OK... habe die OTL-Logfiles nun erstellt. Logfile 1:
OTL Logfile: Code:
OTL logfile created on: 06.10.2013 19:31:21 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Ingo\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16686)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,97 Gb Total Physical Memory | 1,43 Gb Available Physical Memory | 36,15% Memory free
7,93 Gb Paging File | 5,02 Gb Available in Paging File | 63,22% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 125,46 Gb Total Space | 48,73 Gb Free Space | 38,84% Space Free | Partition Type: NTFS
Drive D: | 88,36 Gb Total Space | 77,89 Gb Free Space | 88,15% Space Free | Partition Type: NTFS
Drive F: | 19,53 Gb Total Space | 6,90 Gb Free Space | 35,33% Space Free | Partition Type: NTFS
Drive G: | 37,11 Gb Total Space | 11,07 Gb Free Space | 29,84% Space Free | Partition Type: NTFS
Drive H: | 14,67 Gb Total Space | 7,92 Gb Free Space | 54,01% Space Free | Partition Type: NTFS
Drive X: | 12,76 Gb Total Space | 2,13 Gb Free Space | 16,69% Space Free | Partition Type: NTFS
Computer Name: INGOS-LAPTOP | User Name: Ingo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Ingo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Users\Ingo\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files (x86)\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files (x86)\PureSync\PureSyncTray.exe (Jumping Bytes)
PRC - d:\Programme\UltraSearch\UltraSearch.exe (JAM Software)
PRC - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
PRC - F:\DHCP-Server\dhcpsrv.exe (Uwe A. Ruttkamp)
PRC - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
PRC - D:\Programme\Secunia\PSI\psia.exe (Secunia)
PRC - D:\Programme\Secunia\PSI\sua.exe (Secunia)
PRC - D:\Programme\Secunia\PSI\psi_tray.exe (Secunia)
PRC - C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe (Cisco Systems, Inc.)
PRC - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\LVPrS64H.exe (Logitech Inc.)
PRC - C:\Windows\SysWOW64\NlsSrv32.exe (Nalpeiron Ltd.)
PRC - D:\Programme\maxdome\DCBin\DCService.exe (Entriq, Inc.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe (Brother Industries, Ltd.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe ()
PRC - D:\Programme\Desksave\DeskSave.exe ()
PRC - D:\Programme\Clipdiary\ClipDiary.exe ()
PRC - C:\Program Files (x86)\MWSnap\MWSnap.exe (Mirek Wojtowicz)
========== Modules (No Company Name) ==========
MOD - C:\Users\Ingo\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll ()
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - D:\Programme\FileZilla FTP Client\fzshellext.dll ()
MOD - C:\Users\Ingo\AppData\Roaming\Dropbox\bin\libcef.dll ()
MOD - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()
MOD - C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll ()
MOD - C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll ()
MOD - D:\Programme\Desksave\DeskSave.exe ()
MOD - D:\Programme\Clipdiary\ClipDiary.exe ()
MOD - D:\Programme\Clipdiary\sqlite3.dll ()
========== Services (SafeList) ==========
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (avast! Antivirus) -- C:\Program Files (x86)\Avast5\AvastSvc.exe (AVAST Software)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (SystemExplorerHelpService) -- D:\Programme\System Explorer\service\SystemExplorerService64.exe (Mister Group)
SRV - (SamsungAllShareV2.0) -- C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe (Samsung Electronics Co., Ltd.)
SRV - (SimpleSlideShowServer) -- C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe (Samsung Electronics Co., Ltd.)
SRV - (Backup Service Home-Dienst) -- C:\Program Files (x86)\Backup Service Home 3\BSHService.exe (Alexander Seeliger Software)
SRV - (UMVPFSrv) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
SRV - (DHCPServer) -- F:\DHCP-Server\dhcpsrv.exe (Uwe A. Ruttkamp)
SRV - (BBSvc) -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (BBUpdate) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (EvtEng) -- C:\Programme\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
SRV - (MyWiFiDHCPDNS) -- C:\Programme\Intel\WiFi\bin\PanDhcpDns.exe ()
SRV - (RegSrvc) -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (Secunia PSI Agent) -- D:\Programme\Secunia\PSI\psia.exe (Secunia)
SRV - (Secunia Update Agent) -- D:\Programme\Secunia\PSI\sua.exe (Secunia)
SRV - (ServiceLayer) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (CVPND) -- C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe (Cisco Systems, Inc.)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (osppsvc) -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation)
SRV - (LVPrcS64) -- C:\Programme\Common Files\logishrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (nlsX86cc) -- C:\Windows\SysWOW64\NlsSrv32.exe (Nalpeiron Ltd.)
SRV - (Prosieben) -- D:\programme\maxdome\DCBin\DCService.exe (Entriq, Inc.)
