Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Ein Virus? oder doch nur eine Einstellungssache des Laptops? (https://www.trojaner-board.de/141721-virus-nur-einstellungssache-laptops.html)

CarstenS. 17.09.2013 17:17
Ein Virus? oder doch nur eine Einstellungssache des Laptops?
 
Hallo und guten Tag,

ich hab einen HP Pavilion g7 Laptop (3 Jahre alt) und habe seit ein paar Tagen das Problem, dass dieser immer langsamer wird. Ich habe als Virenprogramm MS Esentiell und war bis Dato damit auch recht zufrieden. Das hat sogar letztens ein Virus gefunden und beseitigt. Nichts desto trotz ist der Rechner richtig langsam( habe den auch schon um 4 GB Arbeitsspeicher aufgerüstet) und auch Videosequenzen werden ruckelig abgespielt. Ich fragte mich schon, ob der oder andere Viren noch drauf sein könnten und habe Kasperskys Pure 3.0 drüberlaufen lassen (Fullscan) aber auch hier kam kein Eintrag. Kann es sein, dass es noch Bedrohungen auf meinem Rechner sind?

Über eine Nachricht würde ich mich freuen.

BG
Carsten

schrauber 17.09.2013 17:51
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


CarstenS. 17.09.2013 18:21
Hej Schrauber,

danke für die schnelle Antwort :-). Ich hab nun das Prob: wie krieg ich die Datei hier rein?

BG Carsten


FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013 03
Ran by CS (administrator) on CS-HP on 17-09-2013 19:00:11
Running from C:\Users\CS\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
( ) C:\Windows\system32\lxducoms.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\Lexmark 5600-6600 Series\lxdumon.exe
() C:\Program Files (x86)\Lexmark 5600-6600 Series\lxduMsdMon.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [lxdumon.exe] - C:\Program Files (x86)\Lexmark 5600-6600 Series\lxdumon.exe [676520 2010-02-04] ()
HKLM\...\Run: [lxduamon] - C:\Program Files (x86)\Lexmark 5600-6600 Series\lxduamon.exe [16040 2010-02-04] ()
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1424896 2011-09-08] (IDT, Inc.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-07-18] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKCU\...\Run: [SCheck] - C:\Users\CS\AppData\Roaming\SCheck\SCheck.exe [36864 2013-04-10] ()
HKCU\...\Run: [Snoozer] - C:\Users\CS\AppData\Roaming\Snz\Snz.exe [1137764 2013-08-28] ()
HKCU\...\Run: [Intermediate] - C:\Users\CS\AppData\Roaming\Intermediate\Intermediate.exe [36864 2013-04-10] ()
HKCU\...\Run: [OMESupervisor] - C:\Users\CS\AppData\Local\omesuperv.exe [2218359 2013-08-28] ()
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2010-12-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [111640 2010-07-23] ()
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2010624 2013-07-20] (Dominik Reichl)
HKU\Besucher\...\Run: [Duden Korrektor SysTray] - C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Besucher\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2010-11-22] (Hewlett-Packard Company)
HKU\Besucher\...\Policies\system: [LogonHoursAction] 2
HKU\Besucher\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Default\...\Run: [Duden Korrektor SysTray] - C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Stephie\...\Run: [Duden Korrektor SysTray] - C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Stephie\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2010-11-22] (Hewlett-Packard Company)
HKU\Stephie\...\Run: [IncrediMail] - C:\Program Files (x86)\IncrediMail\bin\IncMail.exe [444840 2013-08-02] (IncrediMail, Ltd.)
HKU\Stephie\...\Policies\system: [LogonHoursAction] 2
HKU\Stephie\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=OSDSRC
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.yd.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=686B90004E2B8D34&affID=119828&tt=040713_rdrctful&tsp=4935
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=OSDSRC
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} -  No File
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.66\npchrome_frame.dll (Google Inc.)
Toolbar: HKLM -  No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 -  No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
Toolbar: HKCU -  No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM {3234EB1E-733E-4E6A-A8AB-EBB6287E5A7E} hxxp://content.systemrequirementslab.com/bin/srldetect_intel64_4.5.15.0.cab
DPF: HKLM {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1263.cab
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect121.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.66\npchrome_frame.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @oberon-media.com/ONCAdapter - C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.14\npapicomadapter.dll (Oberon-Media )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\CS\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Extension: No Name - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\searchplugins
FF Extension: ftdownloader4 - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\ftdownloader4@ftdownloader.com.xpi
FF Extension: No Name - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\user.js
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
FF HKCU\...\Firefox\Extensions: [{c5114a67-795a-4dbb-8030-91a43e51c8bb}] - C:\Program Files (x86)\Lyrics_Monkey\131.xpi

Chrome:
=======
CHR HomePage: hxxp://www.bing.de/
CHR RestoreOnStartup: "hxxp://www.bing.com/?cc=de"
CHR DefaultSearchURL: (Bing) - hxxp://www.bing.com/search?setmkt=de-DE&q={searchTerms}
CHR DefaultSuggestURL: (Bing) - hxxp://api.bing.com/osjson.aspx?query={searchTerms}&language={language}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (GoogleChromeRemotePlugin) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\GoogleChromeRemotePlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\CS\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll No File
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\CS\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll No File
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\CS\AppData\Roaming\Mozilla\plugins\npo1d.dll No File
CHR Plugin: (iTunes Application Detector) - C:\IPod\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Unity Player) - C:\Users\CS\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.150.3) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (HP Product Detection Plugin) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aelbknmfcacjffmgnoaaonhgoghlmlkp\1.0.28.1_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0
CHR Extension: (OfferMosquito) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.6.1_0
CHR Extension: (Safe Money) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0
CHR Extension: (Virtual Keyboard) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.558_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: () - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofnnlhbgdcabppjmlijllkhekcglbjlg\1.131_0
CHR Extension: (Anti-Banner) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0
CHR HKLM-x32\...\Chrome\Extension: [bebnnlollpcjnfpkafhoclljaojgnfok] - C:\Program Files (x86)\FTDownloader.com\FTDownloader10.crx
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [ofnnlhbgdcabppjmlijllkhekcglbjlg] - C:\Program Files (x86)\Lyrics_Monkey\131.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
R2 lxdu_device; C:\Windows\system32\lxducoms.exe [1039360 2010-02-04] ( )
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2013-07-18] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-07-18] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [296448 2013-08-29] ()

==================== Drivers (Whitelisted) ====================

R2 cpuz135; C:\Windows\system32\drivers\cpuz135_x64.sys [21992 2011-09-21] (CPUID)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-09-16] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-09-16] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-09-16] (Kaspersky Lab ZAO)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-09-16] (Kaspersky Lab ZAO)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-17 18:57 - 2013-09-17 18:57 - 01950524 _____ (Farbar) C:\Users\CS\Downloads\FRST64.exe
2013-09-17 16:45 - 2013-09-17 16:45 - 00000000 ____D C:\Users\CS\AppData\Roaming\KeePass
2013-09-17 16:36 - 2013-09-17 16:36 - 00001109 _____ C:\Users\CS\Desktop\KeePass 2.lnk
2013-09-17 16:36 - 2013-09-17 16:36 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2013-09-17 16:35 - 2013-09-17 16:35 - 02513520 _____ (Dominik Reichl                                              ) C:\Users\CS\Downloads\KeePass-2.23-Setup.exe
2013-09-17 10:03 - 2013-09-17 13:16 - 168419899 _____ C:\Users\CS\Desktop\Windows-EasyTransfer - Elemente Quellcomputer17.092013.MIG
2013-09-17 10:00 - 2013-09-17 16:42 - 00000000 ___DC C:\Users\CS\AppData\Local\MigWiz
2013-09-17 09:19 - 2013-09-17 09:19 - 00000000 ____D C:\Users\CS\SystemRequirementsLab
2013-09-17 09:18 - 2013-09-17 09:18 - 00000000 ____D C:\ProgramData\Oracle
2013-09-17 09:14 - 2013-09-17 09:13 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-17 09:14 - 2013-09-17 09:13 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-17 09:14 - 2013-09-17 09:13 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-17 09:14 - 2013-09-17 09:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-17 09:13 - 2013-09-17 09:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-17 09:09 - 2013-09-17 09:09 - 00913832 _____ (Oracle Corporation) C:\Users\CS\Downloads\chromeinstall-7u40.exe
2013-09-16 21:24 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-09-16 21:24 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys
2013-09-16 21:24 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys
2013-09-16 21:23 - 2013-09-16 21:23 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-16 21:22 - 2013-09-16 22:15 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-16 21:22 - 2013-09-16 22:15 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-16 21:21 - 2013-09-16 21:23 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384 (1).exe
2013-09-16 21:18 - 2013-09-16 21:20 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384.exe
2013-09-16 20:51 - 2013-09-16 20:51 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree (1).exe
2013-09-16 20:51 - 2013-09-16 20:51 - 00000000 ____D C:\Program Files (x86)\iolo
2013-09-16 20:41 - 2013-09-16 20:44 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (2).exe
2013-09-16 20:40 - 2013-09-16 20:43 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (1).exe
2013-09-16 20:31 - 2013-09-16 20:33 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340.exe
2013-09-16 20:29 - 2013-09-16 20:29 - 00179984 _____ (Kaspersky Lab) C:\Users\CS\Downloads\kss12.0.1.117mlg_en-de_ru-de_fr-de_de-de.exe
2013-09-14 10:40 - 2013-09-14 10:40 - 36965680 _____ (Microsoft Corporation) C:\Users\CS\Downloads\IE9-Windows7-x64-deu.exe
2013-09-13 15:43 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\Documents\Password Depot
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\AppData\Roaming\AceBIT
2013-09-13 11:49 - 2013-09-13 11:51 - 00000000 ____D C:\Users\CS\Documents\Photoflitre
2013-09-13 11:36 - 2013-09-13 11:36 - 00000000 ____D C:\Program Files (x86)\AceBIT
2013-09-13 11:29 - 2013-09-13 11:30 - 00000000 ____D C:\Users\CS\Documents\Network Scanner 5.4.12
2013-09-12 20:27 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-12 20:27 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-12 20:27 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-12 20:27 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-12 20:27 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-12 20:27 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-12 20:27 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-12 20:27 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-12 20:27 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-12 20:27 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-12 20:27 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-12 20:27 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-12 20:27 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-12 20:27 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-12 20:27 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-12 20:27 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-12 20:27 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-12 20:27 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-12 20:27 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-12 20:27 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-12 20:27 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-12 20:27 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-12 20:27 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-12 20:27 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-12 20:27 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 00:04 - 2013-09-17 18:52 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-10 00:04 - 2013-09-16 21:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-10 00:04 - 2013-09-10 14:56 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2013-09-06 15:40 - 2013-09-06 15:40 - 00000000 ____D C:\Users\CS\Desktop\Besucher
2013-09-06 14:50 - 2013-09-06 14:54 - 423572207 _____ C:\Users\CS\Downloads\Windows6.1-KB947821-v28-x64.msu
2013-09-04 19:51 - 2013-09-04 19:51 - 00056943 _____ C:\Users\CS\Desktop\FRST.txt
2013-09-04 15:10 - 2013-09-04 15:10 - 00000000 ___DC C:\FRST
2013-09-04 15:06 - 2013-09-04 15:06 - 00000000 ____D C:\Users\CS\AppData\Roaming\DSite
2013-09-04 13:42 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-09-04 00:01 - 2013-09-04 00:08 - 330331616 _____ (MooSoft Development LLC                                    ) C:\Users\CS\Downloads\cleaner9_setup.exe
2013-09-03 12:57 - 2013-09-05 06:03 - 00000000 ____D C:\Users\CS\Desktop\HGL
2013-08-31 14:25 - 2013-08-31 14:25 - 00000000 ____D C:\Windows\system32\IO
2013-08-31 14:20 - 2013-08-31 14:22 - 00000000 ____D C:\Users\CS\AppData\Local\Avg2013
2013-08-30 16:52 - 2013-08-30 16:52 - 00001212 _____ C:\Users\CS\Desktop\Ashampoo Photo Card.lnk
2013-08-30 16:52 - 2013-08-30 16:52 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo
2013-08-30 16:51 - 2013-08-30 16:51 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2013-08-30 16:48 - 2013-08-30 16:49 - 200011368 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\CS\Downloads\ashampoo_photo_card_1.0.0_14061.exe
2013-08-30 05:22 - 2013-08-30 05:22 - 00042571 _____ C:\Users\CS\Documents\2012 - 2013.wlmp
2013-08-29 21:10 - 2013-08-30 15:57 - 00000000 ____D C:\Users\CS\AppData\Local\Ashampoo Photo Optimizer 4
2013-08-29 21:10 - 2013-08-29 21:10 - 00000000 ____D C:\Users\CS\AppData\Local\photoOptimizeHistoryDataBase
2013-08-29 21:08 - 2013-08-30 16:51 - 00000000 ____D C:\ProgramData\Ashampoo
2013-08-29 20:56 - 2013-08-29 21:09 - 49727466 _____ C:\Users\CS\Desktop\ICH LIEBE DICH.mp4
2013-08-29 18:13 - 2013-09-17 18:03 - 00000396 _____ C:\Windows\Tasks\Lyrics-Monkey Update.job
2013-08-29 18:13 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\Lyrics_Monkey
2013-08-29 18:13 - 2013-08-29 18:13 - 00003038 _____ C:\Windows\System32\Tasks\Lyrics-Monkey Update
2013-08-29 18:07 - 2013-08-29 18:07 - 00719984 _____ C:\Users\CS\Downloads\free-clever-privacy_1.0_de-DE.exe
2013-08-29 17:54 - 2013-08-29 17:54 - 00000000 ____D C:\Users\CS\AppData\Local\Software Updater
2013-08-29 14:50 - 2013-08-29 18:21 - 00000000 ____D C:\Users\CS\AppData\Local\Freemium
2013-08-29 14:49 - 2013-09-17 16:26 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-08-29 14:49 - 2013-09-17 16:26 - 00004124 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-08-29 14:49 - 2013-08-31 17:22 - 00003624 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-08-29 14:48 - 2013-09-03 23:13 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-29 14:48 - 2013-08-29 14:49 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-08-29 14:47 - 2013-08-29 18:10 - 00000000 ____D C:\Users\CS\AppData\Local\DownloadGuide
2013-08-29 14:38 - 2013-08-29 14:38 - 04454952 _____ (Piriform Ltd) C:\Users\CS\Downloads\ccsetup405.exe
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util.exe
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util (1).exe
2013-08-28 23:58 - 2013-09-17 08:03 - 00000000 ____D C:\ProgramData\iolo
2013-08-28 23:58 - 2013-08-28 23:58 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dat
2013-08-28 23:57 - 2013-08-28 23:57 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree.exe
2013-08-28 20:46 - 2013-08-28 20:46 - 02218359 _____ C:\Users\CS\AppData\Local\omesuperv.exe
2013-08-27 13:34 - 2013-09-17 09:08 - 00000000 ____D C:\Users\CS\Documents\512erUSB-Stick
2013-08-26 18:44 - 2013-08-26 18:44 - 02472864 _____ C:\Users\CS\Desktop\Tasse.cpr
2013-08-25 20:21 - 2013-08-26 14:18 - 00000000 ____D C:\Users\CS\Documents\Autoruns
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 16:06 - 2013-08-25 16:06 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.r5003.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 14:57 - 2013-08-28 22:44 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IncrediGames Games
2013-08-25 14:57 - 2013-08-25 14:57 - 00000000 ____D C:\Users\CS\AppData\Roaming\Playrix Entertainment
2013-08-25 14:55 - 2013-08-26 14:18 - 00000000 ____D C:\Program Files (x86)\GamesBar
2013-08-25 14:55 - 2013-08-25 14:55 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\fishdom3-510007712-setup.s510007712.c110009390.r5003.len.uff0781bc14185286bf7f0fa353d34d3ab99bf078.dl.exe
2013-08-24 22:05 - 2013-08-28 22:44 - 00000000 ____D C:\Program Files (x86)\Rossmann Fotowelt Software
2013-08-24 16:01 - 2013-08-24 16:01 - 00000000 ____D C:\Users\Stephie\Documents\Add-in Express
2013-08-24 15:18 - 2013-08-24 15:24 - 680525824 _____ C:\Users\Stephie\Downloads\ophcrack-vista-livecd-3.6.0.iso
2013-08-24 15:12 - 2013-09-08 11:11 - 00000000 ____D C:\Users\Stephie\AppData\Local\Windows Live
2013-08-24 15:08 - 2013-08-24 15:08 - 00000680 __RSH C:\Users\Stephie\ntuser.pol
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\Documents\Firefall
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\AppData\Local\Red 5 Studios
2013-08-23 19:21 - 2013-08-30 15:58 - 00000000 ____D C:\Program Files (x86)\Flaschbier_Total
2013-08-23 19:20 - 2013-08-23 19:21 - 26204499 _____ () C:\Users\CS\Downloads\Flaschbier_Total_Setup.exe
2013-08-23 18:59 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\Red 5 Studios
2013-08-23 18:59 - 2013-08-23 18:59 - 17831072 _____ C:\Users\CS\Downloads\FirefallInstaller.exe
2013-08-23 18:35 - 2013-09-10 14:56 - 00000000 ____D C:\ProgramData\DrivingSpeed2
2013-08-23 18:33 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\DrivingSpeed2
2013-08-23 18:30 - 2013-08-23 18:31 - 112069457 _____ (WheelSpin Studios                                          ) C:\Users\CS\Downloads\SetupDrivingSpeed2011.exe
2013-08-23 18:18 - 2013-08-26 14:13 - 00000432 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-08-20 20:00 - 2013-08-20 20:00 - 00012288 ___SH C:\Users\CS\Thumbs.db
2013-08-20 19:42 - 2013-08-20 19:42 - 00000000 ____D C:\Program Files\SystemRequirementsLab
2013-08-20 19:42 - 2013-08-20 19:42 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab
2013-08-18 11:32 - 2013-08-18 11:32 - 00001912 _____ C:\Windows\epplauncher.mif
2013-08-18 11:32 - 2013-08-18 11:32 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-08-18 11:32 - 2013-08-18 11:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client

