6

# cleaned=0

# scan_time=4842

sh=147FA4281120C99BA14DC5D5951C1A2972BDE759 ft=1 fh=c71c0011c04eb408 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YoutubeAdblocker\_2iD.dll.vir"

sh=8E518927746CD24C92DFACD4EA709E7154F43D56 ft=1 fh=c71c00119c47ca32 vn="Variante von Win64/Adware.MultiPlug.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll.vir"

sh=13FFDBAB9F8DF78798EE14AB2640F21EB7DEAA67 ft=1 fh=c71c0011a169624a vn="Variante von Win32/AdWare.MultiPlug.K.gen Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\YoutubeAdblocker\FvjZh.exe.vir"

sh=147FA4281120C99BA14DC5D5951C1A2972BDE759 ft=1 fh=c71c0011c04eb408 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung" ac=I fn="C:\FRST\Quarantine\greaotssaVer\2ZKW9c.dll"

sh=8E518927746CD24C92DFACD4EA709E7154F43D56 ft=1 fh=c71c00119c47ca32 vn="Variante von Win64/Adware.MultiPlug.A Anwendung" ac=I fn="C:\FRST\Quarantine\greaotssaVer\2ZKW9c.x64.dll"

sh=7BC4998793462E1932A4F74E3A139DCDDA7653C6 ft=1 fh=19edba72960273eb vn="möglicherweise unbekannter Virus NewHeur_PE Virus" ac=I fn="C:\Program Files (x86)\Swisscom\Quick Help\m2mupdate.exe"

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=68b1296e4aba0d41a86cb19270476a99

# engine=16796

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-01-25 07:22:47

# local_time=2014-01-25 08:22:47 (+0100, Mitteleuropäische Zeit)

# country="Switzerland"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=5893 16776573 100 94 38761 142307617 0 0

# scanned=249809

# found=6

# cleaned=6

# scan_time=3520

sh=147FA4281120C99BA14DC5D5951C1A2972BDE759 ft=1 fh=c71c0011c04eb408 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YoutubeAdblocker\_2iD.dll.vir"

sh=8E518927746CD24C92DFACD4EA709E7154F43D56 ft=1 fh=c71c00119c47ca32 vn="Variante von Win64/Adware.MultiPlug.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll.vir"

sh=13FFDBAB9F8DF78798EE14AB2640F21EB7DEAA67 ft=1 fh=c71c0011a169624a vn="Variante von Win32/AdWare.MultiPlug.K.gen Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\YoutubeAdblocker\FvjZh.exe.vir"

sh=147FA4281120C99BA14DC5D5951C1A2972BDE759 ft=1 fh=c71c0011c04eb408 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\greaotssaVer\2ZKW9c.dll"

sh=8E518927746CD24C92DFACD4EA709E7154F43D56 ft=1 fh=c71c00119c47ca32 vn="Variante von Win64/Adware.MultiPlug.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\greaotssaVer\2ZKW9c.x64.dll"

sh=7BC4998793462E1932A4F74E3A139DCDDA7653C6 ft=1 fh=19edba72960273eb vn="möglicherweise unbekannter Virus NewHeur_PE Virus (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Program Files (x86)\Swisscom\Quick Help\m2mupdate.exe"

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=68b1296e4aba0d41a86cb19270476a99

# engine=18315

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-05-19 12:08:33

# local_time=2014-05-19 02:08:33 (+0100, Mitteleuropäische Sommerzeit)

# country="Switzerland"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=5893 16776573 100 94 13994 152087963 0 0

# scanned=248730

# found=1

# cleaned=0

# scan_time=13511

sh=70622B1220013C8A7EF9B55FA2C840B4D3CF5A8D ft=1 fh=c71c0011adaa876f vn="Variante von Win32/AdWare.MultiPlug.K.gen Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\CaheoapMee\NwfY2HOswh.exe.vir"

http://filepony.de/icon/frst.png http://deeprybka.trojaner-board.de/b...t/frstscan.png

Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014

Ran by Sabrina (administrator) on SABRINA-THINK on 19-05-2014 23:03:23

Running from C:\Users\Sabrina\Desktop

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

() C:\Windows\System32\nvwmi64.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe

(UPEK Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe

(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe

(Swisscom) C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe

(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe

(Swisscom) C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

() C:\Windows\System32\nvwmi64.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Lenovo.) C:\Windows\System32\TpShocks.exe

() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe

() C:\Windows\Samsung\PanelMgr\caller64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\System Update\SUService.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2789160 2011-05-19] (Synaptics Incorporated)

HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [380776 2010-12-09] (Lenovo.)

HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2011-03-14] (Conexant systems, Inc.)

HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [40808 2011-05-31] (Lenovo Group Limited)

HKLM\...\Run: [ALCKRESI.EXE] => C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE [281960 2011-05-26] (Lenovo Group Limited)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-31] (Ricoh co.,Ltd.)

HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [112152 2011-01-17] (Intel Corporation)

HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor

HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-14] (Lenovo, Inc.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Samsung PanelMgr] => C:\Windows\Samsung\PanelMgr\ssmmgr.exe [606208 2009-10-13] ()

HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)

HKLM-x32\...\Run: [Swisscom Quick Help] => C:\Program Files (x86)\Swisscom\Quick Help\SwisscomQuickHelp.exe [16668080 2013-10-02] (Swisscom)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (UPEK Inc.)

HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [LTT] => C:\Program Files\PC-Doctor\EnableToolbarW32.exe [23120 2011-06-27] (PC-Doctor, Inc.)

HKU\S-1-5-21-3536567661-1951368690-2788426747-1001\...\Run: [AppSafe] => C:\Program Files (x86)\AppSafe\AppSafe.exe

AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)

AppInit_DLLs: , C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2014-03-04] (NVIDIA Corporation)

AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)

AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2014-03-04] (NVIDIA Corporation)

Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk

ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk

ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files (x86)\Digital Line Detect\DLG.exe (Avanquest Software )

Startup: C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Sabrina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: proxy.lfrz.at:8080

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad

URLSearchHook: HKLM-x32 - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}

URLSearchHook: HKCU - Default Value = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENP_deCH472

BHO: YoutubeAdblocker - {159BC49F-2CD6-4CB7-932B-1027665E58BD} - C:\Program Files (x86)\YoutubeAdblocker\_2iD.x64.dll No File

BHO: greaotssaVer - {4F72390C-3192-91EF-ECD9-D90061D298A2} - C:\Program Files (x86)\greaotssaVer\2ZKW9c.x64.dll No File

BHO: SNT - {847493A0-9B57-E1D5-FE2C-CC1B12BC46CB} - C:\Program Files (x86)\SNT\p7T2DTlA.x64.dll No File

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{D5A2C57D-7554-4054-AE53-57D7A4D0B831}: [NameServer]195.186.216.33 195.186.152.33
 