SRV - (ezSharedSvc) -- C:\Windows\SysWOW64\ezsvc7.dll (EasyBits Sofware AS)
SRV - (AAV UpdateService) -- C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe ()
SRV - (RServer3) -- C:\Windows\SysWOW64\rserver30\RServer3.exe (Famatech International Corp.)
SRV - (STacSV) -- C:\Programme\IDT\WDM\stacsv64.exe (IDT, Inc.)
SRV - (AESTFilters) -- C:\Programme\IDT\WDM\AESTSr64.exe (Andrea Electronics Corporation)
========== Driver Services (SafeList) ==========
DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software)
DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software)
DRV:64bit: - (aswVmm) -- C:\Windows\SysNative\drivers\aswVmm.sys ()
DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr2.sys (AVAST Software)
DRV:64bit: - (aswRvrt) -- C:\Windows\SysNative\drivers\aswRvrt.sys ()
DRV:64bit: - (aswTdi) -- C:\Windows\SysNative\drivers\aswTdi.sys (AVAST Software)
DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (aswFsBlk) -- C:\Windows\SysNative\drivers\aswFsBlk.sys (AVAST Software)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (hcw95rc) -- C:\Windows\SysNative\drivers\hcw95rc.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (hcw95bda) -- C:\Windows\SysNative\drivers\hcw95bda.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (Uim_IM) -- C:\Windows\SysNative\drivers\Uim_IMx64.sys (Paragon)
DRV:64bit: - (UimBus) -- C:\Windows\SysNative\drivers\uimx64.sys (Windows (R) 2000 DDK provider)
DRV:64bit: - (Uim_VIM) -- C:\Windows\SysNative\drivers\uim_vimx64.sys (Paragon)
DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (SWDUMon) -- C:\Windows\SysNative\drivers\SWDUMon.sys ()
DRV:64bit: - (NETwNs64) -- C:\Windows\SysNative\drivers\NETwNs64.sys (Intel Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (usbser) -- C:\Windows\SysNative\drivers\usbser.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (PSI) -- C:\Windows\SysNative\drivers\psi_mf.sys (Secunia)
DRV:64bit: - (CVPNDRVA) -- C:\Windows\SysNative\drivers\CVPNDRVA.sys ()
DRV:64bit: - (CVirtA) -- C:\Windows\SysNative\drivers\CVirtA64.sys (Cisco Systems, Inc.)
DRV:64bit: - (NETw5s64) -- C:\Windows\SysNative\drivers\NETw5s64.sys (Intel Corporation)
DRV:64bit: - (LVUVC64) -- C:\Windows\SysNative\drivers\lvuvc64.sys (Logitech Inc.)
DRV:64bit: - (LVRS64) -- C:\Windows\SysNative\drivers\lvrs64.sys (Logitech Inc.)
DRV:64bit: - (LVPr2Mon) -- C:\Windows\SysNative\drivers\LVPr2M64.sys ()
DRV:64bit: - (LVPr2M64) -- C:\Windows\SysNative\drivers\LVPr2M64.sys ()
DRV:64bit: - (RSUSBSTOR) -- C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (NETw1v64) -- C:\Windows\SysNative\drivers\NETw1v64.sys (Intel Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation)
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (SrvHsfV92) -- C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfWinac) -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfHDA) -- C:\Windows\SysNative\drivers\VSTAZL6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (AgereSoftModem) -- C:\Windows\SysNative\drivers\agrsm64.sys (LSI Corp)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (yukonw7) -- C:\Windows\SysNative\drivers\yk62x64.sys (Marvell)
DRV:64bit: - (netw5v64) -- C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (HpqKbFiltr) -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.)
DRV:64bit: - (DNE) -- C:\Windows\SysNative\drivers\dne64x.sys (Deterministic Networks, Inc.)
DRV:64bit: - (pccsmcfd) -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys (Nokia)
DRV:64bit: - (mirrorv3) -- C:\Windows\SysNative\drivers\rminiv3.sys (Famatech International Corp.)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (STHDA) -- C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV - (cleanhlp) -- D:\Programme\Emsisoft Emergency Kit\Run\cleanhlp64.sys (Emsisoft GmbH)
DRV - (UnlockerDriver5) -- D:\Programme\Unlocker\UnlockerDriver5.sys ()
DRV - (cpudrv64) -- C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys ()
DRV - (RSUSBSTOR) -- C:\Windows\SysWOW64\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
DRV - (raddrvv3) -- C:\Windows\SysWOW64\rserver30\raddrvv3.sys (Famatech International Corp.)