==================== One Month Modified Files and Folders =======

2013-09-17 18:58 - 2012-12-31 01:05 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-17 18:57 - 2013-09-17 18:57 - 01950524 _____ (Farbar) C:\Users\CS\Downloads\FRST64.exe
2013-09-17 18:55 - 2011-02-20 02:38 - 01893045 _____ C:\Windows\WindowsUpdate.log
2013-09-17 18:52 - 2013-09-10 00:04 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-17 18:27 - 2013-07-16 21:22 - 00000916 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000UA.job
2013-09-17 18:17 - 2012-12-31 01:05 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-17 18:03 - 2013-08-29 18:13 - 00000396 _____ C:\Windows\Tasks\Lyrics-Monkey Update.job
2013-09-17 16:45 - 2013-09-17 16:45 - 00000000 ____D C:\Users\CS\AppData\Roaming\KeePass
2013-09-17 16:42 - 2013-09-17 10:00 - 00000000 ___DC C:\Users\CS\AppData\Local\MigWiz
2013-09-17 16:36 - 2013-09-17 16:36 - 00001109 _____ C:\Users\CS\Desktop\KeePass 2.lnk
2013-09-17 16:36 - 2013-09-17 16:36 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2013-09-17 16:35 - 2013-09-17 16:35 - 02513520 _____ (Dominik Reichl                                              ) C:\Users\CS\Downloads\KeePass-2.23-Setup.exe
2013-09-17 16:26 - 2013-08-29 14:49 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-09-17 16:26 - 2013-08-29 14:49 - 00004124 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-09-17 15:58 - 2013-01-22 11:02 - 00000000 ____D C:\System Recovery Files
2013-09-17 13:16 - 2013-09-17 10:03 - 168419899 _____ C:\Users\CS\Desktop\Windows-EasyTransfer - Elemente Quellcomputer17.092013.MIG
2013-09-17 10:30 - 2011-01-10 02:49 - 00700746 _____ C:\Windows\system32\perfh007.dat
2013-09-17 10:30 - 2011-01-10 02:49 - 00149696 _____ C:\Windows\system32\perfc007.dat
2013-09-17 10:30 - 2009-07-14 07:13 - 01621244 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-17 10:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-09-17 10:00 - 2013-08-11 20:00 - 00000000 ____D C:\Users\Besucher
2013-09-17 09:19 - 2013-09-17 09:19 - 00000000 ____D C:\Users\CS\SystemRequirementsLab
2013-09-17 09:19 - 2012-12-29 03:38 - 00000000 ____D C:\Users\CS
2013-09-17 09:18 - 2013-09-17 09:18 - 00000000 ____D C:\ProgramData\Oracle
2013-09-17 09:13 - 2013-09-17 09:14 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-17 09:13 - 2013-09-17 09:14 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-17 09:13 - 2013-09-17 09:14 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-17 09:13 - 2013-09-17 09:14 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-17 09:13 - 2013-09-17 09:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-17 09:13 - 2013-01-14 18:21 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-09-17 09:13 - 2011-01-09 19:06 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-17 09:09 - 2013-09-17 09:09 - 00913832 _____ (Oracle Corporation) C:\Users\CS\Downloads\chromeinstall-7u40.exe
2013-09-17 09:08 - 2013-08-27 13:34 - 00000000 ____D C:\Users\CS\Documents\512erUSB-Stick
2013-09-17 08:36 - 2012-12-29 11:13 - 00000000 ____D C:\Users\CS\AppData\Local\Windows Live
2013-09-17 08:03 - 2013-08-28 23:58 - 00000000 ____D C:\ProgramData\iolo
2013-09-17 07:44 - 2009-07-14 06:45 - 00023024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-17 07:44 - 2009-07-14 06:45 - 00023024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-17 07:41 - 2013-08-10 10:45 - 00000680 __RSH C:\Users\CS\ntuser.pol
2013-09-17 07:41 - 2012-12-31 01:05 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-17 07:36 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-16 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-16 22:15 - 2013-09-16 21:22 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-16 22:15 - 2013-09-16 21:22 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-16 22:15 - 2012-10-18 14:50 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-09-16 22:15 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2013-09-16 21:27 - 2013-07-16 21:22 - 00000894 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000Core.job
2013-09-16 21:23 - 2013-09-16 21:23 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-16 21:23 - 2013-09-16 21:21 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384 (1).exe
2013-09-16 21:23 - 2013-09-10 00:04 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-16 21:20 - 2013-09-16 21:18 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384.exe
2013-09-16 20:51 - 2013-09-16 20:51 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree (1).exe
2013-09-16 20:51 - 2013-09-16 20:51 - 00000000 ____D C:\Program Files (x86)\iolo
2013-09-16 20:44 - 2013-09-16 20:41 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (2).exe
2013-09-16 20:43 - 2013-09-16 20:40 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (1).exe
2013-09-16 20:33 - 2013-09-16 20:31 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340.exe
2013-09-16 20:29 - 2013-09-16 20:29 - 00179984 _____ (Kaspersky Lab) C:\Users\CS\Downloads\kss12.0.1.117mlg_en-de_ru-de_fr-de_de-de.exe
2013-09-16 15:43 - 2013-07-07 10:57 - 00000320 _____ C:\Windows\Tasks\HPCeeScheduleForCS.job
2013-09-15 17:55 - 2013-07-07 10:57 - 00003168 _____ C:\Windows\System32\Tasks\HPCeeScheduleForCS
2013-09-15 17:54 - 2012-12-30 11:18 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-09-14 10:58 - 2012-12-31 01:05 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-14 10:58 - 2012-12-31 01:05 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-14 10:58 - 2012-12-31 01:05 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-14 10:40 - 2013-09-14 10:40 - 36965680 _____ (Microsoft Corporation) C:\Users\CS\Downloads\IE9-Windows7-x64-deu.exe
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\Documents\Password Depot
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\AppData\Roaming\AceBIT
2013-09-13 11:51 - 2013-09-13 11:49 - 00000000 ____D C:\Users\CS\Documents\Photoflitre
2013-09-13 11:36 - 2013-09-13 11:36 - 00000000 ____D C:\Program Files (x86)\AceBIT
2013-09-13 11:30 - 2013-09-13 11:29 - 00000000 ____D C:\Users\CS\Documents\Network Scanner 5.4.12
2013-09-13 11:18 - 2013-02-17 17:03 - 00000000 ____D C:\Program Files (x86)\ProgDVB
2013-09-13 11:17 - 2013-08-07 23:51 - 00000000 ____D C:\Program Files (x86)\Oberon Media SIDR
2013-09-13 11:17 - 2012-12-29 11:09 - 01643172 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-13 11:14 - 2013-04-13 13:45 - 00007634 _____ C:\Users\CS\AppData\Local\Resmon.ResmonCfg
2013-09-13 10:15 - 2012-12-29 03:43 - 00000000 ___RD C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-13 10:15 - 2012-12-29 03:43 - 00000000 ___RD C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-13 10:14 - 2009-07-14 06:45 - 00433416 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-12 21:13 - 2013-08-05 19:44 - 00000000 ____D C:\Windows\system32\MRT
2013-09-12 21:11 - 2012-12-29 11:16 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-10 15:26 - 2012-12-29 04:14 - 00003212 _____ C:\Windows\System32\Tasks\HPCeeScheduleForCS-HP$
2013-09-10 15:26 - 2012-12-29 04:14 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForCS-HP$.job
2013-09-10 14:56 - 2013-09-10 00:04 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2013-09-10 14:56 - 2013-09-04 13:42 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-09-10 14:56 - 2013-08-29 18:13 - 00000000 ____D C:\Program Files (x86)\Lyrics_Monkey
2013-09-10 14:56 - 2013-08-23 18:59 - 00000000 ____D C:\Program Files (x86)\Red 5 Studios
2013-09-10 14:56 - 2013-08-23 18:35 - 00000000 ____D C:\ProgramData\DrivingSpeed2
2013-09-10 14:56 - 2013-08-23 18:33 - 00000000 ____D C:\Program Files (x86)\DrivingSpeed2
2013-09-10 14:56 - 2013-08-17 11:01 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Adobe
2013-09-10 14:56 - 2013-08-11 20:03 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Duden
2013-09-10 14:56 - 2013-08-11 20:01 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-10 14:56 - 2013-08-11 20:01 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-10 14:56 - 2013-08-11 20:01 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-09-10 14:56 - 2013-08-11 20:00 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-10 14:56 - 2013-08-11 20:00 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-10 14:56 - 2013-08-11 20:00 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Macromedia
2013-09-10 14:56 - 2013-07-31 18:54 - 00000000 ____D C:\Users\Stephie
2013-09-10 14:56 - 2013-07-06 14:26 - 00000000 ____D C:\Users\CS\AppData\Roaming\BabSolution
2013-09-10 14:56 - 2013-07-06 14:26 - 00000000 ____D C:\Program Files\CCleaner
2013-09-10 14:56 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2013-09-10 14:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-10 14:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-09-08 20:17 - 2011-02-20 11:25 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-09-08 11:11 - 2013-08-24 15:12 - 00000000 ____D C:\Users\Stephie\AppData\Local\Windows Live
2013-09-06 15:52 - 2012-12-30 00:39 - 00000000 ____D C:\Users\CS\AppData\Local\CrashDumps
2013-09-06 15:40 - 2013-09-06 15:40 - 00000000 ____D C:\Users\CS\Desktop\Besucher
2013-09-06 14:54 - 2013-09-06 14:50 - 423572207 _____ C:\Users\CS\Downloads\Windows6.1-KB947821-v28-x64.msu
2013-09-05 06:03 - 2013-09-03 12:57 - 00000000 ____D C:\Users\CS\Desktop\HGL
2013-09-04 19:51 - 2013-09-04 19:51 - 00056943 _____ C:\Users\CS\Desktop\FRST.txt
2013-09-04 15:10 - 2013-09-04 15:10 - 00000000 ___DC C:\FRST
2013-09-04 15:06 - 2013-09-04 15:06 - 00000000 ____D C:\Users\CS\AppData\Roaming\DSite
2013-09-04 00:08 - 2013-09-04 00:01 - 330331616 _____ (MooSoft Development LLC                                    ) C:\Users\CS\Downloads\cleaner9_setup.exe
2013-09-03 23:13 - 2013-08-29 14:48 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-31 20:34 - 2012-12-31 01:05 - 00000000 ____D C:\Users\CS\AppData\Local\Google
2013-08-31 17:22 - 2013-08-29 14:49 - 00003624 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-08-31 14:25 - 2013-08-31 14:25 - 00000000 ____D C:\Windows\system32\IO
2013-08-31 14:23 - 2013-05-12 17:24 - 00000000 ____D C:\Users\CS\AppData\Roaming\Mozilla
2013-08-31 14:22 - 2013-08-31 14:20 - 00000000 ____D C:\Users\CS\AppData\Local\Avg2013
2013-08-31 14:22 - 2012-12-29 04:22 - 00000000 ____D C:\ProgramData\MFAData
2013-08-30 19:25 - 2013-02-16 18:28 - 00000000 ___DC C:\sim_scan
2013-08-30 18:16 - 2012-12-30 00:03 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2013-08-30 18:14 - 2013-05-07 22:45 - 00000000 ____D C:\Users\CS\Documents\My Games
2013-08-30 16:52 - 2013-08-30 16:52 - 00001212 _____ C:\Users\CS\Desktop\Ashampoo Photo Card.lnk
2013-08-30 16:52 - 2013-08-30 16:52 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo
2013-08-30 16:51 - 2013-08-30 16:51 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2013-08-30 16:51 - 2013-08-29 21:08 - 00000000 ____D C:\ProgramData\Ashampoo
2013-08-30 16:49 - 2013-08-30 16:48 - 200011368 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\CS\Downloads\ashampoo_photo_card_1.0.0_14061.exe
2013-08-30 16:02 - 2013-05-04 20:42 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-30 15:58 - 2013-08-23 19:21 - 00000000 ____D C:\Program Files (x86)\Flaschbier_Total
2013-08-30 15:57 - 2013-08-29 21:10 - 00000000 ____D C:\Users\CS\AppData\Local\Ashampoo Photo Optimizer 4
2013-08-30 05:22 - 2013-08-30 05:22 - 00042571 _____ C:\Users\CS\Documents\2012 - 2013.wlmp
2013-08-29 21:10 - 2013-08-29 21:10 - 00000000 ____D C:\Users\CS\AppData\Local\photoOptimizeHistoryDataBase
2013-08-29 21:09 - 2013-08-29 20:56 - 49727466 _____ C:\Users\CS\Desktop\ICH LIEBE DICH.mp4
2013-08-29 18:21 - 2013-08-29 14:50 - 00000000 ____D C:\Users\CS\AppData\Local\Freemium
2013-08-29 18:13 - 2013-08-29 18:13 - 00003038 _____ C:\Windows\System32\Tasks\Lyrics-Monkey Update
2013-08-29 18:10 - 2013-08-29 14:47 - 00000000 ____D C:\Users\CS\AppData\Local\DownloadGuide
2013-08-29 18:07 - 2013-08-29 18:07 - 00719984 _____ C:\Users\CS\Downloads\free-clever-privacy_1.0_de-DE.exe
2013-08-29 17:54 - 2013-08-29 17:54 - 00000000 ____D C:\Users\CS\AppData\Local\Software Updater
2013-08-29 15:29 - 2013-02-04 13:13 - 00000000 ____D C:\Users\CS\Documents\Scans
2013-08-29 14:49 - 2013-08-29 14:48 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-08-29 14:38 - 2013-08-29 14:38 - 04454952 _____ (Piriform Ltd) C:\Users\CS\Downloads\ccsetup405.exe
2013-08-29 14:37 - 2013-08-10 10:28 - 00000000 ____D C:\Users\CS\Documents\Treiber&Sicherungen
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util.exe
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util (1).exe
2013-08-28 23:58 - 2013-08-28 23:58 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dat
2013-08-28 23:57 - 2013-08-28 23:57 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree.exe
2013-08-28 23:52 - 2013-07-11 16:11 - 00000000 ____D C:\Users\CS\AppData\Roaming\Intermediate
2013-08-28 22:44 - 2013-08-25 14:57 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IncrediGames Games
2013-08-28 22:44 - 2013-08-24 22:05 - 00000000 ____D C:\Program Files (x86)\Rossmann Fotowelt Software
2013-08-28 22:44 - 2013-08-07 23:51 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Incredigames DE
2013-08-28 22:44 - 2013-08-07 23:49 - 00000000 ____D C:\ProgramData\Oberon Media
2013-08-28 22:44 - 2012-12-31 01:05 - 00000000 ____D C:\Program Files\Google
2013-08-28 22:44 - 2012-12-31 01:05 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-28 22:44 - 2011-02-20 02:37 - 00000000 ____D C:\Windows\SysWOW64\sda
2013-08-28 22:44 - 2011-01-09 18:53 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2013-08-28 22:44 - 2011-01-09 18:45 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-08-28 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Recovery
2013-08-28 22:43 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\SysWOW64\WindowsPowerShell
2013-08-28 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\spp
2013-08-28 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Speech
2013-08-28 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\NetworkList
2013-08-28 20:46 - 2013-08-28 20:46 - 02218359 _____ C:\Users\CS\AppData\Local\omesuperv.exe
2013-08-26 18:45 - 2013-07-22 20:39 - 00000000 ____D C:\Users\CS\Documents\pdf.Dateien
2013-08-26 18:44 - 2013-08-26 18:44 - 02472864 _____ C:\Users\CS\Desktop\Tasse.cpr
2013-08-26 14:18 - 2013-08-25 20:21 - 00000000 ____D C:\Users\CS\Documents\Autoruns
2013-08-26 14:18 - 2013-08-25 14:55 - 00000000 ____D C:\Program Files (x86)\GamesBar
2013-08-26 14:18 - 2013-08-07 23:51 - 00000000 ____D C:\Users\CS\AppData\Roaming\Oberon Media
2013-08-26 14:18 - 2012-12-29 14:12 - 00000000 ____D C:\Users\CS\Documents\Youcam
2013-08-26 14:13 - 2013-08-23 18:18 - 00000432 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 16:06 - 2013-08-25 16:06 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.r5003.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 14:57 - 2013-08-25 14:57 - 00000000 ____D C:\Users\CS\AppData\Roaming\Playrix Entertainment
2013-08-25 14:55 - 2013-08-25 14:55 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\fishdom3-510007712-setup.s510007712.c110009390.r5003.len.uff0781bc14185286bf7f0fa353d34d3ab99bf078.dl.exe
2013-08-24 21:40 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-24 16:01 - 2013-08-24 16:01 - 00000000 ____D C:\Users\Stephie\Documents\Add-in Express
2013-08-24 15:24 - 2013-08-24 15:18 - 680525824 _____ C:\Users\Stephie\Downloads\ophcrack-vista-livecd-3.6.0.iso
2013-08-24 15:08 - 2013-08-24 15:08 - 00000680 __RSH C:\Users\Stephie\ntuser.pol
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\Documents\Firefall
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\AppData\Local\Red 5 Studios
2013-08-23 19:21 - 2013-08-23 19:20 - 26204499 _____ () C:\Users\CS\Downloads\Flaschbier_Total_Setup.exe
2013-08-23 19:00 - 2013-05-07 18:29 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-08-23 19:00 - 2012-12-29 04:07 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-08-23 18:59 - 2013-08-23 18:59 - 17831072 _____ C:\Users\CS\Downloads\FirefallInstaller.exe
2013-08-23 18:31 - 2013-08-23 18:30 - 112069457 _____ (WheelSpin Studios                                          ) C:\Users\CS\Downloads\SetupDrivingSpeed2011.exe
2013-08-22 18:08 - 2013-01-12 14:46 - 00000000 ____D C:\Users\CS\AppData\Roaming\Skype
2013-08-22 15:16 - 2012-10-28 17:23 - 00000000 ____D C:\Users\CS\Documents\Lebenslauf
2013-08-20 20:00 - 2013-08-20 20:00 - 00012288 ___SH C:\Users\CS\Thumbs.db
2013-08-20 19:59 - 2013-01-25 19:12 - 00079360 ___SH C:\Users\CS\Documents\Thumbs.db
2013-08-20 19:42 - 2013-08-20 19:42 - 00000000 ____D C:\Program Files\SystemRequirementsLab
2013-08-20 19:42 - 2013-08-20 19:42 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab
2013-08-18 11:32 - 2013-08-18 11:32 - 00001912 _____ C:\Windows\epplauncher.mif
2013-08-18 11:32 - 2013-08-18 11:32 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-08-18 11:32 - 2013-08-18 11:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-08-18 11:06 - 2013-02-04 13:11 - 00000000 ____D C:\Users\CS\Documents\Bewerbungen

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-14 16:28

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

FRST Additions Logfile:
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-09-2013 03
Ran by CS at 2013-09-17 19:00:40
Running from C:\Users\CS\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3)
Adobe AIR (x32 Version: 3.5.0.880)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.174)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Reader 9.5.5 MUI (x32 Version: 9.5.5)
Adobe Shockwave Player 11.5 (x32 Version: 11.5.8.612)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95)
A-Men Technologies USB-to-Serial (x32)
Apple Software Update (x32 Version: 2.1.3.127)
Ashampoo Photo Card v.1.0.0 (x32 Version: 1.0.0)
ATI Catalyst Install Manager (Version: 3.0.804.0)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95)
Beware Planet Earth! (x32)
Bing Bar (x32 Version: 7.2.241.0)
Bing-Desktop (x32 Version: 1.3.171.0)
Blasterball 3 (x32 Version: 2.2.0.95)
Bounce Symphony (x32 Version: 2.2.0.95)
Build-a-Lot - The Elizabethan Era (x32 Version: 2.2.0.95)
Cake Mania (x32 Version: 2.2.0.95)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.1217.1530.27758)
Catalyst Control Center InstallProxy (x32 Version: 2010.1217.1530.27758)
Catalyst Control Center Localization All (x32 Version: 2010.1217.1530.27758)
Catalyst Control Center Profiles Mobile (x32 Version: 2010.1217.1530.27758)
CCC Help Chinese Standard (x32 Version: 2010.1217.1529.27758)
CCC Help Chinese Traditional (x32 Version: 2010.1217.1529.27758)
CCC Help Czech (x32 Version: 2010.1217.1529.27758)
CCC Help Danish (x32 Version: 2010.1217.1529.27758)
CCC Help Dutch (x32 Version: 2010.1217.1529.27758)
CCC Help English (x32 Version: 2010.1217.1529.27758)
CCC Help Finnish (x32 Version: 2010.1217.1529.27758)
CCC Help French (x32 Version: 2010.1217.1529.27758)
CCC Help German (x32 Version: 2010.1217.1529.27758)
CCC Help Greek (x32 Version: 2010.1217.1529.27758)
CCC Help Hungarian (x32 Version: 2010.1217.1529.27758)
CCC Help Italian (x32 Version: 2010.1217.1529.27758)
CCC Help Japanese (x32 Version: 2010.1217.1529.27758)
CCC Help Korean (x32 Version: 2010.1217.1529.27758)
CCC Help Norwegian (x32 Version: 2010.1217.1529.27758)
CCC Help Polish (x32 Version: 2010.1217.1529.27758)
CCC Help Portuguese (x32 Version: 2010.1217.1529.27758)
CCC Help Russian (x32 Version: 2010.1217.1529.27758)
CCC Help Spanish (x32 Version: 2010.1217.1529.27758)
CCC Help Swedish (x32 Version: 2010.1217.1529.27758)
CCC Help Thai (x32 Version: 2010.1217.1529.27758)
ccc-core-static (x32 Version: 2010.1217.1530.27758)
ccc-utility64 (Version: 2010.1217.1530.27758)
CCleaner (Version: 4.05)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
CPUID HWMonitor 1.19
CyberLink DVD Suite (x32 Version: 7.0.3525)
CyberLink YouCam (x32 Version: 3.2.1.3922)
D3DX10 (x32 Version: 15.4.2368.0902)
DC Universe Online Live (HKCU)
DC Universe Online PSG (HKCU Version: 1.0.3.183)
Desktop Icon für Amazon (Version: 1.0.1 (de))
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95)
Driving Speed 2.0 (x32)
Duden Korrektor Patch 022010 (x32 Version: 7.00.0000)
Duden Korrektor Standard (x32 Version: 7.00.0000)
ElsterFormular (x32 Version: 14.0.0.10899)
Energy Star Digital Logo (x32 Version: 1.0.1)
ESU for Microsoft Windows 7 (x32 Version: 1.0.0)
Facebook Messenger 2.1.4814.0 (x32 Version: 2.1.4814.0)
Farm Frenzy (x32 Version: 2.2.0.95)
FATE (x32 Version: 2.2.0.95)
Fishdom 3 (x32)
Fotogalerie (x32 Version: 16.4.3505.0912)
Free YouTube to MP3 Converter version 3.11.34.1015 (x32 Version: 3.11.34.1015)
Google Chrome (x32 Version: 29.0.1547.66)
Google Chrome Frame (x32 Version: 65.119.71)
Google Earth (x32 Version: 7.1.1.1888)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752)
Google Update Helper (x32 Version: 1.3.21.153)
GSM SIM Utility 9.0 (x32)
HP Auto (Version: 1.0.12494.3472)
HP Client Services (Version: 1.0.12656.3472)
HP CloudDrive (x32)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7)
HP Documentation (x32 Version: 1.1.0.0)
HP Game Console (x32)
HP Games (x32 Version: 1.0.1.5)
HP On Screen Display (x32 Version: 1.3.5)
HP Power Manager (x32 Version: 1.1.2)
HP Product Detection (x32 Version: 11.15.0009)
HP Quick Launch (x32 Version: 2.7.2)
HP Setup (x32 Version: 8.4.4487.3576)
HP Setup Manager (x32 Version: 1.0.12845.3522)
HP Software Framework (x32 Version: 4.6.10.1)
HP Support Assistant (x32 Version: 5.1.11.1)
HP Wireless Assistant (Version: 4.0.10.0)
HPAsset component for HP Active Support Library (x32 Version: 3.0.2.2)
HTC BMP USB Driver (x32 Version: 1.0.5375)
HTC Driver Installer (x32 Version: 4.0.1.001)
HTC Sync (x32 Version: 3.3.21)
Huge Pine USB to UART Driver  (x32 Version: 1.90)
IDT Audio (x32 Version: 1.0.6365.0)
IncrediMail (x32 Version: 6.6.0.5273)
IncrediMail 2.5 (x32 Version: 6.6.0.5273)
Insaniquarium Deluxe (x32 Version: 2.2.0.95)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Display Audio Driver (x32 Version: 6.14.00.3074)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (x32 Version: 10.0.0.1046)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.02.00.1002)
IPTInstaller (x32 Version: 4.0.8)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
Jewel Quest II (x32 Version: 2.2.0.95)
Jewel Quest Solitaire (x32 Version: 2.2.0.95)
John Deere Drive Green (x32 Version: 2.2.0.95)
Junk Mail filter update (x32 Version: 16.4.3505.0912)
Kaspersky PURE 3.0 (x32 Version: 13.0.2.558)
KeePass Password Safe 2.23 (x32)
K-Lite Codec Pack 6.0.4 (Basic) (x32 Version: 6.0.4)
LabelPrint (x32 Version: 2.5.3429)
Lexmark  (x32 Version: 1.0.0.0)
Lexmark 5600-6600 Series
LightScribe System Software (x32 Version: 1.18.20.1)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Outlook Connector für soziale Netzerker 32-Bit (x32 Version: 14.0.4763.1001)
Microsoft Outlook Social Connector Provider for Facebook 32-bit (x32 Version: 14.0.6114.5003)
Microsoft Security Client (Version: 4.3.0216.0)
Microsoft Security Essentials (Version: 4.3.216.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SkyDrive (HKCU Version: 17.0.2006.0314)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft_VC100_CRT_x86 (x32 Version: 1.0.0)
Movie Maker (x32 Version: 16.4.3505.0912)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Need for Speed™ SHIFT (x32 Version: 1.0.0.0)
Need For Speed™ World (x32 Version: 1.0.0.1229)
NVIDIA PhysX (x32 Version: 9.10.0513)
PDF24 Creator 5.2.0 (x32)
Penguins! (x32 Version: 2.2.0.95)
Photo Gallery (x32 Version: 16.4.3505.0912)
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009)
PictureMover (x32 Version: 3.5.0.35)
PL-2303 USB-to-Serial (x32)
Plants vs. Zombies (x32 Version: 2.2.0.95)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Polar Bowler (x32 Version: 2.2.0.95)
Power2Go (x32 Version: 6.1.4725)
PX Profile Update (x32 Version: 1.00.1.)
Ralink RT5390 802.11b/g/n WiFi Adapter (x32 Version: 3.1.13.1)
Raptor - Call of the Shadow (x32)
Realtek Ethernet Controller Driver (x32 Version: 7.48.823.2011)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.85)
Recovery Manager (x32 Version: 1.0.22)
Rossmann Fotowelt Software 4.12.1 (x32 Version: 4.12.1)
Skype™ 6.6 (x32 Version: 6.6.106)
Slingo Deluxe (x32 Version: 2.2.0.95)
swMSM (x32 Version: 12.0.0.1)
Synaptics TouchPad Driver (Version: 15.3.29.0)
System Requirements Lab for Intel (64-bit) (Version: 4.5.15.0)
System Requirements Lab for Intel (x32 Version: 4.5.13.0)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2768023) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817642) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
Wedding Dash (x32 Version: 2.2.0.95)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live Family Safety (Version: 16.4.3505.0912)
Windows Live Family Safety (x32 Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Mail (x32 Version: 16.4.3505.0912)
Windows Live Messenger (x32 Version: 16.4.3505.0912)
Windows Live MIME IFilter (Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Windows Live Writer (x32 Version: 16.4.3505.0912)
Windows Live Writer Resources (x32 Version: 16.4.3505.0912)
YouTube Song Downloader (x32 Version: 8.2)
Zuma Deluxe (x32 Version: 2.2.0.95)

==================== Restore Points  =========================

10-09-2013 17:05:09 Windows Update
12-09-2013 19:08:27 Windows Update
13-09-2013 09:19:50 Windows Modules Installer
13-09-2013 10:07:19 Windows Update
13-09-2013 13:29:43 Windows Modules Installer
13-09-2013 13:44:01 Windows Update
14-09-2013 00:43:24 Windows Update
14-09-2013 12:19:15 Windows Update
14-09-2013 20:37:24 Windows Update
15-09-2013 15:59:48 Windows Update
16-09-2013 19:39:41 Microsoft Antimalware Checkpoint
17-09-2013 01:00:13 Windows Update
17-09-2013 07:11:42 Installed Java 7 Update 40
17-09-2013 08:27:24 Windows-Sicherung

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {092E9F9F-FA28-41B1-83A3-C1B1A389F22C} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-03-23] (CyberLink)
Task: {09D24F43-E12E-4C16-A5CB-75AEC570C785} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-31] (Google Inc.)
Task: {235CBA31-4677-4215-B0B8-3CE95ED1D696} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {23E7221F-F05F-4C44-96B8-C7766B65E62A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\GetAssistance Maintenance Events => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\HPSAObjUtil.exe [2013-08-20] (HP)
Task: {2EE817F9-28D9-4E74-AA0E-F313DE81FD9F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-12-01] (Hewlett-Packard Company)
Task: {2F4D9319-239E-48DB-9965-05503F572FA3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-31] (Google Inc.)
Task: {3828BFAE-0B9C-47C1-95BF-2D9EC8543267} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000Core => C:\Users\CS\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-16] (Facebook Inc.)
Task: {43354AF2-0015-4DA6-8D8A-AEE102446A4F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-14] (Adobe Systems Incorporated)
Task: {4E943DE4-76AE-4F5A-BBF1-66DBEA7AA401} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-09-11] ()
Task: {566B5194-E66F-40C4-B304-00D7EC269F2A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {5C9A6B49-7C4B-4B47-B680-A35E61A5A646} - System32\Tasks\{140738C7-8916-4A72-AA5A-F5AE27197C01} => Chrome.exe hxxp://ui.skype.com/ui/0/6.3.73.105.456/de/abandoninstall?page=tsProgressBar
Task: {6E892E94-D066-4E99-9B9A-3A180B4F54D4} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {719EE7C5-B844-4558-97EB-B808EBC46E1E} - System32\Tasks\Lyrics-Monkey Update => C:\Program Files (x86)\Lyrics_Monkey\LyrMonkeyUpd.exe
Task: {876D923B-83FD-4B48-9496-DDBB7CCAEEF4} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)
Task: {918A3A17-7AD6-4275-A894-1C9683018644} - System32\Tasks\{A77E54F3-6716-4EA5-A678-729F2D84F19B} => Chrome.exe hxxp://ui.skype.com/ui/0/6.3.73.105.456/de/abandoninstall?page=tsProgressBar
Task: {A5A01014-8DAC-4E80-A171-F86DEAD2AB44} - System32\Tasks\{CD514A13-DB3B-4238-8530-27DC8D25FC25} => Chrome.exe hxxp://ui.skype.com/ui/0/6.3.73.105.456/de/abandoninstall?page=tsProgressBar
Task: {A9CBE16B-A396-4274-AD72-5DF7B838FB6C} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-08-23] ()
Task: {AB4A6674-D136-4B1C-80E9-A60EB9AACF91} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {B16D24DC-5EA9-40DD-97E1-BC908992AD2D} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {B8FE2DC6-B983-4A8C-9380-8199C079B901} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {BD00E107-A9A5-4439-B65C-96DEECDFC618} - System32\Tasks\Freemium1ClickMaint => C:\Users\CS\Desktop\1Click.exe
Task: {C06E8818-35AB-495C-920D-E731B4B6C3BB} - System32\Tasks\ROC_REG_JAN_DELETE => C:\ProgramData\AVG January 2013 Campaign\ROC.exe [2013-01-17] ()
Task: {CF2B93F8-D258-4743-AFFB-45D8FDF8BBBE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-12-01] (Hewlett-Packard Company)
Task: {D249263E-894C-4F6C-A62C-E4E67497F1B8} - System32\Tasks\SuperEasyDriverUpdaterRunAtStartup => C:\Program Files (x86)\SuperEasy Software\Driver Updater\supereasydu.exe
Task: {D57D4F1C-10CE-4A7B-A758-C907949BC7B7} - System32\Tasks\Installation App Launcher => C:\Program Files (x86)\Lexmark 5600-6600 Series\lxduamon.exe [2010-02-04] ()
Task: {E652AA9E-2DA9-4750-882A-392CD87CFBE9} - System32\Tasks\EPUpdater => C:\Users\CS\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-06-06] ()
Task: {E687689B-4A6E-4D9B-9301-2D64BFDAE81D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2013-08-20] (Microsoft)
Task: {E90A3961-EDE5-45BD-80CE-39F0E639311C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation)
Task: {EA7F48D6-29AC-46E5-B46E-51F22F9CC801} - System32\Tasks\HPCeeScheduleForCS => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {EF172DED-D3A2-4067-AF5D-2FFB6C428D64} - System32\Tasks\HPCeeScheduleForCS-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {F5791B96-392B-4A62-B6C7-4C22EEFA5A9F} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000UA => C:\Users\CS\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-16] (Facebook Inc.)
Task: {FB0EF78B-7AA4-4D29-8B66-E2F1FF53FDAF} - System32\Tasks\SuperEasyDriverUpdater_UPDATES => C:\Program Files (x86)\SuperEasy Software\Driver Updater\supereasydu.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000Core.job => C:\Users\CS\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000UA.job => C:\Users\CS\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForCS-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForCS.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\Lyrics-Monkey Update.job => C:\Program Files (x86)\Lyrics_Monkey\LyrMonkeyUpd.exe
Task: C:\Windows\Tasks\ROC_REG_JAN_DELETE.job => C:\ProgramData\AVG January 2013 Campaign\ROC.exe
Task: C:\Windows\Tasks\SuperEasyDriverUpdater_UPDATES.job => C:\Program Files (x86)\SuperEasy Software\Driver Updater\supereasydu.exe