FireFox:

========

FF ProfilePath: C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default

FF Homepage: https://www.google.ch/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()

FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Swisscom Quick Help - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\{6A6114A5-EEF5-45F4-BCD1-B00A7B33E04B} [2014-01-13]

FF Extension: Firebug - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\9ulbhy7c.default\Extensions\firebug@software.joehewitt.com.xpi [2013-02-17]

FF HKLM-x32\...\Firefox\Extensions: [VIP@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client\

FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\ []

FF HKLM-x32\...\Firefox\Extensions: [{E4D8AFFF-DA7C-412F-A976-05ED142C7806}] - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\

FF Extension: Unlimited Data Manager - C:\Program Files (x86)\Swisscom\Unlimited Data Manager\FireFox_Remote\ []
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com

CHR RestoreOnStartup: "hxxp://www.google.com"

CHR Extension: (YTBBookMark) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\amabcieebhjofcnbdphdmfkfcdgfilgk [2014-01-04]

CHR Extension: (YouTube) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-02-25]

CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmnkecdffcoibofckamdddfgeohpikij [2014-01-04]

CHR Extension: (Google Search) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-02-25]

CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpicgdnjfnbkibnicdnnpkkpklkjkki [2013-04-12]

CHR Extension: (Speedy Shopper) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ganlifbpkcplnldliibcbegplfmcfigp [2014-01-04]

CHR Extension: (SNT) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcgmnfaeohlofnjigiimjlbjleaomlei [2014-01-04]

CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcjmphdcljedddkheginnckbjccchepe [2014-05-16]

CHR Extension: (No Name) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfpknoifpolmopniafjdmhgpeobpcbba [2014-01-04]

CHR Extension: (Norton Identity Protection) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2012-02-25]

CHR Extension: (Gmail) - C:\Users\Sabrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-02-25]

CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-01-15]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [478056 2011-08-31] (Lenovo.)

R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)

R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2513752 2014-03-04] ()

R2 SesamService; C:\Program Files (x86)\Swisscom\Sesam\BIN\SecMIPService.exe [1482240 2011-05-16] (Swisscom)

R2 SwiCardDetectSvc; C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe [307568 2010-09-22] (Sierra Wireless, Inc.)

R2 UDM Service; C:\Program Files (x86)\Swisscom\Unlimited Data Manager\DashBoardS.exe [182128 2011-05-20] (Swisscom)

R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [82544 2011-06-30] (Symantec Corporation)
 

==================== Drivers (Whitelisted) ====================
 

S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-25] (Samsung Electronics Co., Ltd.)

S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2011-02-18] (Huawei Technologies Co., Ltd.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-19] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)

R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [301512 2014-03-04] (NVIDIA Corporation)

R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13840 2009-03-13] (UPEK Inc.)

R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [41536 2009-09-24] (Lenovo (United States) Inc.)

R3 WtSmpAdap; C:\Windows\System32\DRIVERS\wtsmpadap.sys [56688 2011-04-11] (Swisscom)

R1 WtSmpFlt; C:\Windows\System32\DRIVERS\wtsmpflt.sys [409456 2011-04-11] (Swisscom)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 vpnva; system32\DRIVERS\vpnva64.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-05-18 22:14 - 2014-05-18 22:14 - 00448512 _____ (OldTimer Tools) C:\Users\Sabrina\Desktop\TFC.exe

2014-05-18 20:44 - 2014-05-18 20:44 - 01016261 _____ (Thisisu) C:\Users\Sabrina\Downloads\JRT(2).exe

2014-05-18 20:17 - 2014-05-19 00:27 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-18 20:17 - 2014-05-18 20:17 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-05-18 20:17 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-05-18 20:17 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-05-18 20:17 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-05-18 20:16 - 2014-05-18 20:16 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Sabrina\Downloads\mbam-setup-2.0.1.1004.exe

2014-05-18 20:08 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-05-18 20:07 - 2014-05-18 20:07 - 01328723 _____ () C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe

2014-05-18 19:20 - 2014-05-19 23:03 - 00021897 _____ () C:\Users\Sabrina\Desktop\FRST.txt

2014-05-16 23:17 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-16 23:17 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-16 23:17 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-16 23:17 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-16 23:17 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-16 23:17 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-13 21:16 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-13 21:16 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-13 21:16 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-05-13 21:16 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-05-13 21:15 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-05-13 21:15 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-05-13 21:15 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-05-13 21:15 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-05-13 21:15 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2014-05-13 21:15 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2014-05-13 21:15 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2014-05-13 21:15 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-05-13 21:15 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-05-13 21:15 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-05-13 21:15 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-05-13 21:15 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2014-05-13 21:15 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2014-05-13 21:15 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-05-13 21:15 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2014-05-13 21:15 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2014-05-13 21:15 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll

2014-05-13 21:15 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-05-13 21:15 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-07 20:02 - 2014-05-07 20:03 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe

2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd

2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe

2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe

2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe

2014-05-05 07:40 - 2014-05-05 08:07 - 00000000 ____D () C:\Program Files (x86)\CrossFnt

2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe

2014-05-04 22:15 - 2014-05-18 19:31 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit

2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense

2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe

2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2014-05-04 21:41 - 2014-05-19 14:04 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job

2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe

2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml

2014-05-04 21:34 - 2012-05-15 07:13 - 00144896 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll

2014-05-04 21:34 - 2012-05-15 06:20 - 00104448 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll

2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\SysWOW64\NV

2014-05-04 21:28 - 2014-05-04 21:36 - 00000000 ____D () C:\Windows\system32\NV

2014-05-04 21:28 - 2014-05-04 21:31 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe

2014-05-04 21:25 - 2014-03-04 20:35 - 02513752 _____ () C:\Windows\system32\nvwmi64.exe

2014-05-04 21:25 - 2014-03-04 20:35 - 00004084 _____ () C:\Windows\system32\nvPerfProvider.man

2014-05-04 21:25 - 2014-03-04 18:17 - 00595232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA

2014-05-04 21:23 - 2014-03-04 20:35 - 30389192 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 25257816 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 22973896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 18312672 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 18225104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 15879264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 15232424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 12672288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-05-04 21:23 - 2014-03-04 20:35 - 11638736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 11587736 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 09731624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 09688888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 03131848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 03123544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 02936152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 02752856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 01883480 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433276.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433276.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 01249080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00888776 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00880984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00860104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00850888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00301512 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvkflt.sys

2014-05-04 21:23 - 2014-03-04 20:35 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-05-04 21:23 - 2014-03-04 20:35 - 00031576 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys

2014-05-04 21:18 - 2014-05-04 21:22 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe

2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf

2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)

2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)

2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)

2014-05-04 20:04 - 2014-05-04 20:05 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf

2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp

2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf

2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip

2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip

2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\WinZip

2014-05-04 19:20 - 2014-05-04 19:21 - 00000000 ____D () C:\Program Files\WinZip

2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi

2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx

2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter

2014-05-04 18:26 - 2014-05-04 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor

2014-05-04 18:26 - 2014-05-04 21:08 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5

2014-05-04 18:26 - 2014-05-04 18:29 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI

2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe

2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe

2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files

2014-05-04 18:13 - 2014-05-04 18:14 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi

2014-05-04 18:08 - 2014-05-04 18:09 - 00000020 _____ () C:\Windows\ø÷Í

2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸

2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe

2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener

2014-05-04 17:02 - 2014-05-04 17:07 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe

2014-05-04 16:44 - 2014-05-17 00:24 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-04 16:44 - 2014-05-04 16:46 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe

2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster

2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe

2014-05-03 08:33 - 2012-09-18 15:27 - 00501760 _____ () C:\Windows\system32\ZSHP1020.EXE

2014-05-03 08:33 - 2012-09-18 15:27 - 00192512 _____ () C:\Windows\system32\ZLhp1020.DLL

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle

2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java

2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe

2014-04-22 03:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-04-22 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-04-22 03:00 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-04-22 03:00 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-04-22 03:00 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-04-22 03:00 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-04-22 03:00 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-04-22 03:00 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-04-22 03:00 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-04-22 03:00 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-04-22 03:00 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-04-22 03:00 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-04-22 03:00 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-04-22 03:00 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-04-22 03:00 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-04-22 03:00 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-04-22 03:00 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-04-22 03:00 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-04-22 03:00 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-04-22 03:00 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-04-22 03:00 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-04-22 03:00 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-04-22 03:00 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-04-22 03:00 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-04-22 03:00 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-04-22 03:00 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-04-22 03:00 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-04-22 03:00 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-04-22 03:00 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-04-22 03:00 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-04-22 03:00 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-04-22 03:00 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-04-22 03:00 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-04-22 03:00 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-04-22 03:00 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-04-22 03:00 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-04-22 03:00 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-04-22 03:00 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-04-22 03:00 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-04-22 03:00 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-04-22 03:00 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-04-22 03:00 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-04-22 03:00 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-04-22 03:00 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
 

==================== One Month Modified Files and Folders =======
 

2014-05-19 23:03 - 2014-05-18 19:20 - 00021897 _____ () C:\Users\Sabrina\Desktop\FRST.txt

2014-05-19 23:03 - 2013-10-17 22:06 - 00000000 ____D () C:\FRST

2014-05-19 23:01 - 2012-04-06 14:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-05-19 23:01 - 2012-02-13 08:46 - 01551936 _____ () C:\Windows\WindowsUpdate.log

2014-05-19 23:00 - 2012-02-13 09:42 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-05-19 14:08 - 2012-02-13 08:16 - 00705124 _____ () C:\Windows\system32\perfh007.dat

2014-05-19 14:08 - 2012-02-13 08:16 - 00151492 _____ () C:\Windows\system32\perfc007.dat

2014-05-19 14:08 - 2009-07-14 07:13 - 01629508 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-05-19 14:04 - 2014-05-04 21:41 - 00000256 _____ () C:\Windows\Tasks\AppSafe.job

2014-05-19 14:04 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\UDM

2014-05-19 14:04 - 2012-02-25 18:46 - 00003506 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest

2014-05-19 14:04 - 2012-02-25 18:46 - 00003448 _____ () C:\Windows\System32\Tasks\PCDEventLauncher

2014-05-19 14:04 - 2012-02-25 18:46 - 00000466 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job

2014-05-19 02:37 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2014-05-19 02:00 - 2012-02-25 12:07 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Adobe

2014-05-19 00:27 - 2014-05-18 20:17 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-05-18 23:35 - 2012-02-13 09:42 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-05-18 22:14 - 2014-05-18 22:14 - 00448512 _____ (OldTimer Tools) C:\Users\Sabrina\Desktop\TFC.exe

2014-05-18 20:48 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-05-18 20:48 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-05-18 20:44 - 2014-05-18 20:44 - 01016261 _____ (Thisisu) C:\Users\Sabrina\Downloads\JRT(2).exe

2014-05-18 20:42 - 2012-04-03 22:35 - 00000000 ___RD () C:\Users\Sabrina\Dropbox

2014-05-18 20:42 - 2012-04-03 22:34 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Dropbox

2014-05-18 20:40 - 2014-01-04 19:04 - 00000464 ____H () C:\Windows\Tasks\GS.Enabler-S-926685765.job

2014-05-18 20:40 - 2012-02-13 09:01 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-05-18 20:40 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-05-18 20:40 - 2009-07-14 06:51 - 00117419 _____ () C:\Windows\setupact.log

2014-05-18 20:39 - 2010-11-21 05:47 - 00922862 _____ () C:\Windows\PFRO.log

2014-05-18 20:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Web

2014-05-18 20:17 - 2014-05-18 20:17 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-05-18 20:17 - 2014-05-18 20:17 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-05-18 20:17 - 2013-10-21 14:04 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-05-18 20:16 - 2014-05-18 20:16 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Sabrina\Downloads\mbam-setup-2.0.1.1004.exe

2014-05-18 20:10 - 2013-10-21 14:25 - 00000000 ____D () C:\AdwCleaner

2014-05-18 20:07 - 2014-05-18 20:07 - 01328723 _____ () C:\Users\Sabrina\Downloads\adwcleaner_3.209.exe

2014-05-18 19:31 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Orbit

2014-05-18 19:30 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\fc124d4af23c6577

2014-05-18 19:19 - 2014-01-31 18:47 - 02067456 _____ (Farbar) C:\Users\Sabrina\Desktop\FRST64.exe

2014-05-18 19:19 - 2014-01-31 18:47 - 00000000 ____D () C:\Users\Sabrina\Desktop\FRST-OlderVersion

2014-05-17 08:06 - 2013-03-12 15:20 - 00000000 ___RD () C:\Users\Sabrina\Virtual Machines

2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-17 08:06 - 2012-02-25 10:58 - 00000000 ___RD () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-05-17 00:24 - 2014-05-04 16:44 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-05-17 00:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-05-16 23:17 - 2012-02-25 11:19 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-05-16 23:16 - 2013-08-02 03:00 - 00000000 ____D () C:\Windows\system32\MRT

2014-05-16 23:11 - 2012-08-29 07:47 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-05-16 23:04 - 2013-12-01 21:48 - 00001040 _____ () C:\Users\Sabrina\Desktop\Dropbox.lnk

2014-05-16 23:04 - 2013-12-01 21:47 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-05-14 21:01 - 2012-04-06 14:52 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-05-14 21:01 - 2012-04-06 14:52 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-05-14 21:01 - 2012-02-27 19:10 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-05-13 21:01 - 2012-02-25 11:40 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk

2014-05-11 09:04 - 2012-05-22 17:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-05-11 01:34 - 2012-03-22 18:39 - 00000000 ____D () C:\ProgramData\WtDashboard

2014-05-10 19:23 - 2014-05-10 19:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-05-10 15:18 - 2012-06-23 19:00 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Apple Computer

2014-05-10 00:23 - 2009-07-14 06:45 - 05256976 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-05-09 08:14 - 2014-05-13 21:16 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-05-09 08:11 - 2014-05-13 21:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-05-08 23:30 - 2012-02-13 09:42 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-05-08 23:30 - 2012-02-13 09:42 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-05-08 18:32 - 2012-03-01 12:27 - 00011311 _____ () C:\Users\Sabrina\AppData\Roaming\SmarThruOptions.xml

2014-05-07 20:03 - 2014-05-07 20:02 - 32355208 _____ (DVDVideoSoft Ltd. ) C:\Users\Sabrina\Downloads\FreeYouTubeDownload(2).exe

2014-05-06 06:40 - 2014-05-16 23:17 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-05-06 06:17 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-05-06 05:25 - 2014-05-16 23:17 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-05-06 05:07 - 2014-05-16 23:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-05-06 05:00 - 2014-05-16 23:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-05-06 04:10 - 2014-05-16 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-05-05 12:03 - 2012-02-25 18:47 - 00118016 _____ () C:\Users\Sabrina\AppData\Local\GDIPFONTCACHEV1.DAT

2014-05-05 11:59 - 2014-02-28 10:48 - 00000000 ____D () C:\Users\Sabrina\Documents\BVA

2014-05-05 11:02 - 2014-05-05 11:02 - 02121728 _____ () C:\Users\Sabrina\Desktop\Kaeser.indd

2014-05-05 08:07 - 2014-05-05 07:40 - 00000000 ____D () C:\Program Files (x86)\CrossFnt

2014-05-05 08:05 - 2014-05-05 08:05 - 12702720 _____ () C:\Users\Sabrina\Downloads\atm41eng.exe

2014-05-05 08:02 - 2014-05-05 08:02 - 12680704 _____ () C:\Users\Sabrina\Downloads\atm41deu.exe

2014-05-05 07:57 - 2014-05-05 07:57 - 01590080 _____ (Proxima Software) C:\Users\Sabrina\Downloads\AfmToPfmSetup.exe

2014-05-05 07:40 - 2014-05-05 07:40 - 01878464 _____ (Acute Systems ) C:\Users\Sabrina\Downloads\cfsetup.exe

2014-05-04 22:15 - 2014-05-04 22:15 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\ProgSense

2014-05-04 22:14 - 2014-05-04 22:14 - 05498816 _____ (www.orbitdownloader.com ) C:\Users\Sabrina\Downloads\OrbitDownloaderSetup.exe

2014-05-04 21:45 - 2014-05-04 21:45 - 00001385 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00001316 _____ () C:\Users\Sabrina\Desktop\Movie Maker.lnk

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\PCHEALTH

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Windows\de

2014-05-04 21:45 - 2014-05-04 21:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2014-05-04 21:45 - 2012-02-13 09:43 - 00000000 ____D () C:\Program Files (x86)\Windows Live

2014-05-04 21:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2014-05-04 21:43 - 2012-02-13 09:43 - 00204593 _____ () C:\Windows\DirectX.log

2014-05-04 21:41 - 2014-05-04 21:41 - 00002974 _____ () C:\Windows\System32\Tasks\AppSafe

2014-05-04 21:41 - 2012-04-15 11:40 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\Windows Live

2014-05-04 21:37 - 2014-05-04 21:37 - 00018244 _____ () C:\Windows\system32\results.xml

2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\SysWOW64\NV

2014-05-04 21:36 - 2014-05-04 21:28 - 00000000 ____D () C:\Windows\system32\NV

2014-05-04 21:34 - 2012-02-13 08:54 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\ProgramData\Intel

2014-05-04 21:34 - 2012-02-13 08:52 - 00000000 ____D () C:\Program Files\Common Files\Intel

2014-05-04 21:31 - 2014-05-04 21:28 - 145417920 _____ (Intel Corporation) C:\Users\Sabrina\Downloads\win64_152822.exe

2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-05-04 21:25 - 2012-02-13 09:00 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-05-04 21:23 - 2014-05-04 21:23 - 00000000 ____D () C:\NVIDIA

2014-05-04 21:22 - 2014-05-04 21:18 - 212388000 _____ (NVIDIA Corporation) C:\Users\Sabrina\Downloads\332.76-quadro-notebook-win8-win7-64bit-international-whql.exe

2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter

2014-05-04 21:13 - 2014-05-04 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GUI for dvdauthor

2014-05-04 21:08 - 2014-05-04 18:26 - 00000000 ____D () C:\Program Files (x86)\AviSynth 2.5

2014-05-04 20:20 - 2014-05-04 20:20 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular(1).ttf

2014-05-04 20:12 - 2014-05-04 20:12 - 00044356 _____ () C:\Users\Sabrina\Downloads\AT(2)

2014-05-04 20:12 - 2014-05-04 20:12 - 00041264 _____ () C:\Users\Sabrina\Downloads\AT(3)

2014-05-04 20:11 - 2014-05-04 20:11 - 00044384 _____ () C:\Users\Sabrina\Downloads\AT(1)

2014-05-04 20:05 - 2014-05-04 20:04 - 00089448 _____ () C:\Users\Sabrina\Downloads\Utopia_Regular.ttf

2014-05-04 19:58 - 2014-05-04 19:58 - 00091876 _____ () C:\Users\Sabrina\Downloads\Utopia_Italic.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00109040 _____ () C:\Users\Sabrina\Downloads\Utopia Regular.ttf

2014-05-04 19:46 - 2014-05-04 19:46 - 00000000 ____D () C:\ProgramData\MiniApp

2014-05-04 19:46 - 2014-01-04 19:02 - 00000000 ____D () C:\ProgramData\InstallMate

2014-05-04 19:34 - 2014-05-04 19:34 - 00101450 _____ () C:\Users\Sabrina\Downloads\Utopia.ttf

2014-05-04 19:27 - 2014-05-04 19:27 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WinZip

2014-05-04 19:21 - 2014-05-04 19:21 - 00002206 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00002200 _____ () C:\Users\Public\Desktop\WinZip.lnk

2014-05-04 19:21 - 2014-05-04 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip

2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\ProgramData\WinZip

2014-05-04 19:21 - 2014-05-04 19:20 - 00000000 ____D () C:\Program Files\WinZip

2014-05-04 19:21 - 2012-02-25 18:45 - 00000000 ____D () C:\Users\Sabrina

2014-05-04 19:21 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

2014-05-04 19:19 - 2014-05-04 19:19 - 46956032 _____ () C:\Users\Sabrina\Downloads\wz180gev-64.msi

2014-05-04 19:11 - 2014-05-04 19:11 - 00191255 _____ () C:\Users\Sabrina\Documents\Fonts BVA1.zipx

2014-05-04 18:29 - 2014-05-04 18:26 - 00000000 ____D () C:\Users\Sabrina\.DVDslideshowGUI

2014-05-04 18:26 - 2014-05-04 18:26 - 07760687 _____ (Boraxsoft) C:\Users\Sabrina\AppData\Roaming\SetupGFD.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05514668 _____ (LIGHTNING UK!) C:\Users\Sabrina\AppData\Roaming\Imgburn.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05243208 _____ ( ) C:\Users\Sabrina\AppData\Roaming\AvsP.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 05082084 _____ (The Public) C:\Users\Sabrina\AppData\Roaming\Avisynth.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 01357348 _____ () C:\Users\Sabrina\AppData\Roaming\MatroskaSplitter.exe

2014-05-04 18:26 - 2014-05-04 18:26 - 00117723 _____ () C:\Users\Sabrina\AppData\Roaming\yuvcodecs-1.3.exe

2014-05-04 18:24 - 2014-05-04 18:24 - 00613200 _____ (Chip Digital GmbH) C:\Users\Sabrina\Downloads\DVD slideshow GUI - CHIP-Downloader.exe

2014-05-04 18:22 - 2014-05-04 18:22 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\WMTools Downloaded Files

2014-05-04 18:14 - 2014-05-04 18:13 - 07361024 _____ () C:\Users\Sabrina\Downloads\MM26_FI.msi

2014-05-04 18:09 - 2014-05-04 18:08 - 00000020 _____ () C:\Windows\ø÷Í

2014-05-04 18:03 - 2014-05-04 18:03 - 00000020 _____ () C:\Windows\€ù¸

2014-05-04 17:49 - 2012-03-06 07:54 - 00000000 ____D () C:\Users\Sabrina\AppData\Local\CrashDumps

2014-05-04 17:37 - 2010-11-21 09:16 - 00000000 ___RD () C:\Users\Public\Recorded TV

2014-05-04 17:27 - 2014-05-04 17:27 - 00328095 _____ () C:\Users\Sabrina\Downloads\winmail_opener.exe

2014-05-04 17:27 - 2014-05-04 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winmail Opener

2014-05-04 17:07 - 2014-05-04 17:02 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205(1).exe

2014-05-04 16:46 - 2014-05-04 16:44 - 142602520 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-all_16.4.3508.0205.exe

2014-05-04 16:41 - 2014-05-04 16:41 - 00000000 ____D () C:\Users\Sabrina\AppData\Roaming\DropboxMaster

2014-05-04 16:38 - 2012-02-25 18:46 - 00000528 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job

2014-05-04 16:28 - 2014-05-04 16:28 - 01245384 _____ (Microsoft Corporation) C:\Users\Sabrina\Downloads\wlsetup-web.exe

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Sun

2014-05-01 15:38 - 2014-05-01 15:38 - 00000000 ____D () C:\ProgramData\Oracle

2014-05-01 15:37 - 2014-05-01 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-05-01 15:37 - 2014-05-01 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-05-01 15:37 - 2014-05-01 15:37 - 00000000 ____D () C:\Program Files (x86)\Java

2014-05-01 15:36 - 2014-05-01 15:36 - 00921512 _____ (Oracle Corporation) C:\Users\Sabrina\Downloads\jxpiinstall.exe

2014-04-29 09:42 - 2012-02-25 18:46 - 00004246 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe

[2014-05-13 21:15] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C
 

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-05-19 02:29
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014

Ran by Sabrina at 2014-05-19 23:04:35

Running from C:\Users\Sabrina\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.1530 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 3.7.0.1530 - Adobe Systems Incorporated) Hidden

Adobe Extension Manager CS6 (HKLM-x32\...\{83463106-DD1C-4FE5-A61C-DF6715472AD4}) (Version: 6.0 - Adobe Systems Incorporated)

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)

Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)

Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)

Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden

Adobe InDesign CS5 (HKLM-x32\...\{F9766AC1-1461-1033-B862-DF8FE1C033BE}) (Version: 7.0 - Adobe Systems Incorporated)

Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)

Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden

Adobe Photoshop 7.0.1 (HKLM-x32\...\Adobe Photoshop 7.0.1) (Version: 7.0.1 - Adobe Systems, Inc.)

Adobe Reader X (10.1.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)

Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}) (Version: 5.2.0.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Broadcom InConcert Maestro (HKLM\...\{57DD35E9-D9BB-4089-BB05-EF933C586CB3}) (Version: 1.0.1.1500 - Broadcom Corporation)

CH-Finance 2010 (HKLM-x32\...\CH-Finance 2010) (Version:  - )

Conexant 20672 SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.32.23.0 - Conexant)

Corel WinDVD (HKLM-x32\...\{5C1F18D2-F6B7-4242-B803-B5A78648185D}) (Version: 10.0.5.828 - Corel Inc.)

Create Recovery Media (HKLM-x32\...\{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}) (Version: 1.20.0.00 - Lenovo Group Limited)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7 (HKLM\...\DisableAMTPopup) (Version: 1.00 - )

Dropbox (HKCU\...\Dropbox) (Version: 2.6.33 - Dropbox, Inc.)

EasyRotator Wizard (HKLM-x32\...\com.dwuser.erwizard.EasyRotatorWizard) (Version: 1.0.123 - Magnetic Marketing Corp)

EasyRotator Wizard (x32 Version: 1.0.123 - Magnetic Marketing Corp) Hidden

EasyTax 2012 AG 1.02 (HKLM-x32\...\3785-6780-1293-3574) (Version: 1.02 - HWI Solutions AG)

EndNote X6 (HKLM-x32\...\{86B3F2D6-AC2B-0016-8AE1-F2F77F781B0C}) (Version: 16.0.0.6348 - Thomson Reuters)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

Evernote v. 4.2.3 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.3.15 - Evernote Corp.)

Fonts CH-Line (HKLM-x32\...\Fonts CH-Line) (Version:  - )

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Free Audio Converter version 5.0.15.706 (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.15.706 - DVDVideoSoft Ltd.)

Free DVD Video Converter version 2.0.9.706 (HKLM-x32\...\Free DVD Video Converter_is1) (Version: 2.0.9.706 - DVDVideoSoft Ltd.)

Free Video to Flash Converter version 5.0.15.706 (HKLM-x32\...\Free Video to Flash Converter_is1) (Version: 5.0.15.706 - DVDVideoSoft Ltd.)