DRV - (CrystalSysInfo) -- D:\Programme\MediaCoder\SysInfoX64.sys ()
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {D4F58562-A3C4-48B7-AE7B-98467EA87900}
IE:64bit: - HKLM\..\SearchScopes\{D4F58562-A3C4-48B7-AE7B-98467EA87900}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{D4F58562-A3C4-48B7-AE7B-98467EA87900}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/CQNOT/4
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com
IE - HKCU\..\SearchScopes,DefaultScope = {D4F58562-A3C4-48B7-AE7B-98467EA87900}
IE - HKCU\..\SearchScopes\{BA3E27DB-425D-4E00-AD57-83689D8ECADD}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
IE - HKCU\..\SearchScopes\{D4F58562-A3C4-48B7-AE7B-98467EA87900}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaulturl: "hxxp://de.search.yahoo.com/search?ei=UTF-8&fr=ytff-&p="
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: {987311C6-B504-4aa2-90BF-60CC49808D42}:2.2
FF - prefs.js..extensions.enabledItems: de-AT@dictionaries.addons.mozilla.org:2.0.1
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:1.1.10
FF - prefs.js..extensions.enabledItems: {2E18002D-DF43-4c65-9FDA-40D02F066D9E}:1.6.1
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:3.1.1
FF - prefs.js..extensions.enabledItems: fb_add_on@avm.de:1.5.5
FF - prefs.js..extensions.enabledItems: {cdbbb3f6-a50e-4b20-a154-5fcbb3bbf43d}:1.2.6
FF - prefs.js..extensions.enabledItems: linkalert.conlan@addons.mozilla.com:1.0.1
FF - prefs.js..extensions.enabledItems: {66E978CD-981F-47DF-AC42-E3CF417C1467}:0.4.2
FF - prefs.js..extensions.enabledItems: imagetab@next.gen.nz:1.1
FF - prefs.js..extensions.enabledItems: {c151d79e-e61b-4a90-a887-5a46d38fba99}:2.6
FF - prefs.js..extensions.enabledItems: {f199da35-0a9a-4ce9-8f59-c68524deba93}:0.3.3
FF - prefs.js..extensions.enabledItems: {9ab67d74-ec41-4cb2-b417-df5d93ba1beb}:1.5.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {6AC85730-7D0F-4de0-B3FA-21142DD85326}:2.0.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: info@youtube-mp3.org:1.0.2
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..keyword.URL: "hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p="
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811&ilc=12"
FF - user.js - File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.40.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.40.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: D:\Programme\VLC-Player\npvlc.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.0-git-20120125-2155: D:\Programme\VLC-Player\npvlc.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: D:\Programme\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: D:\Programme\VLC-Player\npvlc.dll File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.6: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Ingo\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Ingo\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\PHPEditXdebugExtension@waterproof.fr: C:\Program Files\PHPEdit\Tools\FirefoxExtension\unpacked
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files (x86)\Avast5\WebRep\FF [2013.10.01 18:45:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.10.01 19:15:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.10.01 19:15:19 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\finder@meingutscheincode.de: C:\Program Files (x86)\Mein Gutscheincode Finder\Firefox
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\PHPEditXdebugExtension@waterproof.fr: C:\Program Files\PHPEdit\Tools\FirefoxExtension\unpacked
[2010.12.20 20:44:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\Extensions
[2010.12.20 20:44:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\Extensions\ideskbrowser@haufe.de
[2013.10.01 21:35:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions
[2010.08.26 21:41:48 | 000,000,000 | ---D | M] (New Tab Button Position) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{05BF52F6-A4F9-48B9-84ED-F8D83762E619}
[2010.08.26 21:41:48 | 000,000,000 | ---D | M] (New Tab Button on Tab Right) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{05BF52F6-A4F9-48B9-84ED-F8D83762E619}(2)
[2010.08.26 21:41:47 | 000,000,000 | ---D | M] ("Open Long Url [de]") -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{10F04CC7-50E2-4564-99EC-6E9B27985908}
[2010.08.26 21:41:46 | 000,000,000 | ---D | M] (Metal Lion - iCe) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{1AFC82C3-0154-4b09-878B-D68500EFBE76}(2)
[2010.08.26 21:41:46 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.08.26 21:41:44 | 000,000,000 | ---D | M] (Extended Copy Menu) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{2E18002D-DF43-4c65-9FDA-40D02F066D9E}
[2010.08.26 21:41:44 | 000,000,000 | ---D | M] (Modern Modoki) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{4a428302-5267-4749-bb22-459b3236695f}(2)
[2010.08.26 21:41:43 | 000,000,000 | ---D | M] (Walnut for Firefox) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{5A170DD3-63CA-4c58-93B7-DE9FF536C2FF}(2)