==================== Loaded Modules (whitelisted) =============

2013-03-19 17:18 - 2013-03-19 17:18 - 00261704 _____ (Microsoft Corporation) C:\Users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll
2013-03-19 17:18 - 2013-03-19 17:18 - 00661448 _____ (Microsoft Corporation) C:\Users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\MSVCP110.dll
2013-03-19 17:18 - 2013-03-19 17:18 - 00828872 _____ (Microsoft Corporation) C:\Users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\MSVCR110.dll
2010-11-10 00:16 - 2010-11-10 00:16 - 02238976 _____ (Versionate Inc.) C:\Program Files (x86)\Hewlett-Packard\HP CloudDrive\ShellExt64.dll
2012-12-20 18:22 - 2012-12-20 18:22 - 00492040 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll
2010-11-29 06:46 - 2010-11-29 06:46 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2012-12-20 18:22 - 2012-12-20 18:22 - 00189960 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\prremote.dll
2012-12-20 18:22 - 2013-09-16 22:03 - 00483008 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\prloader.dll
2010-11-29 06:34 - 2010-11-29 06:34 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-12-17 04:26 - 2011-10-14 05:35 - 00415528 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2011-10-14 05:35 - 2011-10-14 05:35 - 00226600 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2011-10-14 05:35 - 2011-10-14 05:35 - 10584360 _____ (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPRes.dll
2013-01-06 14:27 - 2011-09-08 06:42 - 04113408 _____ (IDT, Inc.) C:\Program Files\IDT\WDM\STLang64.dll
2013-01-06 14:27 - 2011-09-08 06:42 - 00655872 _____ (IDT, Inc.) C:\Windows\system32\stapi64.dll
2009-01-20 14:51 - 2009-01-20 14:51 - 00007168 _____ ( ) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atixclib.dll
2010-12-17 16:29 - 2010-12-17 16:29 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2010-12-02 11:09 - 2010-12-02 11:09 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2012-12-30 03:37 - 2008-02-21 06:15 - 00065536 _____ (Lexmark International) C:\Windows\system32\lxducfg.dll
2012-12-30 03:38 - 2010-02-04 05:52 - 00380928 _____ () C:\Program Files (x86)\Lexmark 5600-6600 Series\lxduscw.dll
2012-12-30 03:38 - 2010-02-04 05:36 - 00188416 _____ () C:\Program Files (x86)\Lexmark 5600-6600 Series\lxdudatr.dll
2012-12-30 03:38 - 2010-02-04 05:35 - 00073728 _____ () C:\Program Files (x86)\Lexmark 5600-6600 Series\lxducats.dll
2012-12-30 03:38 - 2010-02-04 05:52 - 01036288 _____ () C:\Program Files (x86)\Lexmark 5600-6600 Series\lxduDRS.dll
2012-12-30 03:38 - 2010-02-04 05:52 - 00081920 _____ () C:\Program Files (x86)\Lexmark 5600-6600 Series\lxducaps.dll
2012-12-30 03:38 - 2010-02-04 05:35 - 00069632 _____ () C:\Program Files (x86)\Lexmark 5600-6600 Series\lxducnv4.dll
2012-12-30 03:38 - 2010-02-04 05:52 - 00954368 _____ (Lexmark R&D Corp.) C:\Program Files (x86)\Lexmark 5600-6600 Series\lxdumonr.dll
2012-12-30 03:38 - 2010-02-04 05:53 - 00761856 _____ ( ) C:\Program Files (x86)\Lexmark 5600-6600 Series\lxducomc.dll
2012-12-30 03:38 - 2010-01-21 06:09 - 00028672 _____ () C:\Program Files (x86)\Lexmark 5600-6600 Series\App4R.Monitor.Common.dll
2012-12-30 03:38 - 2010-01-21 06:09 - 00036864 _____ () C:\Program Files (x86)\Lexmark 5600-6600 Series\App4R.Monitor.Core.dll
2012-12-30 03:38 - 2010-01-21 06:08 - 00065536 _____ () C:\Program Files (x86)\Lexmark 5600-6600 Series\app4r.devmons.mcmdevmon.dll
2012-12-30 03:38 - 2008-03-25 04:53 - 00012288 _____ () C:\Program Files (x86)\Lexmark 5600-6600 Series\app4r.devmons.mcmdevmon.autoplayutil.dll
2013-08-18 10:34 - 2013-08-18 10:34 - 00475136 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\ebdb3050959d9be47d33d2c77d6cc291\IAStorUtil.ni.dll
2013-08-02 11:11 - 2013-08-02 11:11 - 00014336 _____ (Intel Corp.) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\34002b75cd0faab68bf8079299c1aa46\IAStorCommon.ni.dll
2012-12-20 18:20 - 2013-09-16 22:01 - 00083648 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ushata.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00013832 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avpinit.dll
2013-03-06 20:01 - 2013-09-16 22:01 - 00834240 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avpmain.dll
2012-12-20 18:19 - 2013-09-16 22:01 - 00097984 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\fssync.DLL
2012-12-20 18:19 - 2012-12-20 18:19 - 00149000 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\DumpWriter.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00612872 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\service.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00160776 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\prremote.DLL
2012-12-20 18:20 - 2013-09-16 22:01 - 00353472 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\prloader.dll
2012-12-20 18:21 - 2012-12-20 18:21 - 00114184 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\nfio.ppl
2012-12-20 18:21 - 2012-12-20 18:21 - 00022024 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\fsdrvplg.ppl
2012-12-20 18:22 - 2012-12-20 18:22 - 00039432 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\winreg.ppl
2012-12-20 18:21 - 2012-12-20 18:21 - 00049672 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\pxstub.ppl
2012-12-20 18:21 - 2013-09-16 22:02 - 01390272 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\params.ppl
2012-12-20 18:19 - 2012-12-20 18:19 - 01102856 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\app_core_legacy.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00609288 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\key_value_storage.DLL
2012-12-20 18:20 - 2012-12-20 18:20 - 00253960 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\updater_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00127496 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\content_filtering_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00283656 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\am_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00435208 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ac_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00363528 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\app_core_meta.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00826376 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\product_metainfo.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00209416 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\plugins_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00324104 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ksn_meta.dll
2013-03-06 20:01 - 2013-03-06 20:01 - 00255344 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ucp_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00258056 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\eka_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00184328 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\klifpp_meta.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00098312 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\instrumental_meta.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00141320 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\pure_metainfo.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00396296 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\storage.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00036872 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avpservice.dll
2013-03-06 20:01 - 2013-09-16 22:01 - 06974656 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avpgui.ppl
2012-12-20 18:20 - 2012-12-20 18:20 - 02321928 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtCore4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 02289672 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtDeclarative4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 01297416 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtScript4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00182792 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtSql4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 07270408 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtGui4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 02052104 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtNetwork4.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00479752 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\dblite.dll
2013-03-06 20:01 - 2013-09-16 22:01 - 02176704 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\basegui.ppl
2012-12-20 18:22 - 2013-09-16 22:02 - 00040640 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\thpimpl.ppl
2012-12-20 18:19 - 2012-12-20 18:19 - 00086536 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\memmon.dll
2012-12-20 18:19 - 2012-12-20 18:19 - 00658440 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\localization_manager.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00312840 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\parental_control_gui.dll
2012-12-20 18:21 - 2012-12-20 18:21 - 00018952 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\hashmd5.ppl
2012-12-20 18:20 - 2012-12-20 18:20 - 00068616 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtWebKit\qmlwebkitplugin4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 12865032 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\QtWebKit4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00034824 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\imageformats\qgif4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00037384 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\imageformats\qico4.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00189960 _____ (Digia Plc) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\imageformats\qjpeg4.dll
2012-12-20 18:21 - 2012-12-20 18:21 - 00089096 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\propmap.ppl
2013-03-19 17:18 - 2013-03-19 17:18 - 00222808 _____ (Microsoft Corporation) C:\Users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\SkyDriveShell.dll
2013-03-19 17:17 - 2013-03-19 17:17 - 00534480 _____ (Microsoft Corporation) C:\Users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\MSVCP110.dll
2013-03-19 17:17 - 2013-03-19 17:17 - 00862664 _____ (Microsoft Corporation) C:\Users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\MSVCR110.dll
2013-03-19 17:17 - 2013-03-19 17:17 - 00542808 _____ (Microsoft Corporation) C:\Users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\Telemetry.dll
2013-03-19 17:17 - 2013-03-19 17:17 - 00039512 _____ (Microsoft Corporation) C:\Users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\logging.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00459784 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll
2012-12-20 18:21 - 2012-12-20 18:21 - 00033288 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\winlibhlpr.ppl
2012-09-12 16:57 - 2012-09-12 16:57 - 00282112 _____ () C:\Program Files (x86)\Windows Live\Writer\de\WindowsLive.Writer.Localization.resources.dll
2012-12-20 18:20 - 2013-09-16 22:01 - 00352448 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\office_antivirus.dll
2012-12-20 18:20 - 2012-12-20 18:20 - 00160776 _____ (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\prremote.dll
2013-09-04 04:19 - 2013-09-02 22:35 - 00709584 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\libglesv2.dll
2013-09-04 04:19 - 2013-09-02 22:35 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\libegl.dll
2013-09-04 04:19 - 2013-09-02 22:35 - 04053456 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll
2013-09-04 04:19 - 2013-09-02 22:35 - 00410576 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll
2013-09-04 04:19 - 2013-09-02 22:35 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll
2013-09-04 04:19 - 2013-09-02 22:35 - 13599184 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) ==========

AlternateDataStreams: C:\ProgramData\Temp:337A8F60
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:48F2388B
AlternateDataStreams: C:\ProgramData\Temp:53E48751
AlternateDataStreams: C:\ProgramData\Temp:D0A51CB8
AlternateDataStreams: C:\ProgramData\Temp:E16625C0


==================== Faulty Device Manager Devices =============

Name: Ralink RT5390 802.11b/g/n WiFi Adapter
Description: Ralink RT5390 802.11b/g/n WiFi Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Ralink Technology, Corp.
Service: netr28x
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/17/2013 00:30:26 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/16/2013 10:37:34 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/16/2013 09:39:41 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
  Generatordaten werden gesammelt

Kontext:
  Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
  Generatorname: System Writer
  Generatorinstanz-ID: {7cc538ae-dc08-4e0c-bb07-7ba86dfa92b1}

Error: (09/16/2013 03:53:46 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "G:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (09/14/2013 03:33:46 PM) (Source: Windows Search Service) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (09/14/2013 03:33:46 PM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (09/14/2013 03:33:46 PM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (09/14/2013 03:33:46 PM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (09/14/2013 03:33:41 PM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (09/14/2013 03:33:41 PM) (Source: Windows Search Service) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)


System errors:
=============
Error: (09/17/2013 11:04:29 AM) (Source: DCOM) (User: )
Description: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (09/17/2013 10:58:29 AM) (Source: DCOM) (User: )
Description: {9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (09/17/2013 03:02:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073712 fehlgeschlagen: Kumulatives Sicherheitsupdate für Internet Explorer 9 für Windows 7 für x64-Systeme (KB2870699)

Error: (09/16/2013 09:40:54 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (09/16/2013 08:25:06 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Center-Empfängerdienst erreicht.

Error: (09/16/2013 08:25:06 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Center-Planerdienst erreicht.

Error: (09/16/2013 08:25:06 PM) (Source: DCOM) (User: )
Description: 1053ehRecvr-Service{D44CBB4F-743E-4818-8077-C47F666CA7EE}

Error: (09/16/2013 08:24:57 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Center-Planerdienst erreicht.

Error: (09/16/2013 08:24:56 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Center-Planerdienst erreicht.

Error: (09/16/2013 08:24:56 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Center-Planerdienst erreicht.


Microsoft Office Sessions:
=========================
Error: (02/13/2013 03:55:50 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 85 seconds with 60 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2013-09-17 00:31:43.783
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-17 00:31:43.783
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-17 00:31:43.783
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-17 00:31:43.767
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-17 00:31:43.767
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-17 00:31:43.767
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-16 22:40:03.494
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-16 22:40:03.492
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-16 22:40:03.489
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-16 22:40:03.459
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 35%
Total physical RAM: 7989.86 MB
Available physical RAM: 5171.45 MB
Total Pagefile: 15977.9 MB
Available Pagefile: 12487.41 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:450.93 GB) (Free:203.24 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:14.53 GB) (Free:1.82 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.08 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: FBCCF9BA)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=451 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

==================== End Of Log ============================
--- --- ---

schrauber 17.09.2013 20:19
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

CarstenS. 18.09.2013 14:03
Hallo Schrauber, hier nun das Ergebnis. BG Carsten

Combofix Logfile:
Code:
ComboFix 13-09-17.01 - CS 18.09.2013  14:48:09.1.2 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.7990.5434 [GMT 2:00]
ausgeführt von:: c:\users\CS\Downloads\ComboFix.exe
AV: Kaspersky PURE 3.0 *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
FW: Kaspersky PURE 3.0 *Disabled* {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}
SP: Kaspersky PURE 3.0 *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\CS\AppData\Local\omesuperv.exe
c:\windows\SysWow64\themeui.dll.tmp
c:\windows\SysWow64\uxtheme.dll.tmp
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-08-18 bis 2013-09-18  ))))))))))))))))))))))))))))))
.
.
2013-09-18 12:55 . 2013-09-18 12:55        --------        d-----w-        c:\users\Stephie\AppData\Local\temp
2013-09-18 12:55 . 2013-09-18 12:55        --------        d-----w-        c:\users\Default\AppData\Local\temp
2013-09-18 12:42 . 2013-09-05 05:32        9694160        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{4C175C0C-7C95-4EAE-8D80-1E06EE2AD7F0}\mpengine.dll
2013-09-17 14:45 . 2013-09-17 14:45        --------        d-----w-        c:\users\CS\AppData\Roaming\KeePass
2013-09-17 14:36 . 2013-09-17 14:36        --------        d-----w-        c:\program files (x86)\KeePass Password Safe 2
2013-09-17 08:00 . 2013-09-17 14:42        --------        dc----w-        c:\users\CS\AppData\Local\MigWiz
2013-09-17 07:19 . 2013-09-17 07:19        --------        d-----w-        c:\users\CS\SystemRequirementsLab
2013-09-17 07:18 . 2013-09-17 07:18        --------        d-----w-        c:\programdata\Oracle
2013-09-17 07:15 . 2013-09-17 07:15        --------        d-----w-        c:\program files (x86)\Common Files\Java
2013-09-17 07:14 . 2013-09-17 07:13        96168        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-09-17 07:13 . 2013-09-17 07:13        --------        d-----w-        c:\program files (x86)\Java
2013-09-16 19:24 . 2012-07-11 15:09        64856        ----a-w-        c:\windows\system32\klfphc.dll
2013-09-16 19:24 . 2011-06-02 12:39        66616        ----a-w-        c:\windows\system32\drivers\CSVirtualDiskDrv.sys
2013-09-16 19:24 . 2011-06-02 12:39        84536        ----a-w-        c:\windows\system32\drivers\CSCrySec.sys
2013-09-16 19:23 . 2013-09-16 19:23        --------        d-----w-        c:\windows\ELAMBKUP
2013-09-16 19:23 . 2013-09-16 19:23        --------        d-----w-        c:\program files (x86)\Common Files\InfoWatch
2013-09-16 19:22 . 2013-09-16 20:15        90208        ----a-w-        c:\windows\system32\drivers\klflt.sys
2013-09-16 19:22 . 2013-09-16 20:15        620128        ----a-w-        c:\windows\system32\drivers\klif.sys
2013-09-16 18:31 . 2013-09-05 05:32        9694160        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-09-13 13:43 . 2013-08-05 02:25        155584        ----a-w-        c:\windows\system32\drivers\ataport.sys
2013-09-13 10:05 . 2013-09-13 10:05        --------        d-----w-        c:\users\CS\AppData\Roaming\AceBIT
2013-09-13 09:36 . 2013-09-13 09:36        --------        d-----w-        c:\program files (x86)\AceBIT
2013-09-10 22:44 . 2013-09-10 22:43        965008        ------w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{3BCBFA85-6C75-42BC-A509-B68591FD057E}\gapaengine.dll
2013-09-09 22:04 . 2013-09-18 12:43        --------        d-----w-        c:\programdata\Kaspersky Lab
2013-09-09 22:04 . 2013-09-16 19:23        --------        d-----w-        c:\program files (x86)\Kaspersky Lab
2013-09-04 13:10 . 2013-09-04 13:10        --------        dc----w-        C:\FRST
2013-09-04 13:06 . 2013-09-04 13:06        --------        d-----w-        c:\users\CS\AppData\Roaming\DSite
2013-09-04 11:42 . 2013-09-10 12:56        --------        d-----w-        c:\program files (x86)\Trojancheck 6
2013-08-31 12:25 . 2013-08-31 12:25        --------        d-----w-        c:\windows\system32\IO
2013-08-31 12:20 . 2013-08-31 12:22        --------        d-----w-        c:\users\CS\AppData\Local\Avg2013
2013-08-30 14:51 . 2013-08-30 14:51        --------        d-----w-        c:\program files (x86)\Ashampoo
2013-08-29 19:10 . 2013-08-29 19:10        --------        d-----w-        c:\users\CS\AppData\Local\photoOptimizeHistoryDataBase
2013-08-29 19:10 . 2013-08-30 13:57        --------        d-----w-        c:\users\CS\AppData\Local\Ashampoo Photo Optimizer 4
2013-08-29 19:08 . 2013-08-30 14:51        --------        d-----w-        c:\programdata\Ashampoo
2013-08-29 16:13 . 2013-09-10 12:56        --------        d-----w-        c:\program files (x86)\Lyrics_Monkey
2013-08-29 15:54 . 2013-08-29 15:54        --------        d-----w-        c:\users\CS\AppData\Local\Software Updater
2013-08-29 12:50 . 2013-08-29 16:21        --------        d-----w-        c:\users\CS\AppData\Local\Freemium
2013-08-29 12:48 . 2013-08-29 12:49        --------        d-----w-        c:\program files (x86)\SoftwareUpdater
2013-08-29 12:48 . 2013-09-03 21:13        --------        d-----w-        c:\programdata\Package Cache
2013-08-29 12:47 . 2013-08-29 16:10        --------        d-----w-        c:\users\CS\AppData\Local\DownloadGuide
2013-08-28 21:58 . 2013-09-17 06:03        --------        d-----w-        c:\programdata\iolo
2013-08-28 21:58 . 2013-08-28 21:58        74703        ----a-w-        c:\windows\SysWow64\mfc45.dat
2013-08-25 12:57 . 2013-08-25 12:57        --------        d-----w-        c:\users\CS\AppData\Roaming\Playrix Entertainment
2013-08-25 12:55 . 2013-08-26 12:18        --------        d-----w-        c:\program files (x86)\GamesBar
2013-08-24 20:05 . 2013-08-28 20:44        --------        d-----w-        c:\program files (x86)\Rossmann Fotowelt Software
2013-08-24 13:12 . 2013-09-08 09:11        --------        d-----w-        c:\users\Stephie\AppData\Local\Windows Live
2013-08-23 18:34 . 2013-08-23 18:34        --------        d-----w-        c:\users\CS\AppData\Local\Red 5 Studios
2013-08-23 17:21 . 2013-08-30 13:58        --------        d-----w-        c:\program files (x86)\Flaschbier_Total
2013-08-23 16:59 . 2013-09-10 12:56        --------        d-----w-        c:\program files (x86)\Red 5 Studios
2013-08-23 16:35 . 2013-09-10 12:56        --------        d-----w-        c:\programdata\DrivingSpeed2
2013-08-23 16:33 . 2013-09-10 12:56        --------        d-----w-        c:\program files (x86)\DrivingSpeed2
2013-08-22 12:41 . 2013-08-22 12:40        941720        ------w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-08-20 17:42 . 2013-08-20 17:42        --------        d-----w-        c:\program files\SystemRequirementsLab
2013-08-20 17:42 . 2013-08-20 17:42        --------        d-----w-        c:\program files (x86)\SystemRequirementsLab
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-17 07:13 . 2013-01-14 16:21        868264        ----a-w-        c:\windows\SysWow64\npdeployJava1.dll
2013-09-17 07:13 . 2011-01-09 17:06        790440        ----a-w-        c:\windows\SysWow64\deployJava1.dll
2013-09-16 20:15 . 2012-10-18 12:50        54368        ----a-w-        c:\windows\system32\drivers\kltdi.sys
2013-09-16 20:15 . 2012-08-13 14:49        178448        ----a-w-        c:\windows\system32\drivers\kneps.sys
2013-09-14 08:58 . 2012-12-30 23:05        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-14 08:58 . 2012-12-30 23:05        692616        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2013-09-12 19:11 . 2012-12-29 09:16        79143768        ----a-w-        c:\windows\system32\MRT.exe
2013-08-30 01:27 . 2013-01-18 01:33        893552        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2013-08-30 01:27 . 2013-01-18 01:33        42776        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2013-08-30 01:27 . 2013-01-23 08:31        1236816        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2013-08-02 01:48 . 2013-09-12 18:27        44032        ----a-w-        c:\windows\apppatch\acwow64.dll
2013-07-25 09:25 . 2013-08-17 09:08        1888768        ----a-w-        c:\windows\system32\WMVDECOD.DLL
2013-07-25 08:57 . 2013-08-17 09:08        1620992        ----a-w-        c:\windows\SysWow64\WMVDECOD.DLL
2013-07-19 01:58 . 2013-08-17 09:08        2048        ----a-w-        c:\windows\system32\tzres.dll
2013-07-19 01:41 . 2013-08-17 09:08        2048        ----a-w-        c:\windows\SysWow64\tzres.dll
2013-07-17 20:02 . 2013-01-05 22:03        893552        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2013-07-17 20:02 . 2013-01-05 22:03        42776        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2013-07-09 05:52 . 2013-08-17 09:08        224256        ----a-w-        c:\windows\system32\wintrust.dll
2013-07-09 05:51 . 2013-08-17 09:08        1217024        ----a-w-        c:\windows\system32\rpcrt4.dll
2013-07-09 05:46 . 2013-08-17 09:08        184320        ----a-w-        c:\windows\system32\cryptsvc.dll
2013-07-09 05:46 . 2013-08-17 09:08        1472512        ----a-w-        c:\windows\system32\crypt32.dll
2013-07-09 05:46 . 2013-08-17 09:08        139776        ----a-w-        c:\windows\system32\cryptnet.dll
2013-07-09 04:52 . 2013-08-17 09:08        663552        ----a-w-        c:\windows\SysWow64\rpcrt4.dll
2013-07-09 04:52 . 2013-08-17 09:08        175104        ----a-w-        c:\windows\SysWow64\wintrust.dll
2013-07-09 04:46 . 2013-08-17 09:08        140288        ----a-w-        c:\windows\SysWow64\cryptsvc.dll
2013-07-09 04:46 . 2013-08-17 09:08        1166848        ----a-w-        c:\windows\SysWow64\crypt32.dll
2013-07-09 04:46 . 2013-08-17 09:08        103936        ----a-w-        c:\windows\SysWow64\cryptnet.dll
2013-07-07 08:57 . 2013-01-05 22:03        1236816        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-07-06 06:03 . 2013-08-17 09:08        1910208        ----a-w-        c:\windows\system32\drivers\tcpip.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]
2013-07-23 00:46        1451680        ----a-w-        c:\program files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-03-19 15:18        222808        ----a-w-        c:\users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-03-19 15:18        222808        ----a-w-        c:\users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-03-19 15:18        222808        ----a-w-        c:\users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{dd230880-495a-11d1-b064-008048ec2fc5}"
[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]
2012-12-20 16:20        459784        ----a-w-        c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"SCheck"="c:\users\CS\AppData\Roaming\SCheck\SCheck.exe" [2013-04-09 36864]
"Snoozer"="c:\users\CS\AppData\Roaming\Snz\Snz.exe" [2013-08-28 1137764]
"Intermediate"="c:\users\CS\AppData\Roaming\Intermediate\Intermediate.exe" [2013-04-09 36864]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-12-17 336384]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-09-14 283160]
"IMSS"="c:\program files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2010-07-23 111640]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2012-03-05 578944]
"HPOSD"="c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" [2011-08-19 379960]
"BingDesktop"="c:\program files (x86)\Microsoft\BingDesktop\BingDesktop.exe" [2013-06-20 2249352]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"KeePass 2 PreLoad"="c:\program files (x86)\KeePass Password Safe 2\KeePass.exe" [2013-07-20 2010624]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="c:\windows\system32\userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 SystemStoreService;System Store;c:\program files (x86)\SoftwareUpdater\SystemStore.exe  -displayname System Store -servicename SystemStoreService;c:\program files (x86)\SoftwareUpdater\SystemStore.exe  -displayname System Store -servicename SystemStoreService [x]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys;c:\windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys;c:\windows\SYSNATIVE\DRIVERS\htcnprot.sys [x]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPStor.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNXT6.SYS [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
S0 CSCrySec;InfoWatch Encrypt Sector Library driver;c:\windows\system32\DRIVERS\CSCrySec.sys;c:\windows\SYSNATIVE\DRIVERS\CSCrySec.sys [x]
S1 CSVirtualDiskDrv;InfoWatch Virtual Disk driver;c:\windows\system32\DRIVERS\CSVirtualDiskDrv.sys;c:\windows\SYSNATIVE\DRIVERS\CSVirtualDiskDrv.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 BingDesktopUpdate;Bing Desktop Update service;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [x]
S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys;c:\windows\SYSNATIVE\drivers\cpuz135_x64.sys [x]
S2 CSObjectsSrv;CryptoStorage control service;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [x]
S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe;c:\windows\SYSNATIVE\ezSharedSvcHost.exe [x]
S2 HP Wireless Assistant Service;HP Wireless Assistant Service;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [x]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [x]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 lxdu_device;lxdu_device;c:\windows\system32\lxducoms.exe;c:\windows\SYSNATIVE\lxducoms.exe [x]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2010-11-22 13:18        451872        ----a-w-        c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-09-04 02:17        1177552        ----a-w-        c:\program files (x86)\Google\Chrome\Application\29.0.1547.66\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-30 08:58]
.
2013-09-16 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000Core.job
- c:\users\CS\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-16 19:22]
.
2013-09-17 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000UA.job
- c:\users\CS\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-16 19:22]
.
2013-09-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-30 23:05]
.
2013-09-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-30 23:05]
.
2013-09-10 c:\windows\Tasks\HPCeeScheduleForCS-HP$.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 21:15]
.
2013-09-16 c:\windows\Tasks\HPCeeScheduleForCS.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 21:15]
.
2013-01-21 c:\windows\Tasks\ROC_REG_JAN_DELETE.job
- c:\programdata\AVG January 2013 Campaign\ROC.exe [2013-01-21 21:16]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-03-19 15:18        261704        ----a-w-        c:\users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-03-19 15:18        261704        ----a-w-        c:\users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-03-19 15:18        261704        ----a-w-        c:\users\CS\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00Zecter]
@="{D25B32FE-CB96-491A-98FF-AD59DA382D69}"
[HKEY_CLASSES_ROOT\CLSID\{D25B32FE-CB96-491A-98FF-AD59DA382D69}]
2010-11-09 22:16        2238976        ----a-w-        c:\program files (x86)\Hewlett-Packard\HP CloudDrive\ShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\01Zecter]
@="{EB24CA6D-F315-4A81-AC1A-C79CFD77F3F5}"
[HKEY_CLASSES_ROOT\CLSID\{EB24CA6D-F315-4A81-AC1A-C79CFD77F3F5}]
2010-11-09 22:16        2238976        ----a-w-        c:\program files (x86)\Hewlett-Packard\HP CloudDrive\ShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\02Zecter]
@="{B3C78E40-6B64-47C3-AE34-60B770881EB8}"
[HKEY_CLASSES_ROOT\CLSID\{B3C78E40-6B64-47C3-AE34-60B770881EB8}]
2010-11-09 22:16        2238976        ----a-w-        c:\program files (x86)\Hewlett-Packard\HP CloudDrive\ShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\03Zecter]
@="{622AFE52-33F6-4D9F-9966-E0BC52D7D69D}"
[HKEY_CLASSES_ROOT\CLSID\{622AFE52-33F6-4D9F-9966-E0BC52D7D69D}]
2010-11-09 22:16        2238976        ----a-w-        c:\program files (x86)\Hewlett-Packard\HP CloudDrive\ShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\04Zecter]
@="{855156F0-2A0F-11DE-8C30-0800200C9A66}"
[HKEY_CLASSES_ROOT\CLSID\{855156F0-2A0F-11DE-8C30-0800200C9A66}]
2010-11-09 22:16        2238976        ----a-w-        c:\program files (x86)\Hewlett-Packard\HP CloudDrive\ShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{dd230880-495a-11d1-b064-008048ec2fc5}"
[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]
2012-12-20 16:22        492040        ----a-w-        c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-11-29 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-11-29 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-11-29 417304]
"lxdumon.exe"="c:\program files (x86)\Lexmark 5600-6600 Series\lxdumon.exe" [2010-02-04 676520]
"lxduamon"="c:\program files (x86)\Lexmark 5600-6600 Series\lxduamon.exe" [2010-02-04 16040]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-09-08 1424896]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-07-18 1356240]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.bing.com/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Add to Anti-Banner - c:\program files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ie_banner_deny.htm
IE: Free YouTube to MP3 Converter - c:\users\CS\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{53099289-4D02-464C-A9BF-063B5F4ABEB4}: DhcpNameServer = 192.168.0.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-OMESupervisor - c:\users\CS\AppData\Local\omesuperv.exe
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_174_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_174_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{722b3793-5367-4446-b6bb-db89b05c1f24}\LocalServer32]
@DACL=(02 0000)
@=expand:"%SystemRoot%\\System32\\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {722b3793-5367-4446-b6bb-db89b05c1f24}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_174_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_174_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-09-18  14:57:54
ComboFix-quarantined-files.txt  2013-09-18 12:57
.
Vor Suchlauf: 14 Verzeichnis(se), 217.597.366.272 Bytes frei
Nach Suchlauf: 22 Verzeichnis(se), 217.629.388.800 Bytes frei
.
- - End Of File - - DEB75EDB65BA9E6E9821E773C46F7ABC
--- --- ---