Free YouTube Download version 3.1.42.1212 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.1.42.1212 - DVDVideoSoft Ltd.)

Free YouTube to MP3 Converter version 3.11.37.1212 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.37.1212 - DVDVideoSoft Ltd.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)

Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden

Integrated Camera Driver Installer Package Ver.1.1.0.1147 (HKLM-x32\...\{B2CA6F37-1602-4823-81B5-0384B6888AA6}) (Version: 1.1.0.1147 - RICOH)

Integrated Camera TWAIN (HKLM-x32\...\{9CA0DEE4-E84B-466F-9B96-FC255F3A929F}) (Version: 1.0.11.1223 - Chicony Electronics Co.,Ltd.)

Intel PROSet Wireless (Version:  - ) Hidden

Intel PROSet Wireless (x32 Version:  - ) Hidden

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Identity Protection Technology 1.1.2.0 (HKLM-x32\...\{C01A86F5-56E7-101F-9BC9-E3F1025EB779}) (Version: 1.1.2.0 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3517 - Intel Corporation)

Intel(R) PROSet/Wireless WiFi Software (HKLM\...\{25FBDA9A-E868-4B3B-B9FF-D923818511A1}) (Version: 14.2.0000 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

iTunes (HKLM\...\{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}) (Version: 10.6.3.25 - Apple Inc.)

Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

Kalender-Excel-8.8 (HKLM-x32\...\Kalender-Excel-8.8_is1) (Version: 8.8 - MSDatec)

Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 1.10 - )

Lenovo Patch Utility (HKLM-x32\...\{24E92E7A-6848-4747-A3EA-3AAC0576BE52}) (Version: 1.0.1.1 - Lenovo Group Limited)

Lenovo Patch Utility 64 bit (HKLM\...\{39A04221-294E-4D90-A0F2-CCB1EF15CB56}) (Version: 1.2.0.1 - Lenovo Group Limited)

Lenovo Registration (HKLM-x32\...\{6707C034-ED6B-4B6A-B21F-969B3606FBDE}) (Version: 1.0.4 - Lenovo Inc.)

Lenovo SimpleTap (HKLM\...\{EFC9FE7C-ECE8-4282-8F77-FEDCAD374C77}) (Version: 3.0.0010.00 - Lenovo Group Limited)

Lenovo System Interface Driver (HKLM\...\LENOVO.SMIIF) (Version: 1.05 - )

Lenovo ThinkVantage Toolbox (HKLM\...\PC-Doctor for Windows) (Version: 6.0.5849.23 - PC-Doctor, Inc.)

Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0008.00 - Lenovo)

Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0005.00 - Lenovo)

Lenovo Welcome (HKLM-x32\...\Lenovo Welcome_is1) (Version: 3.00.006.0 - Lenovo)

Macromedia Contribute 3 (HKLM-x32\...\{0591FFE0-9E49-46F2-811F-DF829AFFB2FB}) (Version: 3.0.2.2326 - Macromedia, Inc.)

Macromedia Dreamweaver 8 (HKLM-x32\...\{44025BD7-AD10-4769-99AE-6378FD0303D6}) (Version: 8.0.0.2751 - Macromedia)

Macromedia Extension Manager (HKLM-x32\...\{0F022A2E-7022-497D-90A5-0F46746D8275}) (Version: 1.7.270 - Ihr Firmenname)

Macromedia Fireworks 8 (HKLM-x32\...\{4C24A8C1-7CFA-4650-AF15-732F5BD7B46D}) (Version: 8.0.0.777 - Macromedia)

Macromedia Flash 8 (HKLM-x32\...\{2BD5C305-1B27-4D41-B690-7A61172D2FEB}) (Version: 8.00.0000 - Macromedia)

Macromedia Flash 8 Video Encoder (HKLM-x32\...\{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}) (Version: 1.00.0000 - Macromedia)

Macromedia HomeSite+ (HKLM-x32\...\{8D3562E7-C795-4B5D-A091-6DAA3FF0DF3B}) (Version:  - )

Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)

Message Center Plus (HKLM-x32\...\{FD331A3B-F7A5-4C31-B8D4-DF413C85AF7A}) (Version: 2.0.0012.00 - Lenovo Group Limited)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040C-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0410-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0413-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUSR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Professional Plus 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Nur Entfernen der CopyTrans Suite möglich (HKCU\...\CopyTrans Suite) (Version: 2.36 - WindSolutions)

NVIDIA 3D Vision Treiber 332.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 332.76 - NVIDIA Corporation)

NVIDIA Grafiktreiber 332.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.76 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden

NVIDIA Optimus 1.15.2 (Version: 1.15.2 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3276 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 332.76 (Version: 332.76 - NVIDIA Corporation) Hidden

NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden

NVIDIA WMI 2.16.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVWMI) (Version: 2.16.0 - NVIDIA Corporation)

On Screen Display (HKLM\...\OnScreenDisplay) (Version: 6.50.00 - )

PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden

PDF24 Creator 6.3.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.3 - Frank Heindörfer, Philip Chinery)

Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)

Private Tax 2011 1.4 (HKLM-x32\...\4095-7861-2728-4611) (Version: 1.4 - Information Factory AG)

Programmer's Notepad (HKLM-x32\...\{52CF142B-7B0E-41E7-98F5-B834122523E7}_is1) (Version: 2.3.4.2350 - Simon Steele)

ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)

QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)

R for Windows 2.14.1 (HKLM\...\R for Windows 2.14.1_is1) (Version: 2.14.1 - R Development Core Team)

RapidBoot (HKLM\...\{5E2652DF-743F-482B-A593-C95F431A5769}) (Version: 1.11 - Lenovo)

Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (HKLM\...\EnablePS) (Version: 1.00 - )

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden

RICOH_Media_Driver_v2.14.18.01 (HKLM-x32\...\{FE041B02-234C-4AAA-9511-80DF6482A458}) (Version: 2.14.18.01 - RICOH)

Samsung CLX-3170 Series (HKLM-x32\...\Samsung CLX-3170 Series) (Version:  - Samsung Electronics CO.,LTD)

Secure Download Manager (HKLM-x32\...\{B15B400A-19ED-4CC7-B3E4-9295D8470CBE}) (Version: 3.0.3 - e-academy Inc.)