schrauber 18.09.2013 18:02
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

CarstenS. 20.09.2013 17:10
Hallo Schrauber, hier nun das frische FRST64 Ergebniss, nach Combofix.
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-09-2013 01
Ran by CS (administrator) on CS-HP on 20-09-2013 17:22:33
Running from C:\Users\CS\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
( ) C:\Windows\system32\lxducoms.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\Lexmark 5600-6600 Series\lxdumon.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
() C:\Program Files (x86)\Lexmark 5600-6600 Series\lxduMsdMon.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [lxdumon.exe] - C:\Program Files (x86)\Lexmark 5600-6600 Series\lxdumon.exe [676520 2010-02-04] ()
HKLM\...\Run: [lxduamon] - C:\Program Files (x86)\Lexmark 5600-6600 Series\lxduamon.exe [16040 2010-02-04] ()
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1424896 2011-09-08] (IDT, Inc.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-07-18] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKCU\...\Run: [SCheck] - C:\Users\CS\AppData\Roaming\SCheck\SCheck.exe [36864 2013-04-10] ()
HKCU\...\Run: [Snoozer] - C:\Users\CS\AppData\Roaming\Snz\Snz.exe [1137764 2013-08-28] ()
HKCU\...\Run: [Intermediate] - C:\Users\CS\AppData\Roaming\Intermediate\Intermediate.exe [36864 2013-04-10] ()
HKCU\...\Run: [OMESupervisor] - C:\Users\CS\AppData\Local\omesuperv.exe
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2010-12-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [111640 2010-07-23] ()
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
HKU\Besucher\...\Run: [Duden Korrektor SysTray] - C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Besucher\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2010-11-22] (Hewlett-Packard Company)
HKU\Besucher\...\Policies\system: [LogonHoursAction] 2
HKU\Besucher\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Default\...\Run: [Duden Korrektor SysTray] - C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Stephie\...\Run: [Duden Korrektor SysTray] - C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Stephie\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2010-11-22] (Hewlett-Packard Company)
HKU\Stephie\...\Run: [IncrediMail] - C:\Program Files (x86)\IncrediMail\bin\IncMail.exe [444840 2013-08-02] (IncrediMail, Ltd.)
HKU\Stephie\...\Policies\system: [LogonHoursAction] 2
HKU\Stephie\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Bing
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=OSDSRC
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.yd.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=686B90004E2B8D34&affID=119828&tt=040713_rdrctful&tsp=4935
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=OSDSRC
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} -  No File
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.66\npchrome_frame.dll (Google Inc.)
Toolbar: HKLM -  No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 -  No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
Toolbar: HKCU -  No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM {3234EB1E-733E-4E6A-A8AB-EBB6287E5A7E} hxxp://content.systemrequirementslab.com/bin/srldetect_intel64_4.5.15.0.cab
DPF: HKLM {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1263.cab
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect121.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.66\npchrome_frame.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.15.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @oberon-media.com/ONCAdapter - C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.14\npapicomadapter.dll (Oberon-Media )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\CS\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Extension: No Name - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\searchplugins
FF Extension: ftdownloader4 - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\ftdownloader4@ftdownloader.com.xpi
FF Extension: No Name - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\user.js
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
FF HKCU\...\Firefox\Extensions: [{c5114a67-795a-4dbb-8030-91a43e51c8bb}] - C:\Program Files (x86)\Lyrics_Monkey\131.xpi

Chrome:
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (GoogleChromeRemotePlugin) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\GoogleChromeRemotePlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\CS\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll No File
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\CS\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll No File
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\CS\AppData\Roaming\Mozilla\plugins\npo1d.dll No File
CHR Plugin: (iTunes Application Detector) - C:\IPod\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Unity Player) - C:\Users\CS\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.150.3) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (HP Product Detection Plugin) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aelbknmfcacjffmgnoaaonhgoghlmlkp\1.0.28.1_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0
CHR Extension: (OfferMosquito) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.6.1_0
CHR Extension: (Safe Money) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0
CHR Extension: (Virtual Keyboard) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.558_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: () - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofnnlhbgdcabppjmlijllkhekcglbjlg\1.131_0
CHR Extension: (Anti-Banner) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0
CHR HKLM-x32\...\Chrome\Extension: [bebnnlollpcjnfpkafhoclljaojgnfok] - C:\Program Files (x86)\FTDownloader.com\FTDownloader10.crx
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [ofnnlhbgdcabppjmlijllkhekcglbjlg] - C:\Program Files (x86)\Lyrics_Monkey\131.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
R2 lxdu_device; C:\Windows\system32\lxducoms.exe [1039360 2010-02-04] ( )
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2013-07-18] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-07-18] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [296448 2013-08-29] ()

==================== Drivers (Whitelisted) ====================

R2 cpuz135; C:\Windows\system32\drivers\cpuz135_x64.sys [21992 2011-09-21] (CPUID)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-09-16] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-09-16] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-09-16] (Kaspersky Lab ZAO)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
U3 catchme; \??\C:\ComboFix\catchme.sys [x]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-09-16] (Kaspersky Lab ZAO)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-20 17:22 - 2013-09-20 17:22 - 01950622 _____ (Farbar) C:\Users\CS\Downloads\FRST64.exe
2013-09-20 17:18 - 2013-09-20 17:18 - 00030978 ____C C:\ComboFix.txt
2013-09-20 17:04 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-20 17:04 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-20 17:04 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-20 17:04 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-20 17:04 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-20 17:04 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-20 17:04 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-20 17:04 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-20 17:02 - 2013-09-20 17:02 - 05128554 ____R (Swearware) C:\Users\CS\Desktop\ComboFix.exe
2013-09-18 14:43 - 2013-09-20 17:18 - 00000000 ___DC C:\Qoobox
2013-09-18 14:42 - 2013-09-20 17:16 - 00000000 ____D C:\Windows\erdnt
2013-09-17 19:00 - 2013-09-17 19:01 - 00045807 _____ C:\Users\CS\Downloads\Addition.txt
2013-09-17 16:45 - 2013-09-17 16:45 - 00000000 ____D C:\Users\CS\AppData\Roaming\KeePass
2013-09-17 16:36 - 2013-09-20 16:49 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2013-09-17 10:03 - 2013-09-17 13:16 - 168419899 _____ C:\Users\CS\Desktop\Windows-EasyTransfer - Elemente Quellcomputer17.092013.MIG
2013-09-17 10:00 - 2013-09-17 16:42 - 00000000 ___DC C:\Users\CS\AppData\Local\MigWiz
2013-09-17 09:18 - 2013-09-17 09:18 - 00000000 ____D C:\ProgramData\Oracle
2013-09-17 09:13 - 2013-09-17 09:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-17 09:09 - 2013-09-17 09:09 - 00913832 _____ (Oracle Corporation) C:\Users\CS\Downloads\chromeinstall-7u40.exe
2013-09-16 21:24 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-09-16 21:24 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys
2013-09-16 21:24 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys
2013-09-16 21:23 - 2013-09-16 21:23 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-16 21:22 - 2013-09-16 22:15 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-16 21:22 - 2013-09-16 22:15 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-16 21:21 - 2013-09-16 21:23 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384 (1).exe
2013-09-16 21:18 - 2013-09-16 21:20 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384.exe
2013-09-16 20:51 - 2013-09-20 16:49 - 00000000 ____D C:\Program Files (x86)\iolo
2013-09-16 20:51 - 2013-09-16 20:51 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree (1).exe
2013-09-16 20:41 - 2013-09-16 20:44 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (2).exe
2013-09-16 20:40 - 2013-09-16 20:43 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (1).exe
2013-09-16 20:31 - 2013-09-16 20:33 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340.exe
2013-09-16 20:29 - 2013-09-16 20:29 - 00179984 _____ (Kaspersky Lab) C:\Users\CS\Downloads\kss12.0.1.117mlg_en-de_ru-de_fr-de_de-de.exe
2013-09-14 15:32 - 2013-09-20 16:50 - 00000392 _____ C:\Windows\setupact.log
2013-09-14 15:32 - 2013-09-14 15:32 - 00000000 _____ C:\Windows\setuperr.log
2013-09-14 10:40 - 2013-09-14 10:40 - 36965680 _____ (Microsoft Corporation) C:\Users\CS\Downloads\IE9-Windows7-x64-deu.exe
2013-09-13 15:43 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\Documents\Password Depot
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\AppData\Roaming\AceBIT
2013-09-13 11:49 - 2013-09-13 11:51 - 00000000 ____D C:\Users\CS\Documents\Photoflitre
2013-09-13 11:36 - 2013-09-13 11:36 - 00000000 ____D C:\Program Files (x86)\AceBIT
2013-09-13 11:29 - 2013-09-13 11:30 - 00000000 ____D C:\Users\CS\Documents\Network Scanner 5.4.12
2013-09-12 20:27 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-12 20:27 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-12 20:27 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-12 20:27 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-12 20:27 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-12 20:27 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-12 20:27 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-12 20:27 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-12 20:27 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-12 20:27 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-12 20:27 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-12 20:27 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-12 20:27 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-12 20:27 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-12 20:27 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-12 20:27 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-12 20:27 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-12 20:27 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-12 20:27 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-12 20:27 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-12 20:27 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-12 20:27 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-12 20:27 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-12 20:27 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-12 20:27 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 00:04 - 2013-09-20 17:21 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-10 00:04 - 2013-09-16 21:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-10 00:04 - 2013-09-10 14:56 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2013-09-06 15:40 - 2013-09-06 15:40 - 00000000 ____D C:\Users\CS\Desktop\Besucher
2013-09-06 14:50 - 2013-09-06 14:54 - 423572207 _____ C:\Users\CS\Downloads\Windows6.1-KB947821-v28-x64.msu
2013-09-04 19:51 - 2013-09-04 19:51 - 00056943 _____ C:\Users\CS\Desktop\FRSTalt.txt
2013-09-04 15:10 - 2013-09-04 15:10 - 00000000 ___DC C:\FRST
2013-09-04 15:06 - 2013-09-04 15:06 - 00000000 ____D C:\Users\CS\AppData\Roaming\DSite
2013-09-04 13:42 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-09-04 00:01 - 2013-09-04 00:08 - 330331616 _____ (MooSoft Development LLC                                    ) C:\Users\CS\Downloads\cleaner9_setup.exe
2013-09-03 12:57 - 2013-09-05 06:03 - 00000000 ____D C:\Users\CS\Desktop\HGL
2013-08-31 14:25 - 2013-08-31 14:25 - 00000000 ____D C:\Windows\system32\IO
2013-08-31 14:20 - 2013-08-31 14:22 - 00000000 ____D C:\Users\CS\AppData\Local\Avg2013
2013-08-30 16:52 - 2013-08-30 16:52 - 00001212 _____ C:\Users\CS\Desktop\Ashampoo Photo Card.lnk
2013-08-30 16:52 - 2013-08-30 16:52 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo
2013-08-30 16:51 - 2013-08-30 16:51 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2013-08-30 16:48 - 2013-08-30 16:49 - 200011368 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\CS\Downloads\ashampoo_photo_card_1.0.0_14061.exe
2013-08-30 05:22 - 2013-08-30 05:22 - 00042571 _____ C:\Users\CS\Documents\2012 - 2013.wlmp
2013-08-29 21:10 - 2013-08-30 15:57 - 00000000 ____D C:\Users\CS\AppData\Local\Ashampoo Photo Optimizer 4
2013-08-29 21:10 - 2013-08-29 21:10 - 00000000 ____D C:\Users\CS\AppData\Local\photoOptimizeHistoryDataBase
2013-08-29 21:08 - 2013-08-30 16:51 - 00000000 ____D C:\ProgramData\Ashampoo
2013-08-29 20:56 - 2013-08-29 21:09 - 49727466 _____ C:\Users\CS\Desktop\ICH LIEBE DICH.mp4
2013-08-29 18:13 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\Lyrics_Monkey
2013-08-29 18:07 - 2013-08-29 18:07 - 00719984 _____ C:\Users\CS\Downloads\free-clever-privacy_1.0_de-DE.exe
2013-08-29 17:54 - 2013-08-29 17:54 - 00000000 ____D C:\Users\CS\AppData\Local\Software Updater
2013-08-29 14:50 - 2013-08-29 18:21 - 00000000 ____D C:\Users\CS\AppData\Local\Freemium
2013-08-29 14:49 - 2013-09-17 07:46 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-08-29 14:49 - 2013-09-17 07:46 - 00004124 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-08-29 14:49 - 2013-08-31 17:22 - 00003624 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-08-29 14:48 - 2013-09-03 23:13 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-29 14:48 - 2013-08-29 14:49 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-08-29 14:47 - 2013-08-29 18:10 - 00000000 ____D C:\Users\CS\AppData\Local\DownloadGuide
2013-08-29 14:38 - 2013-08-29 14:38 - 04454952 _____ (Piriform Ltd) C:\Users\CS\Downloads\ccsetup405.exe
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util.exe
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util (1).exe
2013-08-28 23:58 - 2013-09-17 08:03 - 00000000 ____D C:\ProgramData\iolo
2013-08-28 23:58 - 2013-08-28 23:58 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dat
2013-08-28 23:57 - 2013-08-28 23:57 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree.exe
2013-08-27 13:34 - 2013-09-17 09:08 - 00000000 ____D C:\Users\CS\Documents\512erUSB-Stick
2013-08-26 18:44 - 2013-08-26 18:44 - 02472864 _____ C:\Users\CS\Desktop\Tasse.cpr
2013-08-25 20:21 - 2013-08-26 14:18 - 00000000 ____D C:\Users\CS\Documents\Autoruns
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 16:06 - 2013-08-25 16:06 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.r5003.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 14:57 - 2013-08-28 22:44 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IncrediGames Games
2013-08-25 14:57 - 2013-08-25 14:57 - 00000000 ____D C:\Users\CS\AppData\Roaming\Playrix Entertainment
2013-08-25 14:55 - 2013-08-26 14:18 - 00000000 ____D C:\Program Files (x86)\GamesBar
2013-08-25 14:55 - 2013-08-25 14:55 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\fishdom3-510007712-setup.s510007712.c110009390.r5003.len.uff0781bc14185286bf7f0fa353d34d3ab99bf078.dl.exe
2013-08-24 22:05 - 2013-08-28 22:44 - 00000000 ____D C:\Program Files (x86)\Rossmann Fotowelt Software
2013-08-24 16:01 - 2013-08-24 16:01 - 00000000 ____D C:\Users\Stephie\Documents\Add-in Express
2013-08-24 15:18 - 2013-08-24 15:24 - 680525824 _____ C:\Users\Stephie\Downloads\ophcrack-vista-livecd-3.6.0.iso
2013-08-24 15:12 - 2013-09-08 11:11 - 00000000 ____D C:\Users\Stephie\AppData\Local\Windows Live
2013-08-24 15:08 - 2013-08-24 15:08 - 00000680 __RSH C:\Users\Stephie\ntuser.pol
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\Documents\Firefall
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\AppData\Local\Red 5 Studios
2013-08-23 19:21 - 2013-08-30 15:58 - 00000000 ____D C:\Program Files (x86)\Flaschbier_Total
2013-08-23 19:20 - 2013-08-23 19:21 - 26204499 _____ () C:\Users\CS\Downloads\Flaschbier_Total_Setup.exe
2013-08-23 18:59 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\Red 5 Studios
2013-08-23 18:59 - 2013-08-23 18:59 - 17831072 _____ C:\Users\CS\Downloads\FirefallInstaller.exe
2013-08-23 18:35 - 2013-09-10 14:56 - 00000000 ____D C:\ProgramData\DrivingSpeed2
2013-08-23 18:33 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\DrivingSpeed2
2013-08-23 18:30 - 2013-08-23 18:31 - 112069457 _____ (WheelSpin Studios                                          ) C:\Users\CS\Downloads\SetupDrivingSpeed2011.exe
2013-08-23 18:18 - 2013-08-26 14:13 - 00000432 _____ C:\Windows\system32\Drivers\etc\hosts.ics