SmarThru 4 (HKLM-x32\...\{90F1943D-EA4A-4460-B59F-30023F3BA69A}) (Version:  - )

SmarThru PC Fax (HKLM-x32\...\SmarThru PC Fax) (Version:  - )

Swisscom Quick Help (HKLM-x32\...\Swisscom Quick Help) (Version: 3.3.2.340 - Swisscom (Switzerland) AG)

Swisscom Quick Help (x32 Version: 3.3.2.340 - Swisscom (Switzerland) AG) Hidden

System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 4.01.0015 - Lenovo)

TDM-GCC (HKLM-x32\...\TDM-GCC) (Version: 1.1006.0 - TDM)

ThinkPad Bluetooth with Enhanced Data Rate Software (HKLM\...\{C6C9D5F7-630C-4125-8C4E-94AF77C1896E}) (Version: 6.4.0.1500 - Broadcom Corporation)

ThinkPad FullScreen Magnifier (HKLM\...\ThinkPad FullScreen Magnifier) (Version: 2.40 - )

ThinkPad Modem Adapter (HKLM\...\CNXT_MODEM_HDA_HSF) (Version: 7.80.5.0 - Conexant Systems)

ThinkPad Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.61.00.11 - )

ThinkPad Power Manager (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 3.63 - )

ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.8.0 - )

ThinkPad UltraNav Utility (HKLM-x32\...\{17CBC505-D1AE-459D-B445-3D2000A85842}) (Version: 2.13.0 - Lenovo)

ThinkVantage Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.73 - Lenovo)

ThinkVantage AutoLock (HKLM\...\{E224B44B-B5EB-4af3-A80A-A255358E241A}_is1) (Version: 1.03 - Lenovo)

ThinkVantage Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 2.07 - Lenovo)

ThinkVantage Fingerprint Software (HKLM\...\{502EE63C-9A62-4330-8F8B-1EAB51B7BB46}) (Version: 5.9.4.6882 - UPEK Inc.)

Tinn-R 2.3.7.1 (HKLM-x32\...\Tinn-R_is1) (Version:  - Tinn-R Team)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_PROPLUSR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUSR_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2880505) 32-Bit Edition (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{2720451F-5D04-43EC-AB1F-26D948FD971B}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_PROPLUSR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUSR_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_PROPLUSR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_PROPLUSR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

VIP Access (HKLM-x32\...\{E8D46836-CD55-453C-A107-A59EC51CB8DC}) (Version: 2.0.2.140 - VeriSign)

VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN)

Windows Driver Package - Intel (e1cexpress) Net  (12/21/2010 11.8.84.0) (HKLM\...\6D23A494E9A245843FB8584D9307D3E328DF8613) (Version: 12/21/2010 11.8.84.0 - Intel)

Windows Driver Package - Intel System  (09/10/2010 9.2.0.1011) (HKLM\...\0CDBDD444A1F5FFEA227B4E7DCE195F11F08240A) (Version: 09/10/2010 9.2.0.1011 - Intel)

Windows Driver Package - Intel System  (09/10/2010 9.2.0.1011) (HKLM\...\8058FF31D7C7F4818DC176DAF53CD379968C86E4) (Version: 09/10/2010 9.2.0.1011 - Intel)

Windows Driver Package - Intel System  (11/20/2010 9.2.0.1016) (HKLM\...\43B5066463CEBC83E99586A67037B6F9FC4193FE) (Version: 11/20/2010 9.2.0.1016 - Intel)

Windows Driver Package - Intel USB  (12/21/2010 9.2.0.1021) (HKLM\...\0DD5528A211904214F70A66DE6ADBD378B21566D) (Version: 12/21/2010 9.2.0.1021 - Intel)

Windows Driver Package - Lenovo 1.61.00.11 (11/11/2010 1.61.00.11) (HKLM\...\466E9B20D871055D6D3CDA2CDD1D355E978A61AF) (Version: 11/11/2010 1.61.00.11 - Lenovo)

Windows Driver Package - Synaptics (SynTP) Mouse  (05/19/2011 15.3.8.0) (HKLM\...\DDD8A532E361E9A878EBEF69C338B306810DF059) (Version: 05/19/2011 15.3.8.0 - Synaptics)

Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation)

WinMerge 2.14.0 (HKLM-x32\...\WinMerge_is1) (Version: 2.14.0 - Thingamahoochie Software)

WinRAR 4.20 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

WinVPP 1.3.4 (HKLM-x32\...\{0362ADEC-279F-4BC9-A861-BD486E98C8AD}) (Version: 1.3.4 - ETH Zuerich)

WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DF}) (Version: 18.0.10661 - WinZip Computing, S.L. )
 

==================== Restore Points  =========================
 

04-05-2014 16:15:04 Windows Live Essentials

04-05-2014 16:15:19 Installed Windows Movie Maker 2.6

04-05-2014 16:15:24 DirectX wurde installiert

04-05-2014 16:16:51 DirectX wurde installiert

04-05-2014 16:17:03 DirectX wurde installiert

04-05-2014 16:17:53 WLSetup

04-05-2014 16:19:31 Windows Live Essentials

04-05-2014 16:19:43 WLSetup

04-05-2014 16:21:54 Installed Windows Movie Maker 2.6

04-05-2014 17:20:28 WinZip 18.0 wird installiert

04-05-2014 19:06:57 Removed Windows Movie Maker 2.6

04-05-2014 19:41:37 Windows Live Essentials

04-05-2014 19:42:56 DirectX wurde installiert

04-05-2014 19:43:37 DirectX wurde installiert

04-05-2014 19:44:04 DirectX wurde installiert

04-05-2014 19:44:57 WLSetup

09-05-2014 22:30:18 Windows Update

13-05-2014 19:05:37 Windows Update

16-05-2014 21:08:10 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2014-01-12 12:35 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0BC77D44-74FA-455A-B587-E73CE62C5990} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-13] (Google Inc.)

Task: {11EF87FA-F5C4-4F01-89D7-E8ECB43B7D7C} - System32\Tasks\MCP => C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-28] ()

Task: {3BE08FEC-0FC8-441D-939E-C609A500E540} - System32\Tasks\AdobeAAMUpdater-1.0-Sabrina-THINK-Sabrina => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)

Task: {3D74BFA3-1C0A-4739-B737-FCDF6999E8B4} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2011-12-21] (Lenovo)

Task: {73978FBE-6EAD-4932-8803-2008ACAD057D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)

Task: {7629E501-D646-44BF-8DF0-85E237916E4B} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)

Task: {86F9F4FF-7CC2-4EF9-AF27-496D13F8512D} - \AppCloudUpdater No Task File <==== ATTENTION

Task: {94B59A78-1266-4B6B-983C-AA7837A977BC} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)

Task: {957D2B91-634E-4D2B-9EE4-85AE74F41DFC} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.)

Task: {C32FF76B-6D11-4288-8203-8954890ED5EB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {D084B0C7-213C-4141-97AD-87290A3595EB} - System32\Tasks\GS.Enabler-S-926685765 => c:\programdata\softwarehouse\gs.enabler\GS.Enabler.exe <==== ATTENTION

Task: {DBC194AD-8A8E-4AAA-BFE4-C43BFCEBA7C5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-13] (Google Inc.)