==================== One Month Modified Files and Folders =======

2013-09-20 17:22 - 2013-09-20 17:22 - 01950622 _____ (Farbar) C:\Users\CS\Downloads\FRST64.exe
2013-09-20 17:21 - 2013-09-10 00:04 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-20 17:18 - 2013-09-20 17:18 - 00030978 ____C C:\ComboFix.txt
2013-09-20 17:18 - 2013-09-18 14:43 - 00000000 ___DC C:\Qoobox
2013-09-20 17:17 - 2012-12-31 01:05 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-20 17:16 - 2013-09-18 14:42 - 00000000 ____D C:\Windows\erdnt
2013-09-20 17:15 - 2009-07-14 04:34 - 00000215 ____C C:\Windows\system.ini
2013-09-20 17:05 - 2011-02-20 02:38 - 01945452 _____ C:\Windows\WindowsUpdate.log
2013-09-20 17:02 - 2013-09-20 17:02 - 05128554 ____R (Swearware) C:\Users\CS\Desktop\ComboFix.exe
2013-09-20 17:01 - 2012-12-29 11:13 - 00000000 ____D C:\Users\CS\AppData\Local\Windows Live
2013-09-20 17:00 - 2009-07-14 06:45 - 00023024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-20 17:00 - 2009-07-14 06:45 - 00023024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-20 16:58 - 2012-12-31 01:05 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-20 16:54 - 2013-08-10 10:45 - 00000680 __RSH C:\Users\CS\ntuser.pol
2013-09-20 16:54 - 2012-12-31 01:05 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-20 16:54 - 2012-12-29 03:38 - 00000000 ____D C:\Users\CS
2013-09-20 16:50 - 2013-09-14 15:32 - 00000392 _____ C:\Windows\setupact.log
2013-09-20 16:50 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-20 16:49 - 2013-09-17 16:36 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2013-09-20 16:49 - 2013-09-16 20:51 - 00000000 ____D C:\Program Files (x86)\iolo
2013-09-20 16:49 - 2013-08-11 20:00 - 00000000 ____D C:\Users\Besucher
2013-09-20 16:49 - 2013-07-31 18:54 - 00000000 ____D C:\Users\Stephie
2013-09-20 16:49 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2013-09-20 16:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-20 16:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Msdtc
2013-09-20 16:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-09-20 16:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-09-20 16:48 - 2013-07-06 14:26 - 00000000 ____D C:\Users\CS\AppData\Roaming\BabSolution
2013-09-17 19:01 - 2013-09-17 19:00 - 00045807 _____ C:\Users\CS\Downloads\Addition.txt
2013-09-17 16:45 - 2013-09-17 16:45 - 00000000 ____D C:\Users\CS\AppData\Roaming\KeePass
2013-09-17 16:42 - 2013-09-17 10:00 - 00000000 ___DC C:\Users\CS\AppData\Local\MigWiz
2013-09-17 13:16 - 2013-09-17 10:03 - 168419899 _____ C:\Users\CS\Desktop\Windows-EasyTransfer - Elemente Quellcomputer17.092013.MIG
2013-09-17 09:18 - 2013-09-17 09:18 - 00000000 ____D C:\ProgramData\Oracle
2013-09-17 09:13 - 2013-09-17 09:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-17 09:09 - 2013-09-17 09:09 - 00913832 _____ (Oracle Corporation) C:\Users\CS\Downloads\chromeinstall-7u40.exe
2013-09-17 09:08 - 2013-08-27 13:34 - 00000000 ____D C:\Users\CS\Documents\512erUSB-Stick
2013-09-17 08:03 - 2013-08-28 23:58 - 00000000 ____D C:\ProgramData\iolo
2013-09-17 07:46 - 2013-08-29 14:49 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-09-17 07:46 - 2013-08-29 14:49 - 00004124 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-09-17 06:27 - 2013-07-16 21:22 - 00000916 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000UA.job
2013-09-16 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-16 22:15 - 2013-09-16 21:22 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-16 22:15 - 2013-09-16 21:22 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-16 22:15 - 2012-10-18 14:50 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-09-16 22:15 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2013-09-16 21:27 - 2013-07-16 21:22 - 00000894 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000Core.job
2013-09-16 21:23 - 2013-09-16 21:23 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-16 21:23 - 2013-09-16 21:21 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384 (1).exe
2013-09-16 21:23 - 2013-09-10 00:04 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-16 21:20 - 2013-09-16 21:18 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384.exe
2013-09-16 20:51 - 2013-09-16 20:51 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree (1).exe
2013-09-16 20:44 - 2013-09-16 20:41 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (2).exe
2013-09-16 20:43 - 2013-09-16 20:40 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (1).exe
2013-09-16 20:33 - 2013-09-16 20:31 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340.exe
2013-09-16 20:29 - 2013-09-16 20:29 - 00179984 _____ (Kaspersky Lab) C:\Users\CS\Downloads\kss12.0.1.117mlg_en-de_ru-de_fr-de_de-de.exe
2013-09-16 15:43 - 2013-07-07 10:57 - 00000320 _____ C:\Windows\Tasks\HPCeeScheduleForCS.job
2013-09-15 17:55 - 2013-07-07 10:57 - 00003168 _____ C:\Windows\System32\Tasks\HPCeeScheduleForCS
2013-09-15 17:54 - 2012-12-30 11:18 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-09-14 15:32 - 2013-09-14 15:32 - 00000000 _____ C:\Windows\setuperr.log
2013-09-14 10:58 - 2012-12-31 01:05 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-14 10:58 - 2012-12-31 01:05 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-14 10:58 - 2012-12-31 01:05 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-14 10:40 - 2013-09-14 10:40 - 36965680 _____ (Microsoft Corporation) C:\Users\CS\Downloads\IE9-Windows7-x64-deu.exe
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\Documents\Password Depot
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\AppData\Roaming\AceBIT
2013-09-13 11:51 - 2013-09-13 11:49 - 00000000 ____D C:\Users\CS\Documents\Photoflitre
2013-09-13 11:36 - 2013-09-13 11:36 - 00000000 ____D C:\Program Files (x86)\AceBIT
2013-09-13 11:30 - 2013-09-13 11:29 - 00000000 ____D C:\Users\CS\Documents\Network Scanner 5.4.12
2013-09-13 11:18 - 2013-02-17 17:03 - 00000000 ____D C:\Program Files (x86)\ProgDVB
2013-09-13 11:17 - 2013-08-07 23:51 - 00000000 ____D C:\Program Files (x86)\Oberon Media SIDR
2013-09-13 11:17 - 2012-12-29 11:09 - 01643172 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-13 11:17 - 2011-01-10 02:49 - 00700746 _____ C:\Windows\system32\perfh007.dat
2013-09-13 11:17 - 2011-01-10 02:49 - 00149696 _____ C:\Windows\system32\perfc007.dat
2013-09-13 11:14 - 2013-04-13 13:45 - 00007634 _____ C:\Users\CS\AppData\Local\Resmon.ResmonCfg
2013-09-13 10:15 - 2012-12-29 03:43 - 00000000 ___RD C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-13 10:15 - 2012-12-29 03:43 - 00000000 ___RD C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-13 10:14 - 2009-07-14 06:45 - 00433416 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-12 21:13 - 2013-08-05 19:44 - 00000000 ____D C:\Windows\system32\MRT
2013-09-12 21:11 - 2012-12-29 11:16 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-10 15:26 - 2012-12-29 04:14 - 00003212 _____ C:\Windows\System32\Tasks\HPCeeScheduleForCS-HP$
2013-09-10 15:26 - 2012-12-29 04:14 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForCS-HP$.job
2013-09-10 14:56 - 2013-09-10 00:04 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2013-09-10 14:56 - 2013-09-04 13:42 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-09-10 14:56 - 2013-08-29 18:13 - 00000000 ____D C:\Program Files (x86)\Lyrics_Monkey
2013-09-10 14:56 - 2013-08-23 18:59 - 00000000 ____D C:\Program Files (x86)\Red 5 Studios
2013-09-10 14:56 - 2013-08-23 18:35 - 00000000 ____D C:\ProgramData\DrivingSpeed2
2013-09-10 14:56 - 2013-08-23 18:33 - 00000000 ____D C:\Program Files (x86)\DrivingSpeed2
2013-09-10 14:56 - 2013-08-17 11:01 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Adobe
2013-09-10 14:56 - 2013-08-11 20:03 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Duden
2013-09-10 14:56 - 2013-08-11 20:01 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-10 14:56 - 2013-08-11 20:01 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-10 14:56 - 2013-08-11 20:01 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-09-10 14:56 - 2013-08-11 20:00 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-10 14:56 - 2013-08-11 20:00 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-10 14:56 - 2013-08-11 20:00 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Macromedia
2013-09-10 14:56 - 2013-07-06 14:26 - 00000000 ____D C:\Program Files\CCleaner
2013-09-08 20:17 - 2011-02-20 11:25 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-09-08 11:11 - 2013-08-24 15:12 - 00000000 ____D C:\Users\Stephie\AppData\Local\Windows Live
2013-09-06 15:52 - 2012-12-30 00:39 - 00000000 ____D C:\Users\CS\AppData\Local\CrashDumps
2013-09-06 15:40 - 2013-09-06 15:40 - 00000000 ____D C:\Users\CS\Desktop\Besucher
2013-09-06 14:54 - 2013-09-06 14:50 - 423572207 _____ C:\Users\CS\Downloads\Windows6.1-KB947821-v28-x64.msu
2013-09-05 06:03 - 2013-09-03 12:57 - 00000000 ____D C:\Users\CS\Desktop\HGL
2013-09-04 19:51 - 2013-09-04 19:51 - 00056943 _____ C:\Users\CS\Desktop\FRSTalt.txt
2013-09-04 15:10 - 2013-09-04 15:10 - 00000000 ___DC C:\FRST
2013-09-04 15:06 - 2013-09-04 15:06 - 00000000 ____D C:\Users\CS\AppData\Roaming\DSite
2013-09-04 00:08 - 2013-09-04 00:01 - 330331616 _____ (MooSoft Development LLC                                    ) C:\Users\CS\Downloads\cleaner9_setup.exe
2013-09-03 23:30 - 2013-01-22 11:02 - 00000000 ____D C:\System Recovery Files
2013-09-03 23:13 - 2013-08-29 14:48 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-02 20:56 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-31 20:34 - 2012-12-31 01:05 - 00000000 ____D C:\Users\CS\AppData\Local\Google
2013-08-31 17:22 - 2013-08-29 14:49 - 00003624 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-08-31 14:25 - 2013-08-31 14:25 - 00000000 ____D C:\Windows\system32\IO
2013-08-31 14:23 - 2013-05-12 17:24 - 00000000 ____D C:\Users\CS\AppData\Roaming\Mozilla
2013-08-31 14:22 - 2013-08-31 14:20 - 00000000 ____D C:\Users\CS\AppData\Local\Avg2013
2013-08-31 14:22 - 2012-12-29 04:22 - 00000000 ____D C:\ProgramData\MFAData
2013-08-30 19:25 - 2013-02-16 18:28 - 00000000 ___DC C:\sim_scan
2013-08-30 18:16 - 2012-12-30 00:03 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2013-08-30 18:14 - 2013-05-07 22:45 - 00000000 ____D C:\Users\CS\Documents\My Games
2013-08-30 16:52 - 2013-08-30 16:52 - 00001212 _____ C:\Users\CS\Desktop\Ashampoo Photo Card.lnk
2013-08-30 16:52 - 2013-08-30 16:52 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo
2013-08-30 16:51 - 2013-08-30 16:51 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2013-08-30 16:51 - 2013-08-29 21:08 - 00000000 ____D C:\ProgramData\Ashampoo
2013-08-30 16:49 - 2013-08-30 16:48 - 200011368 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\CS\Downloads\ashampoo_photo_card_1.0.0_14061.exe
2013-08-30 16:02 - 2013-05-04 20:42 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-30 15:58 - 2013-08-23 19:21 - 00000000 ____D C:\Program Files (x86)\Flaschbier_Total
2013-08-30 15:57 - 2013-08-29 21:10 - 00000000 ____D C:\Users\CS\AppData\Local\Ashampoo Photo Optimizer 4
2013-08-30 05:22 - 2013-08-30 05:22 - 00042571 _____ C:\Users\CS\Documents\2012 - 2013.wlmp
2013-08-29 21:10 - 2013-08-29 21:10 - 00000000 ____D C:\Users\CS\AppData\Local\photoOptimizeHistoryDataBase
2013-08-29 21:09 - 2013-08-29 20:56 - 49727466 _____ C:\Users\CS\Desktop\ICH LIEBE DICH.mp4
2013-08-29 18:21 - 2013-08-29 14:50 - 00000000 ____D C:\Users\CS\AppData\Local\Freemium
2013-08-29 18:10 - 2013-08-29 14:47 - 00000000 ____D C:\Users\CS\AppData\Local\DownloadGuide
2013-08-29 18:07 - 2013-08-29 18:07 - 00719984 _____ C:\Users\CS\Downloads\free-clever-privacy_1.0_de-DE.exe
2013-08-29 17:54 - 2013-08-29 17:54 - 00000000 ____D C:\Users\CS\AppData\Local\Software Updater
2013-08-29 15:29 - 2013-02-04 13:13 - 00000000 ____D C:\Users\CS\Documents\Scans
2013-08-29 14:49 - 2013-08-29 14:48 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-08-29 14:38 - 2013-08-29 14:38 - 04454952 _____ (Piriform Ltd) C:\Users\CS\Downloads\ccsetup405.exe
2013-08-29 14:37 - 2013-08-10 10:28 - 00000000 ____D C:\Users\CS\Documents\Treiber&Sicherungen
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util.exe
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util (1).exe
2013-08-28 23:58 - 2013-08-28 23:58 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dat
2013-08-28 23:57 - 2013-08-28 23:57 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree.exe
2013-08-28 23:52 - 2013-07-11 16:11 - 00000000 ____D C:\Users\CS\AppData\Roaming\Intermediate
2013-08-28 22:44 - 2013-08-25 14:57 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IncrediGames Games
2013-08-28 22:44 - 2013-08-24 22:05 - 00000000 ____D C:\Program Files (x86)\Rossmann Fotowelt Software
2013-08-28 22:44 - 2013-08-07 23:51 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Incredigames DE
2013-08-28 22:44 - 2013-08-07 23:49 - 00000000 ____D C:\ProgramData\Oberon Media
2013-08-28 22:44 - 2012-12-31 01:05 - 00000000 ____D C:\Program Files\Google
2013-08-28 22:44 - 2012-12-31 01:05 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-28 22:44 - 2011-02-20 02:37 - 00000000 ____D C:\Windows\SysWOW64\sda
2013-08-28 22:44 - 2011-01-09 18:53 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2013-08-28 22:44 - 2011-01-09 18:45 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-08-28 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Recovery
2013-08-28 22:43 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\SysWOW64\WindowsPowerShell
2013-08-28 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\spp
2013-08-28 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Speech
2013-08-28 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\NetworkList
2013-08-26 18:45 - 2013-07-22 20:39 - 00000000 ____D C:\Users\CS\Documents\pdf.Dateien
2013-08-26 18:44 - 2013-08-26 18:44 - 02472864 _____ C:\Users\CS\Desktop\Tasse.cpr
2013-08-26 14:18 - 2013-08-25 20:21 - 00000000 ____D C:\Users\CS\Documents\Autoruns
2013-08-26 14:18 - 2013-08-25 14:55 - 00000000 ____D C:\Program Files (x86)\GamesBar
2013-08-26 14:18 - 2013-08-07 23:51 - 00000000 ____D C:\Users\CS\AppData\Roaming\Oberon Media
2013-08-26 14:18 - 2012-12-29 14:12 - 00000000 ____D C:\Users\CS\Documents\Youcam
2013-08-26 14:13 - 2013-08-23 18:18 - 00000432 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 16:06 - 2013-08-25 16:06 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.r5003.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 14:57 - 2013-08-25 14:57 - 00000000 ____D C:\Users\CS\AppData\Roaming\Playrix Entertainment
2013-08-25 14:55 - 2013-08-25 14:55 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\fishdom3-510007712-setup.s510007712.c110009390.r5003.len.uff0781bc14185286bf7f0fa353d34d3ab99bf078.dl.exe
2013-08-24 21:40 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-24 16:01 - 2013-08-24 16:01 - 00000000 ____D C:\Users\Stephie\Documents\Add-in Express
2013-08-24 15:24 - 2013-08-24 15:18 - 680525824 _____ C:\Users\Stephie\Downloads\ophcrack-vista-livecd-3.6.0.iso
2013-08-24 15:08 - 2013-08-24 15:08 - 00000680 __RSH C:\Users\Stephie\ntuser.pol
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\Documents\Firefall
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\AppData\Local\Red 5 Studios
2013-08-23 19:21 - 2013-08-23 19:20 - 26204499 _____ () C:\Users\CS\Downloads\Flaschbier_Total_Setup.exe
2013-08-23 19:00 - 2013-05-07 18:29 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-08-23 19:00 - 2012-12-29 04:07 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-08-23 18:59 - 2013-08-23 18:59 - 17831072 _____ C:\Users\CS\Downloads\FirefallInstaller.exe
2013-08-23 18:31 - 2013-08-23 18:30 - 112069457 _____ (WheelSpin Studios                                          ) C:\Users\CS\Downloads\SetupDrivingSpeed2011.exe
2013-08-22 18:08 - 2013-01-12 14:46 - 00000000 ____D C:\Users\CS\AppData\Roaming\Skype
2013-08-22 15:16 - 2012-10-28 17:23 - 00000000 ____D C:\Users\CS\Documents\Lebenslauf

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-14 16:28

==================== End Of Log ============================
--- --- ---

--- --- ---
Beste Grüßer
Carsten

Hier nun die anderen Ergebnisse:AdwCleaner Logfile:
Code:
# AdwCleaner v3.004 - Bericht erstellt am 20/09/2013 um 17:38:03
# Updated 15/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : CS - CS-HP
# Gestartet von : C:\Users\CS\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : SystemStoreService

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Program Files (x86)\GamesBar
Ordner Gelöscht : C:\Program Files (x86)\Lyrics_Monkey
Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup
Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Users\CS\AppData\Local\DownloadGuide
Ordner Gelöscht : C:\Users\CS\AppData\Local\PutLockerDownloader
Ordner Gelöscht : C:\Users\CS\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\CS\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\CS\AppData\Roaming\Common\LuaRT
Ordner Gelöscht : C:\Users\CS\AppData\Roaming\DataMgr
Ordner Gelöscht : C:\Users\CS\AppData\Roaming\DesktopIconForAmazon
Ordner Gelöscht : C:\Users\CS\AppData\Roaming\DSite
Ordner Gelöscht : C:\Users\CS\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\CS\AppData\Roaming\Intermediate
Ordner Gelöscht : C:\Users\CS\AppData\Roaming\OCS
Ordner Gelöscht : C:\Users\CS\AppData\Roaming\SCheck
Ordner Gelöscht : C:\Users\CS\AppData\Roaming\SSync
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\CS\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js
Datei Gelöscht : C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Datei Gelöscht : C:\Windows\System32\Tasks\EPUpdater
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater Ui
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\FTDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\FTDownloader_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\FTDownloader_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bluestacks-app-player_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bluestacks-app-player_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\FoxyDeal
Schlüssel Gelöscht : HKCU\Software\httogroup
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Lyrics_Monkey
Schlüssel Gelöscht : HKLM\Software\AVG Secure Search
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\Software\ImInstaller
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16464


-\\ Mozilla Firefox v

-\\ Google Chrome v29.0.1547.66

[ Datei : C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Stephie\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [12663 octets] - [20/09/2013 17:34:49]
AdwCleaner[S0].txt - [11408 octets] - [20/09/2013 17:38:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11469 octets] ##########
--- --- ---
Malwarebytes Anti-Malware 1.75.0.1300
Malwarebytes : Free anti-malware download

Datenbank Version: v2013.09.20.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
CS :: CS-HP [Administrator]

20.09.2013 17:31:20
MBAM-log-2013-09-20 (17-37-07).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 249072
Laufzeit: 4 Minute(n), 48 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 6
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt.
HKCR\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} (PUP.Optional.Wajam.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt.
HKCU\Software\1ClickDownload (PUP.Optional.1ClickDownload.A) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 6
C:\Users\CS\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504} (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Cache (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\Users\CS\AppData\Roaming\BabSolution (PUP.Optional.BabSolution.A) -> Keine Aktion durchgeführt.
C:\Users\CS\AppData\Roaming\BabSolution\Shared (PUP.Optional.BabSolution.A) -> Keine Aktion durchgeführt.

Infizierte Dateien: 18
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\Users\CS\AppData\Roaming\BabSolution\Shared\BabMaint.exe (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\CS\Downloads\BlueStacks App Player.exe (PUP.Optional.Solimba) -> Keine Aktion durchgeführt.
C:\Users\CS\Downloads\SoftonicDownloader_fuer_bluestacks-app-player.exe (PUP.Optional.Softonic) -> Keine Aktion durchgeführt.
C:\Users\CS\AppData\Local\DownloadGuide\hometab.exe (PUP.Optional.HomeTab.A) -> Keine Aktion durchgeführt.
C:\Users\CS\AppData\Local\DownloadGuide\plus-hd-3-8.exe (Adware.Packed.Ranver) -> Keine Aktion durchgeführt.
C:\Users\CS\AppData\Local\DownloadGuide\Offers\iminent.exe (PUP.Iminent.A) -> Keine Aktion durchgeführt.
C:\Users\CS\AppData\Local\DownloadGuide\Offers\plus-hd-3-8.exe (Adware.Packed.Ranver) -> Keine Aktion durchgeführt.
C:\Users\CS\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\Users\CS\AppData\Roaming\BabSolution\Shared\BUSolution.dll (PUP.Optional.BabSolution.A) -> Keine Aktion durchgeführt.
C:\Users\CS\AppData\Roaming\BabSolution\Shared\chu.js (PUP.Optional.BabSolution.A) -> Keine Aktion durchgeführt.
C:\Users\CS\AppData\Roaming\BabSolution\Shared\GUninstaller.exe (PUP.Optional.BabSolution.A) -> Keine Aktion durchgeführt.
C:\Users\CS\AppData\Roaming\BabSolution\Shared\SetupParams.ini (PUP.Optional.BabSolution.A) -> Keine Aktion durchgeführt.
C:\Users\CS\AppData\Roaming\BabSolution\Shared\sqlite3.dll (PUP.Optional.BabSolution.A) -> Keine Aktion durchgeführt.

(Ende)JRT Logfile:
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.1 (09.15.2013:1)
OS: Windows 7 Home Premium x64
Ran by CS on 20.09.2013 at 17:52:04,34
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{00F26937-7AD0-400A-869D-091099846749}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{207AFB35-03AF-46B8-9666-348F6E56459F}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{21B5DFB3-4B3D-48BF-B3B8-3787F5E7E8E5}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{2E2D626B-78CD-4B30-8890-DE5F0CF2F4A6}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{38D62AA6-9D56-4EE8-B03E-51FE27B16427}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{47B62A09-BE8B-42E5-AF64-944E1A1A92B8}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{53264328-7681-4C92-94C9-F220C6E6A841}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{5432AF88-D4E5-4E93-AA1B-416050CE7CFF}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{5E93F880-C8D6-4463-A55F-949311DDB330}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{6A4B8197-A9D6-4C0E-8A62-1BBB626167EC}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{7B3A66F4-697A-4B0D-996A-C82ADDC01299}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{86F87E02-64AE-4053-8534-575A89EE42BD}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{897CD69C-AF22-45FF-BFBD-D4BE49668A0F}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{8C73F49B-F85C-4021-AA32-C196BB83E2BE}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{AD51D9A4-33C1-49E8-9037-2D68C0A94D29}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{AD67710E-6C2A-4CF0-8D22-DCFAB693DB36}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{B63B243B-420E-4A38-9ED9-14EAE4698CF7}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{C774B5E5-5503-47C9-8A8E-7A62C63F30BE}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{E65B1710-3A91-451F-87CA-CE7812D45327}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{F5D7FB21-3D76-429D-BB2E-294EA857E0D3}
Successfully deleted: [Empty Folder] C:\Users\CS\appdata\local\{FBB4AADF-1DCD-43E1-A5D6-534FA2074B31}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20.09.2013 at 17:58:24,35
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- --- ---

schrauber 20.09.2013 21:02

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

CarstenS. 22.09.2013 08:27
Moin Schrauber, hier nun die weiteren Ergebnisse:

Results of screen317's Security Check version 0.99.73
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
Kaspersky PURE 3.0
Microsoft Security Essentials
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Java 7 Update 40
Java version out of Date!
Adobe Flash Player 11.8.800.168
Adobe Reader 9 Adobe Reader out of Date!
Google Chrome 29.0.1547.66
Google Chrome 29.0.1547.76
````````Process Check: objlist.exe by Laurent````````
Microsoft Security Essentials MSMpEng.exe
Microsoft Security Essentials msseces.exe
Kaspersky Lab Kaspersky PURE 3.0 avp.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013 03 (ATTENTION: ====> FRST version is 6 days old and could be outdated)
Ran by CS (administrator) on CS-HP on 22-09-2013 09:18:25
Running from C:\Users\CS\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
( ) C:\Windows\system32\lxducoms.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\Lexmark 5600-6600 Series\lxdumon.exe
() C:\Program Files (x86)\Lexmark 5600-6600 Series\lxduMsdMon.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\wmi64.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [lxdumon.exe] - C:\Program Files (x86)\Lexmark 5600-6600 Series\lxdumon.exe [676520 2010-02-04] ()
HKLM\...\Run: [lxduamon] - C:\Program Files (x86)\Lexmark 5600-6600 Series\lxduamon.exe [16040 2010-02-04] ()
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1424896 2011-09-08] (IDT, Inc.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-07-18] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKCU\...\Run: [SCheck] - C:\Users\CS\AppData\Roaming\SCheck\SCheck.exe [36864 2013-04-10] ()
HKCU\...\Run: [Snoozer] - C:\Users\CS\AppData\Roaming\Snz\Snz.exe [1137764 2013-08-28] ()
HKCU\...\Run: [Intermediate] - C:\Users\CS\AppData\Roaming\Intermediate\Intermediate.exe [36864 2013-04-10] ()
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2010-12-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [111640 2010-07-23] ()
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2010624 2013-07-20] (Dominik Reichl)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
HKU\Besucher\...\Run: [Duden Korrektor SysTray] - C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Besucher\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2010-11-22] (Hewlett-Packard Company)
HKU\Besucher\...\Policies\system: [LogonHoursAction] 2
HKU\Besucher\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Default\...\Run: [Duden Korrektor SysTray] - C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Stephie\...\Run: [Duden Korrektor SysTray] - C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Stephie\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2010-11-22] (Hewlett-Packard Company)
HKU\Stephie\...\Run: [IncrediMail] - C:\Program Files (x86)\IncrediMail\bin\IncMail.exe [444840 2013-08-02] (IncrediMail, Ltd.)
HKU\Stephie\...\Policies\system: [LogonHoursAction] 2
HKU\Stephie\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Bing
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=OSDSRC
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.yd.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=686B90004E2B8D34&affID=119828&tt=040713_rdrctful&tsp=4935
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=OSDSRC
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} -  No File
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.76\npchrome_frame.dll (Google Inc.)
Toolbar: HKLM -  No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 -  No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
Toolbar: HKCU -  No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM {3234EB1E-733E-4E6A-A8AB-EBB6287E5A7E} hxxp://content.systemrequirementslab.com/bin/srldetect_intel64_4.5.15.0.cab
DPF: HKLM {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1263.cab
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect121.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.76\npchrome_frame.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @oberon-media.com/ONCAdapter - C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.14\npapicomadapter.dll (Oberon-Media )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\CS\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Extension: No Name - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\searchplugins
FF Extension: ftdownloader4 - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\ftdownloader4@ftdownloader.com.xpi
FF Extension: No Name - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\user.js
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
FF HKCU\...\Firefox\Extensions: [{c5114a67-795a-4dbb-8030-91a43e51c8bb}] - C:\Program Files (x86)\Lyrics_Monkey\131.xpi

Chrome:
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll ()
CHR Plugin: (GoogleChromeRemotePlugin) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\GoogleChromeRemotePlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\CS\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll No File
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\CS\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll No File
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\CS\AppData\Roaming\Mozilla\plugins\npo1d.dll No File
CHR Plugin: (iTunes Application Detector) - C:\IPod\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Unity Player) - C:\Users\CS\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.150.3) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (HP Product Detection Plugin) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aelbknmfcacjffmgnoaaonhgoghlmlkp\1.0.28.1_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0
CHR Extension: (OfferMosquito) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.6.1_0
CHR Extension: (Safe Money) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0
CHR Extension: (Virtual Keyboard) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.558_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: () - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofnnlhbgdcabppjmlijllkhekcglbjlg\1.131_0
CHR Extension: (Anti-Banner) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0
CHR HKLM-x32\...\Chrome\Extension: [bebnnlollpcjnfpkafhoclljaojgnfok] - C:\Program Files (x86)\FTDownloader.com\FTDownloader10.crx
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [ofnnlhbgdcabppjmlijllkhekcglbjlg] - C:\Program Files (x86)\Lyrics_Monkey\131.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
R2 lxdu_device; C:\Windows\system32\lxducoms.exe [1039360 2010-02-04] ( )
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2013-07-18] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-07-18] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [296448 2013-08-29] ()

==================== Drivers (Whitelisted) ====================

R2 cpuz135; C:\Windows\system32\drivers\cpuz135_x64.sys [21992 2011-09-21] (CPUID)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-09-16] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-09-16] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-09-16] (Kaspersky Lab ZAO)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-09-16] (Kaspersky Lab ZAO)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-21 18:34 - 2013-09-21 18:34 - 00891144 _____ C:\Users\CS\Desktop\SecurityCheck (1).exe
2013-09-21 16:33 - 2013-09-21 16:33 - 00891144 _____ C:\Users\CS\Downloads\SecurityCheck.exe
2013-09-21 14:39 - 2013-09-21 14:39 - 02347384 _____ (ESET) C:\Users\CS\Downloads\esetsmartinstaller_enu.exe
2013-09-20 21:09 - 2013-09-20 21:11 - 00001256 _____ C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-20 21:09 - 2013-09-20 21:09 - 00001409 _____ C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-09-20 20:29 - 2013-09-20 20:29 - 01745015 _____ C:\Users\CS\Downloads\AFA9015_win7 (2).zip
2013-09-20 17:58 - 2013-09-20 17:58 - 00002787 _____ C:\Users\CS\Desktop\JRT.txt
2013-09-20 17:34 - 2013-09-20 17:43 - 00000000 ___DC C:\AdwCleaner
2013-09-20 17:30 - 2013-09-20 20:40 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-20 17:30 - 2013-09-20 17:30 - 00000000 ____D C:\Users\CS\AppData\Roaming\Malwarebytes
2013-09-20 17:30 - 2013-09-20 17:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-20 17:18 - 2013-09-20 17:18 - 00030978 ____C C:\ComboFix.txt
2013-09-18 14:44 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-18 14:44 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-18 14:44 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-18 14:44 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-18 14:44 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-18 14:44 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-18 14:44 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-18 14:44 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-18 14:43 - 2013-09-20 20:38 - 00000000 ___DC C:\Qoobox
2013-09-18 14:42 - 2013-09-20 20:40 - 00000000 ____D C:\Windows\erdnt
2013-09-18 14:41 - 2013-09-18 14:41 - 05128653 ____R (Swearware) C:\Users\CS\Downloads\ComboFix.exe
2013-09-18 14:28 - 2013-09-22 09:00 - 00000392 _____ C:\Windows\setupact.log
2013-09-18 14:28 - 2013-09-21 08:40 - 00002350 _____ C:\Windows\PFRO.log
2013-09-18 14:28 - 2013-09-18 14:28 - 00000000 _____ C:\Windows\setuperr.log
2013-09-17 19:29 - 2013-09-21 18:36 - 00047207 _____ C:\Windows\IE10_main.log
2013-09-17 19:00 - 2013-09-17 19:01 - 00045807 _____ C:\Users\CS\Downloads\Addition.txt
2013-09-17 18:57 - 2013-09-17 18:57 - 01950524 _____ (Farbar) C:\Users\CS\Downloads\FRST64.exe
2013-09-17 16:45 - 2013-09-17 16:45 - 00000000 ____D C:\Users\CS\AppData\Roaming\KeePass
2013-09-17 16:36 - 2013-09-20 20:40 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2013-09-17 16:36 - 2013-09-17 16:36 - 00001109 _____ C:\Users\CS\Desktop\KeePass 2.lnk
2013-09-17 16:35 - 2013-09-17 16:35 - 02513520 _____ (Dominik Reichl                                              ) C:\Users\CS\Downloads\KeePass-2.23-Setup.exe
2013-09-17 10:03 - 2013-09-17 13:16 - 168419899 _____ C:\Users\CS\Desktop\Windows-EasyTransfer - Elemente Quellcomputer17.092013.MIG
2013-09-17 10:00 - 2013-09-20 20:47 - 00000000 ___DC C:\Users\CS\AppData\Local\MigWiz
2013-09-17 09:19 - 2013-09-20 20:40 - 00000000 ____D C:\Users\CS\SystemRequirementsLab
2013-09-17 09:18 - 2013-09-17 09:18 - 00000000 ____D C:\ProgramData\Oracle
2013-09-17 09:14 - 2013-09-17 09:13 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-17 09:14 - 2013-09-17 09:13 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-17 09:14 - 2013-09-17 09:13 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-17 09:14 - 2013-09-17 09:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-17 09:13 - 2013-09-20 20:37 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-17 09:09 - 2013-09-17 09:09 - 00913832 _____ (Oracle Corporation) C:\Users\CS\Downloads\chromeinstall-7u40.exe
2013-09-16 21:24 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-09-16 21:24 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys
2013-09-16 21:24 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys
2013-09-16 21:23 - 2013-09-16 21:23 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-16 21:22 - 2013-09-16 22:15 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-16 21:22 - 2013-09-16 22:15 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-16 21:21 - 2013-09-16 21:23 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384 (1).exe
2013-09-16 21:18 - 2013-09-16 21:20 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384.exe
2013-09-16 20:51 - 2013-09-16 20:51 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree (1).exe
2013-09-16 20:41 - 2013-09-16 20:44 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (2).exe
2013-09-16 20:40 - 2013-09-16 20:43 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (1).exe
2013-09-16 20:31 - 2013-09-16 20:33 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340.exe
2013-09-16 20:29 - 2013-09-16 20:29 - 00179984 _____ (Kaspersky Lab) C:\Users\CS\Downloads\kss12.0.1.117mlg_en-de_ru-de_fr-de_de-de.exe
2013-09-14 10:40 - 2013-09-14 10:40 - 36965680 _____ (Microsoft Corporation) C:\Users\CS\Downloads\IE9-Windows7-x64-deu.exe
2013-09-13 15:43 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\Documents\Password Depot
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\AppData\Roaming\AceBIT
2013-09-13 11:49 - 2013-09-13 11:51 - 00000000 ____D C:\Users\CS\Documents\Photoflitre
2013-09-13 11:36 - 2013-09-13 11:36 - 00000000 ____D C:\Program Files (x86)\AceBIT
2013-09-13 11:29 - 2013-09-13 11:30 - 00000000 ____D C:\Users\CS\Documents\Network Scanner 5.4.12
2013-09-12 20:27 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-12 20:27 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-12 20:27 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-12 20:27 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-12 20:27 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-12 20:27 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-12 20:27 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-12 20:27 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-12 20:27 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-12 20:27 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-12 20:27 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-12 20:27 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-12 20:27 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-12 20:27 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-12 20:27 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-12 20:27 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-12 20:27 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-12 20:27 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-12 20:27 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-12 20:27 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-12 20:27 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-12 20:27 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-12 20:27 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-12 20:27 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-12 20:27 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 00:04 - 2013-09-22 09:17 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-10 00:04 - 2013-09-16 21:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-10 00:04 - 2013-09-10 14:56 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2013-09-06 15:40 - 2013-09-06 15:40 - 00000000 ____D C:\Users\CS\Desktop\Besucher
2013-09-06 14:50 - 2013-09-06 14:54 - 423572207 _____ C:\Users\CS\Downloads\Windows6.1-KB947821-v28-x64.msu
2013-09-04 19:51 - 2013-09-04 19:51 - 00056943 _____ C:\Users\CS\Desktop\FRSTalt.txt
2013-09-04 15:10 - 2013-09-04 15:10 - 00000000 ___DC C:\FRST
2013-09-04 13:42 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-09-04 00:01 - 2013-09-04 00:08 - 330331616 _____ (MooSoft Development LLC                                    ) C:\Users\CS\Downloads\cleaner9_setup.exe
2013-09-03 12:57 - 2013-09-05 06:03 - 00000000 ____D C:\Users\CS\Desktop\HGL
2013-08-31 14:25 - 2013-08-31 14:25 - 00000000 ____D C:\Windows\system32\IO
2013-08-31 14:20 - 2013-08-31 14:22 - 00000000 ____D C:\Users\CS\AppData\Local\Avg2013
2013-08-30 16:52 - 2013-08-30 16:52 - 00001212 _____ C:\Users\CS\Desktop\Ashampoo Photo Card.lnk
2013-08-30 16:52 - 2013-08-30 16:52 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo
2013-08-30 16:51 - 2013-08-30 16:51 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2013-08-30 16:48 - 2013-08-30 16:49 - 200011368 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\CS\Downloads\ashampoo_photo_card_1.0.0_14061.exe
2013-08-30 05:22 - 2013-08-30 05:22 - 00042571 _____ C:\Users\CS\Documents\2012 - 2013.wlmp
2013-08-29 21:10 - 2013-08-30 15:57 - 00000000 ____D C:\Users\CS\AppData\Local\Ashampoo Photo Optimizer 4
2013-08-29 21:10 - 2013-08-29 21:10 - 00000000 ____D C:\Users\CS\AppData\Local\photoOptimizeHistoryDataBase
2013-08-29 21:08 - 2013-08-30 16:51 - 00000000 ____D C:\ProgramData\Ashampoo
2013-08-29 20:56 - 2013-08-29 21:09 - 49727466 _____ C:\Users\CS\Desktop\ICH LIEBE DICH.mp4
2013-08-29 18:13 - 2013-09-20 20:40 - 00000000 ____D C:\Program Files (x86)\Lyrics_Monkey
2013-08-29 18:07 - 2013-08-29 18:07 - 00719984 _____ C:\Users\CS\Downloads\free-clever-privacy_1.0_de-DE.exe
2013-08-29 17:54 - 2013-08-29 17:54 - 00000000 ____D C:\Users\CS\AppData\Local\Software Updater
2013-08-29 14:50 - 2013-08-29 18:21 - 00000000 ____D C:\Users\CS\AppData\Local\Freemium
2013-08-29 14:49 - 2013-09-21 16:36 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-08-29 14:49 - 2013-09-21 16:36 - 00004124 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-08-29 14:49 - 2013-08-31 17:22 - 00003624 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-08-29 14:48 - 2013-09-20 20:42 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-08-29 14:48 - 2013-09-03 23:13 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-29 14:47 - 2013-09-20 20:42 - 00000000 ____D C:\Users\CS\AppData\Local\DownloadGuide
2013-08-29 14:38 - 2013-08-29 14:38 - 04454952 _____ (Piriform Ltd) C:\Users\CS\Downloads\ccsetup405.exe
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util.exe
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util (1).exe
2013-08-28 23:58 - 2013-09-17 08:03 - 00000000 ____D C:\ProgramData\iolo
2013-08-28 23:58 - 2013-08-28 23:58 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dat
2013-08-28 23:57 - 2013-08-28 23:57 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree.exe
2013-08-27 13:34 - 2013-09-17 09:08 - 00000000 ____D C:\Users\CS\Documents\512erUSB-Stick
2013-08-26 18:44 - 2013-08-26 18:44 - 02472864 _____ C:\Users\CS\Desktop\Tasse.cpr
2013-08-25 20:21 - 2013-08-26 14:18 - 00000000 ____D C:\Users\CS\Documents\Autoruns
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 16:06 - 2013-08-25 16:06 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.r5003.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 14:57 - 2013-08-28 22:44 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IncrediGames Games
2013-08-25 14:57 - 2013-08-25 14:57 - 00000000 ____D C:\Users\CS\AppData\Roaming\Playrix Entertainment
2013-08-25 14:55 - 2013-09-20 20:40 - 00000000 ____D C:\Program Files (x86)\GamesBar
2013-08-25 14:55 - 2013-08-25 14:55 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\fishdom3-510007712-setup.s510007712.c110009390.r5003.len.uff0781bc14185286bf7f0fa353d34d3ab99bf078.dl.exe
2013-08-24 22:05 - 2013-08-28 22:44 - 00000000 ____D C:\Program Files (x86)\Rossmann Fotowelt Software
2013-08-24 16:01 - 2013-08-24 16:01 - 00000000 ____D C:\Users\Stephie\Documents\Add-in Express
2013-08-24 15:18 - 2013-08-24 15:24 - 680525824 _____ C:\Users\Stephie\Downloads\ophcrack-vista-livecd-3.6.0.iso
2013-08-24 15:12 - 2013-09-08 11:11 - 00000000 ____D C:\Users\Stephie\AppData\Local\Windows Live
2013-08-24 15:08 - 2013-08-24 15:08 - 00000680 __RSH C:\Users\Stephie\ntuser.pol
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\Documents\Firefall
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\AppData\Local\Red 5 Studios
2013-08-23 19:21 - 2013-08-30 15:58 - 00000000 ____D C:\Program Files (x86)\Flaschbier_Total
2013-08-23 19:20 - 2013-08-23 19:21 - 26204499 _____ () C:\Users\CS\Downloads\Flaschbier_Total_Setup.exe
2013-08-23 18:59 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\Red 5 Studios
2013-08-23 18:59 - 2013-08-23 18:59 - 17831072 _____ C:\Users\CS\Downloads\FirefallInstaller.exe
2013-08-23 18:35 - 2013-09-10 14:56 - 00000000 ____D C:\ProgramData\DrivingSpeed2
2013-08-23 18:33 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\DrivingSpeed2
2013-08-23 18:30 - 2013-08-23 18:31 - 112069457 _____ (WheelSpin Studios                                          ) C:\Users\CS\Downloads\SetupDrivingSpeed2011.exe
2013-08-23 18:18 - 2013-08-26 14:13 - 00000432 _____ C:\Windows\system32\Drivers\etc\hosts.ics

==================== One Month Modified Files and Folders =======

2013-09-22 09:17 - 2013-09-10 00:04 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-22 09:17 - 2012-12-31 01:05 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-22 09:12 - 2011-02-20 02:38 - 01242671 _____ C:\Windows\WindowsUpdate.log
2013-09-22 09:11 - 2012-12-29 11:13 - 00000000 ____D C:\Users\CS\AppData\Local\Windows Live
2013-09-22 09:07 - 2009-07-14 06:45 - 00023024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-22 09:07 - 2009-07-14 06:45 - 00023024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-22 09:00 - 2013-09-18 14:28 - 00000392 _____ C:\Windows\setupact.log
2013-09-22 09:00 - 2013-08-10 10:45 - 00000680 __RSH C:\Users\CS\ntuser.pol
2013-09-22 09:00 - 2012-12-31 01:05 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-22 09:00 - 2012-12-29 03:38 - 00000000 ____D C:\Users\CS
2013-09-22 09:00 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-21 18:36 - 2013-09-17 19:29 - 00047207 _____ C:\Windows\IE10_main.log
2013-09-21 18:34 - 2013-09-21 18:34 - 00891144 _____ C:\Users\CS\Desktop\SecurityCheck (1).exe
2013-09-21 18:27 - 2013-07-16 21:22 - 00000916 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000UA.job
2013-09-21 17:58 - 2012-12-31 01:05 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-21 16:36 - 2013-08-29 14:49 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-09-21 16:36 - 2013-08-29 14:49 - 00004124 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-09-21 16:33 - 2013-09-21 16:33 - 00891144 _____ C:\Users\CS\Downloads\SecurityCheck.exe
2013-09-21 14:39 - 2013-09-21 14:39 - 02347384 _____ (ESET) C:\Users\CS\Downloads\esetsmartinstaller_enu.exe
2013-09-21 08:40 - 2013-09-18 14:28 - 00002350 _____ C:\Windows\PFRO.log
2013-09-20 23:55 - 2013-07-07 10:57 - 00003168 _____ C:\Windows\System32\Tasks\HPCeeScheduleForCS
2013-09-20 23:55 - 2013-07-07 10:57 - 00000320 _____ C:\Windows\Tasks\HPCeeScheduleForCS.job
2013-09-20 21:27 - 2013-07-16 21:22 - 00000894 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000Core.job
2013-09-20 21:11 - 2013-09-20 21:09 - 00001256 _____ C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-20 21:09 - 2013-09-20 21:09 - 00001409 _____ C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-09-20 20:47 - 2013-09-17 10:00 - 00000000 ___DC C:\Users\CS\AppData\Local\MigWiz
2013-09-20 20:42 - 2013-08-29 14:48 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-09-20 20:42 - 2013-08-29 14:47 - 00000000 ____D C:\Users\CS\AppData\Local\DownloadGuide
2013-09-20 20:42 - 2013-01-22 11:02 - 00000000 ____D C:\System Recovery Files
2013-09-20 20:40 - 2013-09-20 17:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-20 20:40 - 2013-09-18 14:42 - 00000000 ____D C:\Windows\erdnt
2013-09-20 20:40 - 2013-09-17 16:36 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2013-09-20 20:40 - 2013-09-17 09:19 - 00000000 ____D C:\Users\CS\SystemRequirementsLab
2013-09-20 20:40 - 2013-08-29 18:13 - 00000000 ____D C:\Program Files (x86)\Lyrics_Monkey
2013-09-20 20:40 - 2013-08-25 14:55 - 00000000 ____D C:\Program Files (x86)\GamesBar
2013-09-20 20:40 - 2013-08-11 20:00 - 00000000 ____D C:\Users\Besucher
2013-09-20 20:40 - 2013-08-07 23:51 - 00000000 ____D C:\Program Files (x86)\Oberon Media SIDR
2013-09-20 20:40 - 2013-07-31 18:54 - 00000000 ____D C:\Users\Stephie
2013-09-20 20:40 - 2013-07-11 16:11 - 00000000 ____D C:\Users\CS\AppData\Roaming\SSync
2013-09-20 20:40 - 2013-07-11 16:11 - 00000000 ____D C:\Users\CS\AppData\Roaming\SCheck
2013-09-20 20:40 - 2013-07-11 16:11 - 00000000 ____D C:\Users\CS\AppData\Roaming\Intermediate
2013-09-20 20:40 - 2013-07-11 16:10 - 00000000 ____D C:\Users\CS\AppData\Roaming\Common
2013-09-20 20:40 - 2013-07-06 14:26 - 00000000 ____D C:\Users\CS\AppData\Roaming\BabSolution
2013-09-20 20:40 - 2013-07-06 14:23 - 00000000 ____D C:\Users\CS\AppData\Roaming\OCS
2013-09-20 20:40 - 2013-07-06 14:23 - 00000000 ____D C:\Users\CS\AppData\Roaming\DesktopIconForAmazon
2013-09-20 20:40 - 2013-06-01 17:54 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-09-20 20:40 - 2013-06-01 17:40 - 00000000 ____D C:\Users\CS\AppData\Local\PutLockerDownloader
2013-09-20 20:40 - 2013-05-04 20:42 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-09-20 20:40 - 2012-12-31 15:56 - 00000000 ____D C:\Users\CS\AppData\Local\Abelssoft
2013-09-20 20:40 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2013-09-20 20:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-20 20:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Msdtc
2013-09-20 20:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-09-20 20:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-09-20 20:38 - 2013-09-18 14:43 - 00000000 ___DC C:\Qoobox
2013-09-20 20:38 - 2013-05-12 17:24 - 00000000 ____D C:\Users\CS\AppData\Roaming\Mozilla
2013-09-20 20:38 - 2013-05-04 20:40 - 00000000 ____D C:\ProgramData\Apple
2013-09-20 20:37 - 2013-09-17 09:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-20 20:29 - 2013-09-20 20:29 - 01745015 _____ C:\Users\CS\Downloads\AFA9015_win7 (2).zip
2013-09-20 17:58 - 2013-09-20 17:58 - 00002787 _____ C:\Users\CS\Desktop\JRT.txt
2013-09-20 17:43 - 2013-09-20 17:34 - 00000000 ___DC C:\AdwCleaner
2013-09-20 17:30 - 2013-09-20 17:30 - 00000000 ____D C:\Users\CS\AppData\Roaming\Malwarebytes
2013-09-20 17:30 - 2013-09-20 17:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-20 17:29 - 2013-01-25 19:12 - 00079360 ___SH C:\Users\CS\Documents\Thumbs.db
2013-09-20 17:18 - 2013-09-20 17:18 - 00030978 ____C C:\ComboFix.txt
2013-09-18 14:55 - 2009-07-14 04:34 - 00000215 ____C C:\Windows\system.ini
2013-09-18 14:41 - 2013-09-18 14:41 - 05128653 ____R (Swearware) C:\Users\CS\Downloads\ComboFix.exe
2013-09-18 14:28 - 2013-09-18 14:28 - 00000000 _____ C:\Windows\setuperr.log
2013-09-17 19:01 - 2013-09-17 19:00 - 00045807 _____ C:\Users\CS\Downloads\Addition.txt
2013-09-17 18:57 - 2013-09-17 18:57 - 01950524 _____ (Farbar) C:\Users\CS\Downloads\FRST64.exe
2013-09-17 16:45 - 2013-09-17 16:45 - 00000000 ____D C:\Users\CS\AppData\Roaming\KeePass
2013-09-17 16:36 - 2013-09-17 16:36 - 00001109 _____ C:\Users\CS\Desktop\KeePass 2.lnk
2013-09-17 16:35 - 2013-09-17 16:35 - 02513520 _____ (Dominik Reichl                                              ) C:\Users\CS\Downloads\KeePass-2.23-Setup.exe
2013-09-17 13:16 - 2013-09-17 10:03 - 168419899 _____ C:\Users\CS\Desktop\Windows-EasyTransfer - Elemente Quellcomputer17.092013.MIG
2013-09-17 10:30 - 2011-01-10 02:49 - 00700746 _____ C:\Windows\system32\perfh007.dat
2013-09-17 10:30 - 2011-01-10 02:49 - 00149696 _____ C:\Windows\system32\perfc007.dat
2013-09-17 10:30 - 2009-07-14 07:13 - 01621244 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-17 09:18 - 2013-09-17 09:18 - 00000000 ____D C:\ProgramData\Oracle
2013-09-17 09:13 - 2013-09-17 09:14 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-17 09:13 - 2013-09-17 09:14 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-17 09:13 - 2013-09-17 09:14 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-17 09:13 - 2013-09-17 09:14 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-17 09:13 - 2013-01-14 18:21 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-09-17 09:13 - 2011-01-09 19:06 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-17 09:09 - 2013-09-17 09:09 - 00913832 _____ (Oracle Corporation) C:\Users\CS\Downloads\chromeinstall-7u40.exe
2013-09-17 09:08 - 2013-08-27 13:34 - 00000000 ____D C:\Users\CS\Documents\512erUSB-Stick
2013-09-17 08:03 - 2013-08-28 23:58 - 00000000 ____D C:\ProgramData\iolo
2013-09-16 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-16 22:15 - 2013-09-16 21:22 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-16 22:15 - 2013-09-16 21:22 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-16 22:15 - 2012-10-18 14:50 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-09-16 22:15 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2013-09-16 21:23 - 2013-09-16 21:23 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-16 21:23 - 2013-09-16 21:21 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384 (1).exe
2013-09-16 21:23 - 2013-09-10 00:04 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-16 21:20 - 2013-09-16 21:18 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384.exe
2013-09-16 20:51 - 2013-09-16 20:51 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree (1).exe
2013-09-16 20:44 - 2013-09-16 20:41 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (2).exe
2013-09-16 20:43 - 2013-09-16 20:40 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (1).exe
2013-09-16 20:33 - 2013-09-16 20:31 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340.exe
2013-09-16 20:29 - 2013-09-16 20:29 - 00179984 _____ (Kaspersky Lab) C:\Users\CS\Downloads\kss12.0.1.117mlg_en-de_ru-de_fr-de_de-de.exe
2013-09-15 17:54 - 2012-12-30 11:18 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-09-14 10:58 - 2012-12-31 01:05 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-14 10:58 - 2012-12-31 01:05 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-14 10:58 - 2012-12-31 01:05 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-14 10:40 - 2013-09-14 10:40 - 36965680 _____ (Microsoft Corporation) C:\Users\CS\Downloads\IE9-Windows7-x64-deu.exe
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\Documents\Password Depot
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\AppData\Roaming\AceBIT
2013-09-13 11:51 - 2013-09-13 11:49 - 00000000 ____D C:\Users\CS\Documents\Photoflitre
2013-09-13 11:36 - 2013-09-13 11:36 - 00000000 ____D C:\Program Files (x86)\AceBIT
2013-09-13 11:30 - 2013-09-13 11:29 - 00000000 ____D C:\Users\CS\Documents\Network Scanner 5.4.12
2013-09-13 11:18 - 2013-02-17 17:03 - 00000000 ____D C:\Program Files (x86)\ProgDVB
2013-09-13 11:17 - 2012-12-29 11:09 - 01643172 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-13 11:14 - 2013-04-13 13:45 - 00007634 _____ C:\Users\CS\AppData\Local\Resmon.ResmonCfg
2013-09-13 10:15 - 2012-12-29 03:43 - 00000000 ___RD C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-13 10:15 - 2012-12-29 03:43 - 00000000 ___RD C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-13 10:14 - 2009-07-14 06:45 - 00433416 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-12 21:13 - 2013-08-05 19:44 - 00000000 ____D C:\Windows\system32\MRT
2013-09-12 21:11 - 2012-12-29 11:16 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-10 15:26 - 2012-12-29 04:14 - 00003212 _____ C:\Windows\System32\Tasks\HPCeeScheduleForCS-HP$
2013-09-10 15:26 - 2012-12-29 04:14 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForCS-HP$.job
2013-09-10 14:56 - 2013-09-10 00:04 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2013-09-10 14:56 - 2013-09-04 13:42 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-09-10 14:56 - 2013-08-23 18:59 - 00000000 ____D C:\Program Files (x86)\Red 5 Studios
2013-09-10 14:56 - 2013-08-23 18:35 - 00000000 ____D C:\ProgramData\DrivingSpeed2
2013-09-10 14:56 - 2013-08-23 18:33 - 00000000 ____D C:\Program Files (x86)\DrivingSpeed2
2013-09-10 14:56 - 2013-08-17 11:01 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Adobe
2013-09-10 14:56 - 2013-08-11 20:03 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Duden
2013-09-10 14:56 - 2013-08-11 20:01 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-10 14:56 - 2013-08-11 20:01 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-10 14:56 - 2013-08-11 20:01 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-09-10 14:56 - 2013-08-11 20:00 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-10 14:56 - 2013-08-11 20:00 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-10 14:56 - 2013-08-11 20:00 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Macromedia
2013-09-10 14:56 - 2013-07-06 14:26 - 00000000 ____D C:\Program Files\CCleaner
2013-09-08 20:17 - 2011-02-20 11:25 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-09-08 11:11 - 2013-08-24 15:12 - 00000000 ____D C:\Users\Stephie\AppData\Local\Windows Live
2013-09-06 15:52 - 2012-12-30 00:39 - 00000000 ____D C:\Users\CS\AppData\Local\CrashDumps
2013-09-06 15:40 - 2013-09-06 15:40 - 00000000 ____D C:\Users\CS\Desktop\Besucher
2013-09-06 14:54 - 2013-09-06 14:50 - 423572207 _____ C:\Users\CS\Downloads\Windows6.1-KB947821-v28-x64.msu
2013-09-05 06:03 - 2013-09-03 12:57 - 00000000 ____D C:\Users\CS\Desktop\HGL
2013-09-04 19:51 - 2013-09-04 19:51 - 00056943 _____ C:\Users\CS\Desktop\FRSTalt.txt
2013-09-04 15:10 - 2013-09-04 15:10 - 00000000 ___DC C:\FRST
2013-09-04 00:08 - 2013-09-04 00:01 - 330331616 _____ (MooSoft Development LLC                                    ) C:\Users\CS\Downloads\cleaner9_setup.exe
2013-09-03 23:13 - 2013-08-29 14:48 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-31 20:34 - 2012-12-31 01:05 - 00000000 ____D C:\Users\CS\AppData\Local\Google
2013-08-31 17:22 - 2013-08-29 14:49 - 00003624 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-08-31 14:25 - 2013-08-31 14:25 - 00000000 ____D C:\Windows\system32\IO
2013-08-31 14:22 - 2013-08-31 14:20 - 00000000 ____D C:\Users\CS\AppData\Local\Avg2013
2013-08-31 14:22 - 2012-12-29 04:22 - 00000000 ____D C:\ProgramData\MFAData
2013-08-30 19:25 - 2013-02-16 18:28 - 00000000 ___DC C:\sim_scan
2013-08-30 18:16 - 2012-12-30 00:03 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2013-08-30 18:14 - 2013-05-07 22:45 - 00000000 ____D C:\Users\CS\Documents\My Games
2013-08-30 16:52 - 2013-08-30 16:52 - 00001212 _____ C:\Users\CS\Desktop\Ashampoo Photo Card.lnk
2013-08-30 16:52 - 2013-08-30 16:52 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo
2013-08-30 16:51 - 2013-08-30 16:51 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2013-08-30 16:51 - 2013-08-29 21:08 - 00000000 ____D C:\ProgramData\Ashampoo
2013-08-30 16:49 - 2013-08-30 16:48 - 200011368 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\CS\Downloads\ashampoo_photo_card_1.0.0_14061.exe
2013-08-30 16:02 - 2013-05-04 20:42 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-30 15:58 - 2013-08-23 19:21 - 00000000 ____D C:\Program Files (x86)\Flaschbier_Total
2013-08-30 15:57 - 2013-08-29 21:10 - 00000000 ____D C:\Users\CS\AppData\Local\Ashampoo Photo Optimizer 4
2013-08-30 05:22 - 2013-08-30 05:22 - 00042571 _____ C:\Users\CS\Documents\2012 - 2013.wlmp
2013-08-29 21:10 - 2013-08-29 21:10 - 00000000 ____D C:\Users\CS\AppData\Local\photoOptimizeHistoryDataBase
2013-08-29 21:09 - 2013-08-29 20:56 - 49727466 _____ C:\Users\CS\Desktop\ICH LIEBE DICH.mp4
2013-08-29 18:21 - 2013-08-29 14:50 - 00000000 ____D C:\Users\CS\AppData\Local\Freemium
2013-08-29 18:07 - 2013-08-29 18:07 - 00719984 _____ C:\Users\CS\Downloads\free-clever-privacy_1.0_de-DE.exe
2013-08-29 17:54 - 2013-08-29 17:54 - 00000000 ____D C:\Users\CS\AppData\Local\Software Updater
2013-08-29 15:29 - 2013-02-04 13:13 - 00000000 ____D C:\Users\CS\Documents\Scans
2013-08-29 14:38 - 2013-08-29 14:38 - 04454952 _____ (Piriform Ltd) C:\Users\CS\Downloads\ccsetup405.exe
2013-08-29 14:37 - 2013-08-10 10:28 - 00000000 ____D C:\Users\CS\Documents\Treiber&Sicherungen
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util.exe
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util (1).exe
2013-08-28 23:58 - 2013-08-28 23:58 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dat
2013-08-28 23:57 - 2013-08-28 23:57 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree.exe
2013-08-28 22:44 - 2013-08-25 14:57 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IncrediGames Games
2013-08-28 22:44 - 2013-08-24 22:05 - 00000000 ____D C:\Program Files (x86)\Rossmann Fotowelt Software
2013-08-28 22:44 - 2013-08-07 23:51 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Incredigames DE
2013-08-28 22:44 - 2013-08-07 23:49 - 00000000 ____D C:\ProgramData\Oberon Media
2013-08-28 22:44 - 2012-12-31 01:05 - 00000000 ____D C:\Program Files\Google
2013-08-28 22:44 - 2012-12-31 01:05 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-28 22:44 - 2011-02-20 02:37 - 00000000 ____D C:\Windows\SysWOW64\sda
2013-08-28 22:44 - 2011-01-09 18:53 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2013-08-28 22:44 - 2011-01-09 18:45 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-08-28 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Recovery
2013-08-28 22:43 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\SysWOW64\WindowsPowerShell
2013-08-28 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\spp
2013-08-28 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Speech
2013-08-28 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\NetworkList
2013-08-26 18:45 - 2013-07-22 20:39 - 00000000 ____D C:\Users\CS\Documents\pdf.Dateien
2013-08-26 18:44 - 2013-08-26 18:44 - 02472864 _____ C:\Users\CS\Desktop\Tasse.cpr
2013-08-26 14:18 - 2013-08-25 20:21 - 00000000 ____D C:\Users\CS\Documents\Autoruns
2013-08-26 14:18 - 2013-08-07 23:51 - 00000000 ____D C:\Users\CS\AppData\Roaming\Oberon Media
2013-08-26 14:18 - 2012-12-29 14:12 - 00000000 ____D C:\Users\CS\Documents\Youcam
2013-08-26 14:13 - 2013-08-23 18:18 - 00000432 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 16:06 - 2013-08-25 16:06 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.r5003.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 14:57 - 2013-08-25 14:57 - 00000000 ____D C:\Users\CS\AppData\Roaming\Playrix Entertainment
2013-08-25 14:55 - 2013-08-25 14:55 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\fishdom3-510007712-setup.s510007712.c110009390.r5003.len.uff0781bc14185286bf7f0fa353d34d3ab99bf078.dl.exe
2013-08-24 21:40 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-24 16:01 - 2013-08-24 16:01 - 00000000 ____D C:\Users\Stephie\Documents\Add-in Express
2013-08-24 15:24 - 2013-08-24 15:18 - 680525824 _____ C:\Users\Stephie\Downloads\ophcrack-vista-livecd-3.6.0.iso
2013-08-24 15:08 - 2013-08-24 15:08 - 00000680 __RSH C:\Users\Stephie\ntuser.pol
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\Documents\Firefall
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\AppData\Local\Red 5 Studios
2013-08-23 19:21 - 2013-08-23 19:20 - 26204499 _____ () C:\Users\CS\Downloads\Flaschbier_Total_Setup.exe
2013-08-23 19:00 - 2013-05-07 18:29 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-08-23 19:00 - 2012-12-29 04:07 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-08-23 18:59 - 2013-08-23 18:59 - 17831072 _____ C:\Users\CS\Downloads\FirefallInstaller.exe
2013-08-23 18:31 - 2013-08-23 18:30 - 112069457 _____ (WheelSpin Studios                                          ) C:\Users\CS\Downloads\SetupDrivingSpeed2011.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-21 00:19

==================== End Of Log ============================
--- --- ---
Was sagen diese Ergebnisse? Wie kann ich denn sehen ob noch Bedrohungen im Rechner sind? Und wie schütze ich mein PC auf Dauer?

BG
Carsten

CarstenS. 22.09.2013 08:29
Moin Schrauber, hier nun die weiteren Ergebnisse:

Results of screen317's Security Check version 0.99.73
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
Kaspersky PURE 3.0
Microsoft Security Essentials
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Java 7 Update 40
Java version out of Date!
Adobe Flash Player 11.8.800.168
Adobe Reader 9 Adobe Reader out of Date!
Google Chrome 29.0.1547.66
Google Chrome 29.0.1547.76
````````Process Check: objlist.exe by Laurent````````
Microsoft Security Essentials MSMpEng.exe
Microsoft Security Essentials msseces.exe
Kaspersky Lab Kaspersky PURE 3.0 avp.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013 03 (ATTENTION: ====> FRST version is 6 days old and could be outdated)
Ran by CS (administrator) on CS-HP on 22-09-2013 09:18:25
Running from C:\Users\CS\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
( ) C:\Windows\system32\lxducoms.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\Lexmark 5600-6600 Series\lxdumon.exe
() C:\Program Files (x86)\Lexmark 5600-6600 Series\lxduMsdMon.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\wmi64.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [lxdumon.exe] - C:\Program Files (x86)\Lexmark 5600-6600 Series\lxdumon.exe [676520 2010-02-04] ()
HKLM\...\Run: [lxduamon] - C:\Program Files (x86)\Lexmark 5600-6600 Series\lxduamon.exe [16040 2010-02-04] ()
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1424896 2011-09-08] (IDT, Inc.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-07-18] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKCU\...\Run: [SCheck] - C:\Users\CS\AppData\Roaming\SCheck\SCheck.exe [36864 2013-04-10] ()
HKCU\...\Run: [Snoozer] - C:\Users\CS\AppData\Roaming\Snz\Snz.exe [1137764 2013-08-28] ()
HKCU\...\Run: [Intermediate] - C:\Users\CS\AppData\Roaming\Intermediate\Intermediate.exe [36864 2013-04-10] ()
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2010-12-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [111640 2010-07-23] ()
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2010624 2013-07-20] (Dominik Reichl)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
HKU\Besucher\...\Run: [Duden Korrektor SysTray] - C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Besucher\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2010-11-22] (Hewlett-Packard Company)
HKU\Besucher\...\Policies\system: [LogonHoursAction] 2
HKU\Besucher\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Default\...\Run: [Duden Korrektor SysTray] - C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Stephie\...\Run: [Duden Korrektor SysTray] - C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Stephie\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2010-11-22] (Hewlett-Packard Company)
HKU\Stephie\...\Run: [IncrediMail] - C:\Program Files (x86)\IncrediMail\bin\IncMail.exe [444840 2013-08-02] (IncrediMail, Ltd.)
HKU\Stephie\...\Policies\system: [LogonHoursAction] 2
HKU\Stephie\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Bing
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=OSDSRC
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.yd.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=686B90004E2B8D34&affID=119828&tt=040713_rdrctful&tsp=4935
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=OSDSRC
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} -  No File
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Lexmark  - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.76\npchrome_frame.dll (Google Inc.)
Toolbar: HKLM -  No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 -  No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\Kaspersky Password Manager\spIEBho.dll (Kaspersky Lab)
Toolbar: HKCU -  No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM {3234EB1E-733E-4E6A-A8AB-EBB6287E5A7E} hxxp://content.systemrequirementslab.com/bin/srldetect_intel64_4.5.15.0.cab
DPF: HKLM {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1263.cab
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect121.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\29.0.1547.76\npchrome_frame.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @oberon-media.com/ONCAdapter - C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.14\npapicomadapter.dll (Oberon-Media )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\CS\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Extension: No Name - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\searchplugins
FF Extension: ftdownloader4 - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\ftdownloader4@ftdownloader.com.xpi
FF Extension: No Name - C:\Users\CS\AppData\Roaming\Mozilla\Firefox\profiles\extensions\user.js
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
FF HKCU\...\Firefox\Extensions: [{c5114a67-795a-4dbb-8030-91a43e51c8bb}] - C:\Program Files (x86)\Lyrics_Monkey\131.xpi