Task: {EF259D21-F761-4E73-8FA3-F6DDC6A2B365} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PWMIDTSV.EXE [2011-08-31] (Lenovo Group Limited)

Task: {F1BFA607-2CC3-4244-AAE5-9D98CBE91444} - System32\Tasks\AppSafe => C:\Program Files (x86)\AppSafe\AppSafe.exe

Task: {F2E147F1-A5C9-45E3-B2D9-9940C0B51F8D} - System32\Tasks\Lenovo\SimpleTap\Start SimpleTap for Sabrina-THINK.Sabrina => C:\Program Files\Lenovo\SimpleTap\SimpleTap.exe [2011-12-21] (Lenovo)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\AppSafe.job => C:\Program Files (x86)\AppSafe\AppSafe.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GS.Enabler-S-926685765.job => c:\programdata\softwarehouse\gs.enabler\GS.Enabler.exe <==== ATTENTION

Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe

Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-05-04 21:25 - 2014-03-04 20:35 - 02513752 _____ () C:\Windows\system32\nvwmi64.exe

2011-07-28 06:07 - 2011-07-28 06:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll

2014-05-03 08:33 - 2012-09-18 15:27 - 00192512 _____ () C:\Windows\System32\zlhp1020.dll

2012-03-01 11:41 - 2005-03-12 02:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll

2012-03-01 12:26 - 2009-05-08 12:53 - 00082432 _____ () C:\Windows\System32\SamFaxPort64.dll

2008-09-09 12:22 - 2008-09-09 12:22 - 00022016 _____ () C:\Windows\System32\sst1cl6.dll

2014-05-03 08:33 - 2012-09-18 15:27 - 00065024 _____ () C:\Windows\system32\spool\PRTPROCS\x64\pphp1020.dll

2012-11-18 09:06 - 2014-03-04 19:10 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2012-02-13 08:11 - 2011-05-19 14:04 - 00057640 _____ () C:\Program Files\Synaptics\SynTP\SynTPEnhPS.dll

2012-02-13 08:57 - 2010-10-26 06:40 - 00049056 ____N () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe

2012-02-13 09:00 - 2011-03-06 13:07 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2010-12-19 01:50 - 2010-12-19 01:50 - 00173856 _____ () C:\Program Files\ThinkPad\Bluetooth Software\btkeyind.dll

2012-03-01 12:24 - 2009-10-13 12:41 - 00306688 _____ () C:\Windows\Samsung\PanelMgr\caller64.exe

2012-02-13 09:03 - 2011-08-31 20:03 - 00055808 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL

2011-11-02 00:26 - 2011-11-02 00:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2011-11-02 00:26 - 2011-11-02 00:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2010-10-13 10:13 - 2010-10-13 10:13 - 00057344 ____R () C:\Program Files (x86)\Swisscom\Sesam\BIN\boost_thread-vc80-mt-1_44.dll

2010-10-13 10:11 - 2010-10-13 10:11 - 00057344 ____R () C:\Program Files (x86)\Swisscom\Sesam\BIN\boost_date_time-vc80-mt-1_44.dll

2011-05-16 16:06 - 2011-05-16 16:06 - 01011712 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\LIBEAY32.dll

2011-05-16 16:06 - 2011-05-16 16:06 - 00249856 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\SSLEAY32.dll

2010-10-13 10:12 - 2010-10-13 10:12 - 00663552 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\boost_regex-vc80-mt-1_44.dll

2010-10-13 10:13 - 2010-10-13 10:13 - 00057344 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\boost_thread-vc80-mt-1_44.dll

2010-10-13 10:11 - 2010-10-13 10:11 - 00057344 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\boost_date_time-vc80-mt-1_44.dll

2010-10-13 10:12 - 2010-10-13 10:12 - 00233472 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\boost_serialization-vc80-mt-1_44.dll

2010-10-13 10:11 - 2010-10-13 10:11 - 00135168 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\boost_filesystem-vc80-mt-1_44.dll

2010-10-13 10:11 - 2010-10-13 10:11 - 00012288 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\boost_system-vc80-mt-1_44.dll

2011-05-16 16:04 - 2011-05-16 16:04 - 00438272 ____R () C:\Program Files (x86)\Swisscom\Unlimited Data Manager\sqlite.dll

2009-02-26 14:46 - 2009-02-26 14:46 - 00064344 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\ColleagueImport.dll

2011-06-22 12:46 - 2011-06-22 12:46 - 00434016 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll

2011-05-26 21:18 - 2011-05-26 21:18 - 00136536 _____ () C:\Program Files (x86)\Microsoft Office\Office12\OUTLCTL.DLL

2013-07-10 18:07 - 2013-07-10 18:07 - 00756888 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL

2014-05-10 19:23 - 2014-05-10 19:23 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2014-05-14 21:01 - 2014-05-14 21:01 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== EXE Association (whitelisted) =============
 
 

==================== Disabled items from MSCONFIG ==============
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (05/19/2014 05:20:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 7036
 

Error: (05/19/2014 05:20:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 7036
 

Error: (05/19/2014 05:20:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/19/2014 05:20:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 6037
 

Error: (05/19/2014 05:20:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 6037
 

Error: (05/19/2014 05:20:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/19/2014 05:20:55 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 5039
 

Error: (05/19/2014 05:20:55 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 5039
 

Error: (05/19/2014 05:20:55 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/19/2014 05:20:54 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 4025
 
 

System errors:

=============

Error: (05/19/2014 11:00:38 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
 

Error: (05/18/2014 11:06:56 PM) (Source: iaStor) (EventID: 9) (User: )

Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
 

Error: (05/18/2014 10:17:48 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "NVIDIA Stereoscopic 3D Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/18/2014 09:44:02 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
 
 

Microsoft Office Sessions:

=========================

Error: (10/21/2013 08:33:30 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 101 seconds with 60 seconds of active time.  This session ended with a crash.
 

Error: (07/22/2013 01:47:56 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 52 seconds with 0 seconds of active time.  This session ended with a crash.
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-01-12 11:35:02.045

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-01-12 11:35:01.905

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-01-12 11:35:01.764

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-01-12 11:35:01.624

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-01-11 00:10:14.250

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-01-11 00:10:14.109

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-01-11 00:10:13.969

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2014-01-11 00:10:13.829

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-10-21 07:43:30.132

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-10-21 07:43:29.976

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 31%

Total physical RAM: 8075.23 MB

Available physical RAM: 5524.32 MB

Total Pagefile: 16148.65 MB

Available Pagefile: 12919.4 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB
 

==================== Drives ================================
 

Drive c: (Windows7_OS) (Fixed) (Total:448.67 GB) (Free:341.04 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive q: (Lenovo_Recovery) (Fixed) (Total:15.62 GB) (Free:2.21 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 466 GB) (Disk ID: 0FF44617)

Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=449 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=16 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================