Chrome:
=======
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll ()
CHR Plugin: (GoogleChromeRemotePlugin) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\GoogleChromeRemotePlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\CS\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll No File
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\CS\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll No File
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\CS\AppData\Roaming\Mozilla\plugins\npo1d.dll No File
CHR Plugin: (iTunes Application Detector) - C:\IPod\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Unity Player) - C:\Users\CS\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.150.3) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (HP Product Detection Plugin) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aelbknmfcacjffmgnoaaonhgoghlmlkp\1.0.28.1_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0
CHR Extension: (OfferMosquito) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.6.1_0
CHR Extension: (Safe Money) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0
CHR Extension: (Virtual Keyboard) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.558_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: () - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofnnlhbgdcabppjmlijllkhekcglbjlg\1.131_0
CHR Extension: (Anti-Banner) - C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0
CHR HKLM-x32\...\Chrome\Extension: [bebnnlollpcjnfpkafhoclljaojgnfok] - C:\Program Files (x86)\FTDownloader.com\FTDownloader10.crx
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [ofnnlhbgdcabppjmlijllkhekcglbjlg] - C:\Program Files (x86)\Lyrics_Monkey\131.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
R2 lxdu_device; C:\Windows\system32\lxducoms.exe [1039360 2010-02-04] ( )
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2013-07-18] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-07-18] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [296448 2013-08-29] ()

==================== Drivers (Whitelisted) ====================

R2 cpuz135; C:\Windows\system32\drivers\cpuz135_x64.sys [21992 2011-09-21] (CPUID)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-09-16] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-09-16] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-09-16] (Kaspersky Lab ZAO)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-09-16] (Kaspersky Lab ZAO)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-21 18:34 - 2013-09-21 18:34 - 00891144 _____ C:\Users\CS\Desktop\SecurityCheck (1).exe
2013-09-21 16:33 - 2013-09-21 16:33 - 00891144 _____ C:\Users\CS\Downloads\SecurityCheck.exe
2013-09-21 14:39 - 2013-09-21 14:39 - 02347384 _____ (ESET) C:\Users\CS\Downloads\esetsmartinstaller_enu.exe
2013-09-20 21:09 - 2013-09-20 21:11 - 00001256 _____ C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-20 21:09 - 2013-09-20 21:09 - 00001409 _____ C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-09-20 20:29 - 2013-09-20 20:29 - 01745015 _____ C:\Users\CS\Downloads\AFA9015_win7 (2).zip
2013-09-20 17:58 - 2013-09-20 17:58 - 00002787 _____ C:\Users\CS\Desktop\JRT.txt
2013-09-20 17:34 - 2013-09-20 17:43 - 00000000 ___DC C:\AdwCleaner
2013-09-20 17:30 - 2013-09-20 20:40 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-20 17:30 - 2013-09-20 17:30 - 00000000 ____D C:\Users\CS\AppData\Roaming\Malwarebytes
2013-09-20 17:30 - 2013-09-20 17:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-20 17:18 - 2013-09-20 17:18 - 00030978 ____C C:\ComboFix.txt
2013-09-18 14:44 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-18 14:44 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-18 14:44 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-18 14:44 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-18 14:44 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-18 14:44 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-18 14:44 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-18 14:44 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-18 14:43 - 2013-09-20 20:38 - 00000000 ___DC C:\Qoobox
2013-09-18 14:42 - 2013-09-20 20:40 - 00000000 ____D C:\Windows\erdnt
2013-09-18 14:41 - 2013-09-18 14:41 - 05128653 ____R (Swearware) C:\Users\CS\Downloads\ComboFix.exe
2013-09-18 14:28 - 2013-09-22 09:00 - 00000392 _____ C:\Windows\setupact.log
2013-09-18 14:28 - 2013-09-21 08:40 - 00002350 _____ C:\Windows\PFRO.log
2013-09-18 14:28 - 2013-09-18 14:28 - 00000000 _____ C:\Windows\setuperr.log
2013-09-17 19:29 - 2013-09-21 18:36 - 00047207 _____ C:\Windows\IE10_main.log
2013-09-17 19:00 - 2013-09-17 19:01 - 00045807 _____ C:\Users\CS\Downloads\Addition.txt
2013-09-17 18:57 - 2013-09-17 18:57 - 01950524 _____ (Farbar) C:\Users\CS\Downloads\FRST64.exe
2013-09-17 16:45 - 2013-09-17 16:45 - 00000000 ____D C:\Users\CS\AppData\Roaming\KeePass
2013-09-17 16:36 - 2013-09-20 20:40 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2013-09-17 16:36 - 2013-09-17 16:36 - 00001109 _____ C:\Users\CS\Desktop\KeePass 2.lnk
2013-09-17 16:35 - 2013-09-17 16:35 - 02513520 _____ (Dominik Reichl                                              ) C:\Users\CS\Downloads\KeePass-2.23-Setup.exe
2013-09-17 10:03 - 2013-09-17 13:16 - 168419899 _____ C:\Users\CS\Desktop\Windows-EasyTransfer - Elemente Quellcomputer17.092013.MIG
2013-09-17 10:00 - 2013-09-20 20:47 - 00000000 ___DC C:\Users\CS\AppData\Local\MigWiz
2013-09-17 09:19 - 2013-09-20 20:40 - 00000000 ____D C:\Users\CS\SystemRequirementsLab
2013-09-17 09:18 - 2013-09-17 09:18 - 00000000 ____D C:\ProgramData\Oracle
2013-09-17 09:14 - 2013-09-17 09:13 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-17 09:14 - 2013-09-17 09:13 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-17 09:14 - 2013-09-17 09:13 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-17 09:14 - 2013-09-17 09:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-17 09:13 - 2013-09-20 20:37 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-17 09:09 - 2013-09-17 09:09 - 00913832 _____ (Oracle Corporation) C:\Users\CS\Downloads\chromeinstall-7u40.exe
2013-09-16 21:24 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-09-16 21:24 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys
2013-09-16 21:24 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys
2013-09-16 21:23 - 2013-09-16 21:23 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-16 21:22 - 2013-09-16 22:15 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-16 21:22 - 2013-09-16 22:15 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-16 21:21 - 2013-09-16 21:23 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384 (1).exe
2013-09-16 21:18 - 2013-09-16 21:20 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384.exe
2013-09-16 20:51 - 2013-09-16 20:51 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree (1).exe
2013-09-16 20:41 - 2013-09-16 20:44 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (2).exe
2013-09-16 20:40 - 2013-09-16 20:43 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (1).exe
2013-09-16 20:31 - 2013-09-16 20:33 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340.exe
2013-09-16 20:29 - 2013-09-16 20:29 - 00179984 _____ (Kaspersky Lab) C:\Users\CS\Downloads\kss12.0.1.117mlg_en-de_ru-de_fr-de_de-de.exe
2013-09-14 10:40 - 2013-09-14 10:40 - 36965680 _____ (Microsoft Corporation) C:\Users\CS\Downloads\IE9-Windows7-x64-deu.exe
2013-09-13 15:43 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\Documents\Password Depot
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\AppData\Roaming\AceBIT
2013-09-13 11:49 - 2013-09-13 11:51 - 00000000 ____D C:\Users\CS\Documents\Photoflitre
2013-09-13 11:36 - 2013-09-13 11:36 - 00000000 ____D C:\Program Files (x86)\AceBIT
2013-09-13 11:29 - 2013-09-13 11:30 - 00000000 ____D C:\Users\CS\Documents\Network Scanner 5.4.12
2013-09-12 20:27 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-12 20:27 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-12 20:27 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-12 20:27 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-12 20:27 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-12 20:27 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-12 20:27 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-12 20:27 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-12 20:27 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-12 20:27 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-12 20:27 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-12 20:27 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-12 20:27 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-12 20:27 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-12 20:27 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-12 20:27 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-12 20:27 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-12 20:27 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-12 20:27 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-12 20:27 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-12 20:27 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 20:27 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-12 20:27 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-12 20:27 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-12 20:27 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-12 20:27 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 00:04 - 2013-09-22 09:17 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-10 00:04 - 2013-09-16 21:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-10 00:04 - 2013-09-10 14:56 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2013-09-06 15:40 - 2013-09-06 15:40 - 00000000 ____D C:\Users\CS\Desktop\Besucher
2013-09-06 14:50 - 2013-09-06 14:54 - 423572207 _____ C:\Users\CS\Downloads\Windows6.1-KB947821-v28-x64.msu
2013-09-04 19:51 - 2013-09-04 19:51 - 00056943 _____ C:\Users\CS\Desktop\FRSTalt.txt
2013-09-04 15:10 - 2013-09-04 15:10 - 00000000 ___DC C:\FRST
2013-09-04 13:42 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-09-04 00:01 - 2013-09-04 00:08 - 330331616 _____ (MooSoft Development LLC                                    ) C:\Users\CS\Downloads\cleaner9_setup.exe
2013-09-03 12:57 - 2013-09-05 06:03 - 00000000 ____D C:\Users\CS\Desktop\HGL
2013-08-31 14:25 - 2013-08-31 14:25 - 00000000 ____D C:\Windows\system32\IO
2013-08-31 14:20 - 2013-08-31 14:22 - 00000000 ____D C:\Users\CS\AppData\Local\Avg2013
2013-08-30 16:52 - 2013-08-30 16:52 - 00001212 _____ C:\Users\CS\Desktop\Ashampoo Photo Card.lnk
2013-08-30 16:52 - 2013-08-30 16:52 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo
2013-08-30 16:51 - 2013-08-30 16:51 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2013-08-30 16:48 - 2013-08-30 16:49 - 200011368 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\CS\Downloads\ashampoo_photo_card_1.0.0_14061.exe
2013-08-30 05:22 - 2013-08-30 05:22 - 00042571 _____ C:\Users\CS\Documents\2012 - 2013.wlmp
2013-08-29 21:10 - 2013-08-30 15:57 - 00000000 ____D C:\Users\CS\AppData\Local\Ashampoo Photo Optimizer 4
2013-08-29 21:10 - 2013-08-29 21:10 - 00000000 ____D C:\Users\CS\AppData\Local\photoOptimizeHistoryDataBase
2013-08-29 21:08 - 2013-08-30 16:51 - 00000000 ____D C:\ProgramData\Ashampoo
2013-08-29 20:56 - 2013-08-29 21:09 - 49727466 _____ C:\Users\CS\Desktop\ICH LIEBE DICH.mp4
2013-08-29 18:13 - 2013-09-20 20:40 - 00000000 ____D C:\Program Files (x86)\Lyrics_Monkey
2013-08-29 18:07 - 2013-08-29 18:07 - 00719984 _____ C:\Users\CS\Downloads\free-clever-privacy_1.0_de-DE.exe
2013-08-29 17:54 - 2013-08-29 17:54 - 00000000 ____D C:\Users\CS\AppData\Local\Software Updater
2013-08-29 14:50 - 2013-08-29 18:21 - 00000000 ____D C:\Users\CS\AppData\Local\Freemium
2013-08-29 14:49 - 2013-09-21 16:36 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-08-29 14:49 - 2013-09-21 16:36 - 00004124 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-08-29 14:49 - 2013-08-31 17:22 - 00003624 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-08-29 14:48 - 2013-09-20 20:42 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-08-29 14:48 - 2013-09-03 23:13 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-29 14:47 - 2013-09-20 20:42 - 00000000 ____D C:\Users\CS\AppData\Local\DownloadGuide
2013-08-29 14:38 - 2013-08-29 14:38 - 04454952 _____ (Piriform Ltd) C:\Users\CS\Downloads\ccsetup405.exe
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util.exe
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util (1).exe
2013-08-28 23:58 - 2013-09-17 08:03 - 00000000 ____D C:\ProgramData\iolo
2013-08-28 23:58 - 2013-08-28 23:58 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dat
2013-08-28 23:57 - 2013-08-28 23:57 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree.exe
2013-08-27 13:34 - 2013-09-17 09:08 - 00000000 ____D C:\Users\CS\Documents\512erUSB-Stick
2013-08-26 18:44 - 2013-08-26 18:44 - 02472864 _____ C:\Users\CS\Desktop\Tasse.cpr
2013-08-25 20:21 - 2013-08-26 14:18 - 00000000 ____D C:\Users\CS\Documents\Autoruns
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 16:06 - 2013-08-25 16:06 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.r5003.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 14:57 - 2013-08-28 22:44 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IncrediGames Games
2013-08-25 14:57 - 2013-08-25 14:57 - 00000000 ____D C:\Users\CS\AppData\Roaming\Playrix Entertainment
2013-08-25 14:55 - 2013-09-20 20:40 - 00000000 ____D C:\Program Files (x86)\GamesBar
2013-08-25 14:55 - 2013-08-25 14:55 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\fishdom3-510007712-setup.s510007712.c110009390.r5003.len.uff0781bc14185286bf7f0fa353d34d3ab99bf078.dl.exe
2013-08-24 22:05 - 2013-08-28 22:44 - 00000000 ____D C:\Program Files (x86)\Rossmann Fotowelt Software
2013-08-24 16:01 - 2013-08-24 16:01 - 00000000 ____D C:\Users\Stephie\Documents\Add-in Express
2013-08-24 15:18 - 2013-08-24 15:24 - 680525824 _____ C:\Users\Stephie\Downloads\ophcrack-vista-livecd-3.6.0.iso
2013-08-24 15:12 - 2013-09-08 11:11 - 00000000 ____D C:\Users\Stephie\AppData\Local\Windows Live
2013-08-24 15:08 - 2013-08-24 15:08 - 00000680 __RSH C:\Users\Stephie\ntuser.pol
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\Documents\Firefall
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\AppData\Local\Red 5 Studios
2013-08-23 19:21 - 2013-08-30 15:58 - 00000000 ____D C:\Program Files (x86)\Flaschbier_Total
2013-08-23 19:20 - 2013-08-23 19:21 - 26204499 _____ () C:\Users\CS\Downloads\Flaschbier_Total_Setup.exe
2013-08-23 18:59 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\Red 5 Studios
2013-08-23 18:59 - 2013-08-23 18:59 - 17831072 _____ C:\Users\CS\Downloads\FirefallInstaller.exe
2013-08-23 18:35 - 2013-09-10 14:56 - 00000000 ____D C:\ProgramData\DrivingSpeed2
2013-08-23 18:33 - 2013-09-10 14:56 - 00000000 ____D C:\Program Files (x86)\DrivingSpeed2
2013-08-23 18:30 - 2013-08-23 18:31 - 112069457 _____ (WheelSpin Studios                                          ) C:\Users\CS\Downloads\SetupDrivingSpeed2011.exe
2013-08-23 18:18 - 2013-08-26 14:13 - 00000432 _____ C:\Windows\system32\Drivers\etc\hosts.ics

==================== One Month Modified Files and Folders =======

2013-09-22 09:17 - 2013-09-10 00:04 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-22 09:17 - 2012-12-31 01:05 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-22 09:12 - 2011-02-20 02:38 - 01242671 _____ C:\Windows\WindowsUpdate.log
2013-09-22 09:11 - 2012-12-29 11:13 - 00000000 ____D C:\Users\CS\AppData\Local\Windows Live
2013-09-22 09:07 - 2009-07-14 06:45 - 00023024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-22 09:07 - 2009-07-14 06:45 - 00023024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-22 09:00 - 2013-09-18 14:28 - 00000392 _____ C:\Windows\setupact.log
2013-09-22 09:00 - 2013-08-10 10:45 - 00000680 __RSH C:\Users\CS\ntuser.pol
2013-09-22 09:00 - 2012-12-31 01:05 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-22 09:00 - 2012-12-29 03:38 - 00000000 ____D C:\Users\CS
2013-09-22 09:00 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-21 18:36 - 2013-09-17 19:29 - 00047207 _____ C:\Windows\IE10_main.log
2013-09-21 18:34 - 2013-09-21 18:34 - 00891144 _____ C:\Users\CS\Desktop\SecurityCheck (1).exe
2013-09-21 18:27 - 2013-07-16 21:22 - 00000916 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000UA.job
2013-09-21 17:58 - 2012-12-31 01:05 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-21 16:36 - 2013-08-29 14:49 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-09-21 16:36 - 2013-08-29 14:49 - 00004124 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-09-21 16:33 - 2013-09-21 16:33 - 00891144 _____ C:\Users\CS\Downloads\SecurityCheck.exe
2013-09-21 14:39 - 2013-09-21 14:39 - 02347384 _____ (ESET) C:\Users\CS\Downloads\esetsmartinstaller_enu.exe
2013-09-21 08:40 - 2013-09-18 14:28 - 00002350 _____ C:\Windows\PFRO.log
2013-09-20 23:55 - 2013-07-07 10:57 - 00003168 _____ C:\Windows\System32\Tasks\HPCeeScheduleForCS
2013-09-20 23:55 - 2013-07-07 10:57 - 00000320 _____ C:\Windows\Tasks\HPCeeScheduleForCS.job
2013-09-20 21:27 - 2013-07-16 21:22 - 00000894 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1673711914-3788758601-1253874616-1000Core.job
2013-09-20 21:11 - 2013-09-20 21:09 - 00001256 _____ C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-20 21:09 - 2013-09-20 21:09 - 00001409 _____ C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-09-20 20:47 - 2013-09-17 10:00 - 00000000 ___DC C:\Users\CS\AppData\Local\MigWiz
2013-09-20 20:42 - 2013-08-29 14:48 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-09-20 20:42 - 2013-08-29 14:47 - 00000000 ____D C:\Users\CS\AppData\Local\DownloadGuide
2013-09-20 20:42 - 2013-01-22 11:02 - 00000000 ____D C:\System Recovery Files
2013-09-20 20:40 - 2013-09-20 17:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-20 20:40 - 2013-09-18 14:42 - 00000000 ____D C:\Windows\erdnt
2013-09-20 20:40 - 2013-09-17 16:36 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2013-09-20 20:40 - 2013-09-17 09:19 - 00000000 ____D C:\Users\CS\SystemRequirementsLab
2013-09-20 20:40 - 2013-08-29 18:13 - 00000000 ____D C:\Program Files (x86)\Lyrics_Monkey
2013-09-20 20:40 - 2013-08-25 14:55 - 00000000 ____D C:\Program Files (x86)\GamesBar
2013-09-20 20:40 - 2013-08-11 20:00 - 00000000 ____D C:\Users\Besucher
2013-09-20 20:40 - 2013-08-07 23:51 - 00000000 ____D C:\Program Files (x86)\Oberon Media SIDR
2013-09-20 20:40 - 2013-07-31 18:54 - 00000000 ____D C:\Users\Stephie
2013-09-20 20:40 - 2013-07-11 16:11 - 00000000 ____D C:\Users\CS\AppData\Roaming\SSync
2013-09-20 20:40 - 2013-07-11 16:11 - 00000000 ____D C:\Users\CS\AppData\Roaming\SCheck
2013-09-20 20:40 - 2013-07-11 16:11 - 00000000 ____D C:\Users\CS\AppData\Roaming\Intermediate
2013-09-20 20:40 - 2013-07-11 16:10 - 00000000 ____D C:\Users\CS\AppData\Roaming\Common
2013-09-20 20:40 - 2013-07-06 14:26 - 00000000 ____D C:\Users\CS\AppData\Roaming\BabSolution
2013-09-20 20:40 - 2013-07-06 14:23 - 00000000 ____D C:\Users\CS\AppData\Roaming\OCS
2013-09-20 20:40 - 2013-07-06 14:23 - 00000000 ____D C:\Users\CS\AppData\Roaming\DesktopIconForAmazon
2013-09-20 20:40 - 2013-06-01 17:54 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-09-20 20:40 - 2013-06-01 17:40 - 00000000 ____D C:\Users\CS\AppData\Local\PutLockerDownloader
2013-09-20 20:40 - 2013-05-04 20:42 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-09-20 20:40 - 2012-12-31 15:56 - 00000000 ____D C:\Users\CS\AppData\Local\Abelssoft
2013-09-20 20:40 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2013-09-20 20:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-20 20:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Msdtc
2013-09-20 20:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-09-20 20:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-09-20 20:38 - 2013-09-18 14:43 - 00000000 ___DC C:\Qoobox
2013-09-20 20:38 - 2013-05-12 17:24 - 00000000 ____D C:\Users\CS\AppData\Roaming\Mozilla
2013-09-20 20:38 - 2013-05-04 20:40 - 00000000 ____D C:\ProgramData\Apple
2013-09-20 20:37 - 2013-09-17 09:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-20 20:29 - 2013-09-20 20:29 - 01745015 _____ C:\Users\CS\Downloads\AFA9015_win7 (2).zip
2013-09-20 17:58 - 2013-09-20 17:58 - 00002787 _____ C:\Users\CS\Desktop\JRT.txt
2013-09-20 17:43 - 2013-09-20 17:34 - 00000000 ___DC C:\AdwCleaner
2013-09-20 17:30 - 2013-09-20 17:30 - 00000000 ____D C:\Users\CS\AppData\Roaming\Malwarebytes
2013-09-20 17:30 - 2013-09-20 17:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-20 17:29 - 2013-01-25 19:12 - 00079360 ___SH C:\Users\CS\Documents\Thumbs.db
2013-09-20 17:18 - 2013-09-20 17:18 - 00030978 ____C C:\ComboFix.txt
2013-09-18 14:55 - 2009-07-14 04:34 - 00000215 ____C C:\Windows\system.ini
2013-09-18 14:41 - 2013-09-18 14:41 - 05128653 ____R (Swearware) C:\Users\CS\Downloads\ComboFix.exe
2013-09-18 14:28 - 2013-09-18 14:28 - 00000000 _____ C:\Windows\setuperr.log
2013-09-17 19:01 - 2013-09-17 19:00 - 00045807 _____ C:\Users\CS\Downloads\Addition.txt
2013-09-17 18:57 - 2013-09-17 18:57 - 01950524 _____ (Farbar) C:\Users\CS\Downloads\FRST64.exe
2013-09-17 16:45 - 2013-09-17 16:45 - 00000000 ____D C:\Users\CS\AppData\Roaming\KeePass
2013-09-17 16:36 - 2013-09-17 16:36 - 00001109 _____ C:\Users\CS\Desktop\KeePass 2.lnk
2013-09-17 16:35 - 2013-09-17 16:35 - 02513520 _____ (Dominik Reichl                                              ) C:\Users\CS\Downloads\KeePass-2.23-Setup.exe
2013-09-17 13:16 - 2013-09-17 10:03 - 168419899 _____ C:\Users\CS\Desktop\Windows-EasyTransfer - Elemente Quellcomputer17.092013.MIG
2013-09-17 10:30 - 2011-01-10 02:49 - 00700746 _____ C:\Windows\system32\perfh007.dat
2013-09-17 10:30 - 2011-01-10 02:49 - 00149696 _____ C:\Windows\system32\perfc007.dat
2013-09-17 10:30 - 2009-07-14 07:13 - 01621244 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-17 09:18 - 2013-09-17 09:18 - 00000000 ____D C:\ProgramData\Oracle
2013-09-17 09:13 - 2013-09-17 09:14 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-17 09:13 - 2013-09-17 09:14 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-17 09:13 - 2013-09-17 09:14 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-17 09:13 - 2013-09-17 09:14 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-17 09:13 - 2013-01-14 18:21 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-09-17 09:13 - 2011-01-09 19:06 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-17 09:09 - 2013-09-17 09:09 - 00913832 _____ (Oracle Corporation) C:\Users\CS\Downloads\chromeinstall-7u40.exe
2013-09-17 09:08 - 2013-08-27 13:34 - 00000000 ____D C:\Users\CS\Documents\512erUSB-Stick
2013-09-17 08:03 - 2013-08-28 23:58 - 00000000 ____D C:\ProgramData\iolo
2013-09-16 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-16 22:15 - 2013-09-16 21:22 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-09-16 22:15 - 2013-09-16 21:22 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-09-16 22:15 - 2012-10-18 14:50 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-09-16 22:15 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2013-09-16 21:23 - 2013-09-16 21:23 - 00000000 ____D C:\Windows\ELAMBKUP
2013-09-16 21:23 - 2013-09-16 21:21 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384 (1).exe
2013-09-16 21:23 - 2013-09-10 00:04 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-16 21:20 - 2013-09-16 21:18 - 222370072 _____ (Kaspersky Lab ZAO) C:\Users\CS\Downloads\pure13.0.2.558aEN_4384.exe
2013-09-16 20:51 - 2013-09-16 20:51 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree (1).exe
2013-09-16 20:44 - 2013-09-16 20:41 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (2).exe
2013-09-16 20:43 - 2013-09-16 20:40 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340 (1).exe
2013-09-16 20:33 - 2013-09-16 20:31 - 188740896 _____ (Kaspersky Lab) C:\Users\CS\Downloads\pure13.0.2.558DE_4340.exe
2013-09-16 20:29 - 2013-09-16 20:29 - 00179984 _____ (Kaspersky Lab) C:\Users\CS\Downloads\kss12.0.1.117mlg_en-de_ru-de_fr-de_de-de.exe
2013-09-15 17:54 - 2012-12-30 11:18 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-09-14 10:58 - 2012-12-31 01:05 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-14 10:58 - 2012-12-31 01:05 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-14 10:58 - 2012-12-31 01:05 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-14 10:40 - 2013-09-14 10:40 - 36965680 _____ (Microsoft Corporation) C:\Users\CS\Downloads\IE9-Windows7-x64-deu.exe
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\Documents\Password Depot
2013-09-13 12:05 - 2013-09-13 12:05 - 00000000 ____D C:\Users\CS\AppData\Roaming\AceBIT
2013-09-13 11:51 - 2013-09-13 11:49 - 00000000 ____D C:\Users\CS\Documents\Photoflitre
2013-09-13 11:36 - 2013-09-13 11:36 - 00000000 ____D C:\Program Files (x86)\AceBIT
2013-09-13 11:30 - 2013-09-13 11:29 - 00000000 ____D C:\Users\CS\Documents\Network Scanner 5.4.12
2013-09-13 11:18 - 2013-02-17 17:03 - 00000000 ____D C:\Program Files (x86)\ProgDVB
2013-09-13 11:17 - 2012-12-29 11:09 - 01643172 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-13 11:14 - 2013-04-13 13:45 - 00007634 _____ C:\Users\CS\AppData\Local\Resmon.ResmonCfg
2013-09-13 10:15 - 2012-12-29 03:43 - 00000000 ___RD C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-13 10:15 - 2012-12-29 03:43 - 00000000 ___RD C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-13 10:14 - 2009-07-14 06:45 - 00433416 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-12 21:13 - 2013-08-05 19:44 - 00000000 ____D C:\Windows\system32\MRT
2013-09-12 21:11 - 2012-12-29 11:16 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-10 15:26 - 2012-12-29 04:14 - 00003212 _____ C:\Windows\System32\Tasks\HPCeeScheduleForCS-HP$
2013-09-10 15:26 - 2012-12-29 04:14 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForCS-HP$.job
2013-09-10 14:56 - 2013-09-10 00:04 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2013-09-10 14:56 - 2013-09-04 13:42 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-09-10 14:56 - 2013-08-23 18:59 - 00000000 ____D C:\Program Files (x86)\Red 5 Studios
2013-09-10 14:56 - 2013-08-23 18:35 - 00000000 ____D C:\ProgramData\DrivingSpeed2
2013-09-10 14:56 - 2013-08-23 18:33 - 00000000 ____D C:\Program Files (x86)\DrivingSpeed2
2013-09-10 14:56 - 2013-08-17 11:01 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Adobe
2013-09-10 14:56 - 2013-08-11 20:03 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Duden
2013-09-10 14:56 - 2013-08-11 20:01 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-10 14:56 - 2013-08-11 20:01 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-10 14:56 - 2013-08-11 20:01 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-09-10 14:56 - 2013-08-11 20:00 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-10 14:56 - 2013-08-11 20:00 - 00000000 ___RD C:\Users\Besucher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-10 14:56 - 2013-08-11 20:00 - 00000000 ____D C:\Users\Besucher\AppData\Roaming\Macromedia
2013-09-10 14:56 - 2013-07-06 14:26 - 00000000 ____D C:\Program Files\CCleaner
2013-09-08 20:17 - 2011-02-20 11:25 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-09-08 11:11 - 2013-08-24 15:12 - 00000000 ____D C:\Users\Stephie\AppData\Local\Windows Live
2013-09-06 15:52 - 2012-12-30 00:39 - 00000000 ____D C:\Users\CS\AppData\Local\CrashDumps
2013-09-06 15:40 - 2013-09-06 15:40 - 00000000 ____D C:\Users\CS\Desktop\Besucher
2013-09-06 14:54 - 2013-09-06 14:50 - 423572207 _____ C:\Users\CS\Downloads\Windows6.1-KB947821-v28-x64.msu
2013-09-05 06:03 - 2013-09-03 12:57 - 00000000 ____D C:\Users\CS\Desktop\HGL
2013-09-04 19:51 - 2013-09-04 19:51 - 00056943 _____ C:\Users\CS\Desktop\FRSTalt.txt
2013-09-04 15:10 - 2013-09-04 15:10 - 00000000 ___DC C:\FRST
2013-09-04 00:08 - 2013-09-04 00:01 - 330331616 _____ (MooSoft Development LLC                                    ) C:\Users\CS\Downloads\cleaner9_setup.exe
2013-09-03 23:13 - 2013-08-29 14:48 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-31 20:34 - 2012-12-31 01:05 - 00000000 ____D C:\Users\CS\AppData\Local\Google
2013-08-31 17:22 - 2013-08-29 14:49 - 00003624 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-08-31 14:25 - 2013-08-31 14:25 - 00000000 ____D C:\Windows\system32\IO
2013-08-31 14:22 - 2013-08-31 14:20 - 00000000 ____D C:\Users\CS\AppData\Local\Avg2013
2013-08-31 14:22 - 2012-12-29 04:22 - 00000000 ____D C:\ProgramData\MFAData
2013-08-30 19:25 - 2013-02-16 18:28 - 00000000 ___DC C:\sim_scan
2013-08-30 18:16 - 2012-12-30 00:03 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2013-08-30 18:14 - 2013-05-07 22:45 - 00000000 ____D C:\Users\CS\Documents\My Games
2013-08-30 16:52 - 2013-08-30 16:52 - 00001212 _____ C:\Users\CS\Desktop\Ashampoo Photo Card.lnk
2013-08-30 16:52 - 2013-08-30 16:52 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo
2013-08-30 16:51 - 2013-08-30 16:51 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2013-08-30 16:51 - 2013-08-29 21:08 - 00000000 ____D C:\ProgramData\Ashampoo
2013-08-30 16:49 - 2013-08-30 16:48 - 200011368 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\CS\Downloads\ashampoo_photo_card_1.0.0_14061.exe
2013-08-30 16:02 - 2013-05-04 20:42 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-30 15:58 - 2013-08-23 19:21 - 00000000 ____D C:\Program Files (x86)\Flaschbier_Total
2013-08-30 15:57 - 2013-08-29 21:10 - 00000000 ____D C:\Users\CS\AppData\Local\Ashampoo Photo Optimizer 4
2013-08-30 05:22 - 2013-08-30 05:22 - 00042571 _____ C:\Users\CS\Documents\2012 - 2013.wlmp
2013-08-29 21:10 - 2013-08-29 21:10 - 00000000 ____D C:\Users\CS\AppData\Local\photoOptimizeHistoryDataBase
2013-08-29 21:09 - 2013-08-29 20:56 - 49727466 _____ C:\Users\CS\Desktop\ICH LIEBE DICH.mp4
2013-08-29 18:21 - 2013-08-29 14:50 - 00000000 ____D C:\Users\CS\AppData\Local\Freemium
2013-08-29 18:07 - 2013-08-29 18:07 - 00719984 _____ C:\Users\CS\Downloads\free-clever-privacy_1.0_de-DE.exe
2013-08-29 17:54 - 2013-08-29 17:54 - 00000000 ____D C:\Users\CS\AppData\Local\Software Updater
2013-08-29 15:29 - 2013-02-04 13:13 - 00000000 ____D C:\Users\CS\Documents\Scans
2013-08-29 14:38 - 2013-08-29 14:38 - 04454952 _____ (Piriform Ltd) C:\Users\CS\Downloads\ccsetup405.exe
2013-08-29 14:37 - 2013-08-10 10:28 - 00000000 ____D C:\Users\CS\Documents\Treiber&Sicherungen
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util.exe
2013-08-29 00:17 - 2013-08-29 00:17 - 01189624 _____ (AMD Inc.) C:\Users\CS\Downloads\catalyst_mobility_64-bit_util (1).exe
2013-08-28 23:58 - 2013-08-28 23:58 - 00074703 _____ C:\Windows\SysWOW64\mfc45.dat
2013-08-28 23:57 - 2013-08-28 23:57 - 06786112 _____ C:\Users\CS\Downloads\system_mechanic_checkup_nlfree.exe
2013-08-28 22:44 - 2013-08-25 14:57 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IncrediGames Games
2013-08-28 22:44 - 2013-08-24 22:05 - 00000000 ____D C:\Program Files (x86)\Rossmann Fotowelt Software
2013-08-28 22:44 - 2013-08-07 23:51 - 00000000 ____D C:\Users\CS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Incredigames DE
2013-08-28 22:44 - 2013-08-07 23:49 - 00000000 ____D C:\ProgramData\Oberon Media
2013-08-28 22:44 - 2012-12-31 01:05 - 00000000 ____D C:\Program Files\Google
2013-08-28 22:44 - 2012-12-31 01:05 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-28 22:44 - 2011-02-20 02:37 - 00000000 ____D C:\Windows\SysWOW64\sda
2013-08-28 22:44 - 2011-01-09 18:53 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2013-08-28 22:44 - 2011-01-09 18:45 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-08-28 22:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Recovery
2013-08-28 22:43 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\SysWOW64\WindowsPowerShell
2013-08-28 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\spp
2013-08-28 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Speech
2013-08-28 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\NetworkList
2013-08-26 18:45 - 2013-07-22 20:39 - 00000000 ____D C:\Users\CS\Documents\pdf.Dateien
2013-08-26 18:44 - 2013-08-26 18:44 - 02472864 _____ C:\Users\CS\Desktop\Tasse.cpr
2013-08-26 14:18 - 2013-08-25 20:21 - 00000000 ____D C:\Users\CS\Documents\Autoruns
2013-08-26 14:18 - 2013-08-07 23:51 - 00000000 ____D C:\Users\CS\AppData\Roaming\Oberon Media
2013-08-26 14:18 - 2012-12-29 14:12 - 00000000 ____D C:\Users\CS\Documents\Youcam
2013-08-26 14:13 - 2013-08-23 18:18 - 00000432 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 16:21 - 2013-08-25 16:21 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 16:06 - 2013-08-25 16:06 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\bewareplanetearth-510008591-setup.s510008591.c110009390.r5003.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl.exe
2013-08-25 15:59 - 2013-08-25 15:59 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\raptorcalloftheshadow-510008180-setup.s510008180.c110009390.len.ub2d489c348d09f5190f0f237b96ea5b04e489e78.dl (1).exe
2013-08-25 14:57 - 2013-08-25 14:57 - 00000000 ____D C:\Users\CS\AppData\Roaming\Playrix Entertainment
2013-08-25 14:55 - 2013-08-25 14:55 - 00457152 _____ (Oberon Media Inc.) C:\Users\CS\Downloads\fishdom3-510007712-setup.s510007712.c110009390.r5003.len.uff0781bc14185286bf7f0fa353d34d3ab99bf078.dl.exe
2013-08-24 21:40 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-24 16:01 - 2013-08-24 16:01 - 00000000 ____D C:\Users\Stephie\Documents\Add-in Express
2013-08-24 15:24 - 2013-08-24 15:18 - 680525824 _____ C:\Users\Stephie\Downloads\ophcrack-vista-livecd-3.6.0.iso
2013-08-24 15:08 - 2013-08-24 15:08 - 00000680 __RSH C:\Users\Stephie\ntuser.pol
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\Documents\Firefall
2013-08-23 20:34 - 2013-08-23 20:34 - 00000000 ____D C:\Users\CS\AppData\Local\Red 5 Studios
2013-08-23 19:21 - 2013-08-23 19:20 - 26204499 _____ () C:\Users\CS\Downloads\Flaschbier_Total_Setup.exe
2013-08-23 19:00 - 2013-05-07 18:29 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-08-23 19:00 - 2012-12-29 04:07 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-08-23 18:59 - 2013-08-23 18:59 - 17831072 _____ C:\Users\CS\Downloads\FirefallInstaller.exe
2013-08-23 18:31 - 2013-08-23 18:30 - 112069457 _____ (WheelSpin Studios                                          ) C:\Users\CS\Downloads\SetupDrivingSpeed2011.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-21 00:19

==================== End Of Log ============================
--- --- ---

Was sagen diese Ergebnisse? Wie kann ich denn sehen ob noch Bedrohungen im Rechner sind? Und wie schütze ich mein PC auf Dauer?

BG
Carsten

schrauber 22.09.2013 13:32
ESET Logfile?

Lösch bitte AdwCleaner.

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Frisches FRST log bitte.

CarstenS. 22.09.2013 22:21
Hallo Schrauber, hier das Ergebnis von AdwCleaner:AdwCleaner Logfile:
Code:
# AdwCleaner v3.004 - Bericht erstellt am 20/09/2013 um 17:34:49
# Updated 15/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : CS - CS-HP
# Gestartet von : C:\Users\CS\Downloads\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****

Dienst Gefunden : SystemStoreService

***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\END
Datei Gefunden : C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Datei Gefunden : C:\Users\CS\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js
Datei Gefunden : C:\Windows\System32\Tasks\EPUpdater
Datei Gefunden : C:\Windows\System32\Tasks\Software Updater
Datei Gefunden : C:\Windows\System32\Tasks\Software Updater Ui
Ordner Gefunden C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gefunden C:\Program Files (x86)\GamesBar
Ordner Gefunden C:\Program Files (x86)\Lyrics_Monkey
Ordner Gefunden C:\Program Files (x86)\MyPC Backup
Ordner Gefunden C:\Program Files (x86)\MyPC Backup
Ordner Gefunden C:\Program Files (x86)\SoftwareUpdater
Ordner Gefunden C:\ProgramData\Babylon
Ordner Gefunden C:\ProgramData\Tarma Installer
Ordner Gefunden C:\Users\CS\AppData\Local\DownloadGuide
Ordner Gefunden C:\Users\CS\AppData\Local\PutLockerDownloader
Ordner Gefunden C:\Users\CS\AppData\Roaming\BabSolution
Ordner Gefunden C:\Users\CS\AppData\Roaming\Babylon
Ordner Gefunden C:\Users\CS\AppData\Roaming\Common\LuaRT
Ordner Gefunden C:\Users\CS\AppData\Roaming\DataMgr
Ordner Gefunden C:\Users\CS\AppData\Roaming\DesktopIconForAmazon
Ordner Gefunden C:\Users\CS\AppData\Roaming\DSite
Ordner Gefunden C:\Users\CS\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gefunden C:\Users\CS\AppData\Roaming\Intermediate
Ordner Gefunden C:\Users\CS\AppData\Roaming\OCS
Ordner Gefunden C:\Users\CS\AppData\Roaming\SCheck
Ordner Gefunden C:\Users\CS\AppData\Roaming\SSync

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\1ClickDownload
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Lyrics_Monkey
Schlüssel Gefunden : HKCU\Software\FoxyDeal
Schlüssel Gefunden : HKCU\Software\httogroup
Schlüssel Gefunden : HKCU\Software\IM
Schlüssel Gefunden : HKCU\Software\Iminent
Schlüssel Gefunden : HKCU\Software\ImInstaller
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : [x64] HKCU\Software\1ClickDownload
Schlüssel Gefunden : [x64] HKCU\Software\FoxyDeal
Schlüssel Gefunden : [x64] HKCU\Software\httogroup
Schlüssel Gefunden : [x64] HKCU\Software\IM
Schlüssel Gefunden : [x64] HKCU\Software\Iminent
Schlüssel Gefunden : [x64] HKCU\Software\ImInstaller
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gefunden : [x64] HKCU\Software\OCS
Schlüssel Gefunden : [x64] HKCU\Software\Softonic
Schlüssel Gefunden : HKLM\Software\AVG Secure Search
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\FTDownloader
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gefunden : HKLM\Software\DataMngr
Schlüssel Gefunden : HKLM\Software\Iminent
Schlüssel Gefunden : HKLM\Software\ImInstaller
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\FTDownloader_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\FTDownloader_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bluestacks-app-player_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bluestacks-app-player_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
Wert Gefunden : HKCU\Software\Mozilla\Firefox\Extensions [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16464


-\\ Mozilla Firefox v

-\\ Google Chrome v29.0.1547.66

[ Datei : C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Stephie\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [12449 octets] - [20/09/2013 17:34:49]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [12510 octets] ##########
--- --- ---
AdwCleaner Logfile:
Code:
# AdwCleaner v3.005 - Bericht erstellt am 22/09/2013 um 23:16:05
# Updated 22/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : CS - CS-HP
# Gestartet von : C:\Users\CS\Downloads\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****

Dienst Gefunden : SystemStoreService

***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\CS\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js
Datei Gefunden : C:\Windows\System32\Tasks\Software Updater
Datei Gefunden : C:\Windows\System32\Tasks\Software Updater Ui
Ordner Gefunden C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gefunden C:\Program Files (x86)\GamesBar
Ordner Gefunden C:\Program Files (x86)\Lyrics_Monkey
Ordner Gefunden C:\Program Files (x86)\MyPC Backup
Ordner Gefunden C:\Program Files (x86)\MyPC Backup
Ordner Gefunden C:\Program Files (x86)\SoftwareUpdater
Ordner Gefunden C:\ProgramData\Tarma Installer
Ordner Gefunden C:\Users\CS\AppData\Local\DownloadGuide
Ordner Gefunden C:\Users\CS\AppData\Local\PutLockerDownloader
Ordner Gefunden C:\Users\CS\AppData\Roaming\BabSolution
Ordner Gefunden C:\Users\CS\AppData\Roaming\Common\LuaRT
Ordner Gefunden C:\Users\CS\AppData\Roaming\DesktopIconForAmazon
Ordner Gefunden C:\Users\CS\AppData\Roaming\Intermediate
Ordner Gefunden C:\Users\CS\AppData\Roaming\OCS
Ordner Gefunden C:\Users\CS\AppData\Roaming\SCheck
Ordner Gefunden C:\Users\CS\AppData\Roaming\SSync

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\1ClickDownload
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Lyrics_Monkey
Schlüssel Gefunden : HKCU\Software\FoxyDeal
Schlüssel Gefunden : HKCU\Software\httogroup
Schlüssel Gefunden : HKCU\Software\IM
Schlüssel Gefunden : HKCU\Software\Iminent
Schlüssel Gefunden : HKCU\Software\ImInstaller
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : [x64] HKCU\Software\1ClickDownload
Schlüssel Gefunden : [x64] HKCU\Software\FoxyDeal
Schlüssel Gefunden : [x64] HKCU\Software\httogroup
Schlüssel Gefunden : [x64] HKCU\Software\IM
Schlüssel Gefunden : [x64] HKCU\Software\Iminent
Schlüssel Gefunden : [x64] HKCU\Software\ImInstaller
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gefunden : [x64] HKCU\Software\OCS
Schlüssel Gefunden : [x64] HKCU\Software\Softonic
Schlüssel Gefunden : HKLM\Software\AVG Secure Search
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\FTDownloader
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gefunden : HKLM\Software\DataMngr
Schlüssel Gefunden : HKLM\Software\Iminent
Schlüssel Gefunden : HKLM\Software\ImInstaller
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\FTDownloader_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\FTDownloader_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bluestacks-app-player_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bluestacks-app-player_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
Wert Gefunden : HKCU\Software\Mozilla\Firefox\Extensions [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16464


-\\ Mozilla Firefox v

-\\ Google Chrome v29.0.1547.76

[ Datei : C:\Users\CS\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Stephie\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Besucher\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [24707 octets] - [20/09/2013 17:34:49]
AdwCleaner[R1].txt - [1018 octets] - [20/09/2013 17:42:56]
AdwCleaner[S0].txt - [11574 octets] - [20/09/2013 17:38:03]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [24889 octets] ##########
--- --- ---

schrauber 23.09.2013 09:23
AdwCleaner bitte auch löschen lassen, dann ein frisches FRST log bitte.


Alle Zeitangaben in WEZ +1. Es ist jetzt 22:07 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131