[2010.08.26 21:41:43 | 000,000,000 | ---D | M] (New Tab Homepage) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{66E978CD-981F-47DF-AC42-E3CF417C1467}
[2010.08.26 21:41:42 | 000,000,000 | ---D | M] (ColorZilla) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}
[2010.08.26 21:41:39 | 000,000,000 | ---D | M] (NoScript) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2010.08.26 21:41:35 | 000,000,000 | ---D | M] (TableTools) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{7C7F5C11-4ACD-4CDB-9293-2E3F46654E2A}
[2010.08.26 21:41:34 | 000,000,000 | ---D | M] (Modern Aluminum) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{835A3F80-DF39-11D9-A0B5-000D0B3AEB26}(2)
[2010.08.26 21:41:34 | 000,000,000 | ---D | M] (BugMeNot) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{987311C6-B504-4aa2-90BF-60CC49808D42}
[2010.08.26 21:41:34 | 000,000,000 | ---D | M] (Table2Clipboard) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{9ab67d74-ec41-4cb2-b417-df5d93ba1beb}
[2010.08.26 21:41:33 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010.08.26 21:41:30 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}(2)
[2010.08.26 21:41:29 | 000,000,000 | ---D | M] (Pearl Crescent Page Saver Basic) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{c151d79e-e61b-4a90-a887-5a46d38fba99}
[2010.08.26 21:41:28 | 000,000,000 | ---D | M] (Plain Text to Link [de]) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{C90B0826-5A17-4970-A5BF-A43D22452E21}
[2010.08.26 21:41:26 | 000,000,000 | ---D | M] (JavaScript Options) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{cdbbb3f6-a50e-4b20-a154-5fcbb3bbf43d}
[2010.08.26 21:41:25 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.08.26 21:41:24 | 000,000,000 | ---D | M] (Whitehart) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{d650973c-0444-4ac7-9d00-19e3613c83b9}(2)
[2010.08.26 21:41:22 | 000,000,000 | ---D | M] (DownThemAll!) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010.08.26 21:41:21 | 000,000,000 | ---D | M] (Print) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{f199da35-0a9a-4ce9-8f59-c68524deba93}
[2010.08.26 21:41:21 | 000,000,000 | ---D | M] (CustomizeGoogle) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\{fce36c1e-58d8-498a-b2a5-66ad1cedebbb}
[2010.08.26 21:42:06 | 000,000,000 | ---D | M] (German Dictionary, extended for Austria) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\de-AT@dictionaries.addons.mozilla.org
[2010.08.26 21:41:54 | 000,000,000 | ---D | M] ("Deutsches Wörterbuch">) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\de-DE@dictionaries.addons.mozilla(2).org
[2010.08.26 21:41:50 | 000,000,000 | ---D | M] ("FRITZ!Box AddOn") -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\fb_add_on@avm.de
[2010.08.26 21:41:49 | 000,000,000 | ---D | M] (Open Image In New Tab) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\imagetab@next.gen.nz
[2010.08.26 21:41:49 | 000,000,000 | ---D | M] (YouTube mp3) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\info@youtube-mp3.org
[2010.08.26 21:41:48 | 000,000,000 | ---D | M] ("Link Alert") -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\lo97a2qd.default\extensions\linkalert.conlan@addons.mozilla.com
[2013.10.04 20:57:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions
[2010.08.26 22:11:32 | 000,000,000 | ---D | M] (New Tab Button on Tab Right) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{05BF52F6-A4F9-48B9-84ED-F8D83762E619}(2)
[2012.12.01 11:55:27 | 000,000,000 | ---D | M] (Garmin Communicator) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2010.08.26 22:11:32 | 000,000,000 | ---D | M] (Metal Lion - iCe) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{1AFC82C3-0154-4b09-878B-D68500EFBE76}(2)
[2012.11.29 18:51:52 | 000,000,000 | ---D | M] (Html Validator) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{3b56bcc7-54e5-44a2-9b44-66c3ef58c13e}
[2010.08.26 22:11:32 | 000,000,000 | ---D | M] (Modern Modoki) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{4a428302-5267-4749-bb22-459b3236695f}(2)
[2010.08.26 22:11:33 | 000,000,000 | ---D | M] (Walnut for Firefox) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{5A170DD3-63CA-4c58-93B7-DE9FF536C2FF}(2)
[2012.08.02 08:29:08 | 000,000,000 | ---D | M] (ColorZilla) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}
[2010.08.26 22:11:33 | 000,000,000 | ---D | M] (Modern Aluminum) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{835A3F80-DF39-11D9-A0B5-000D0B3AEB26}(2)
[2010.08.26 22:11:34 | 000,000,000 | ---D | M] (BugMeNot) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{987311C6-B504-4aa2-90BF-60CC49808D42}
[2013.08.28 20:09:11 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010.08.26 22:11:35 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}(2)
[2010.08.26 22:11:36 | 000,000,000 | ---D | M] (Whitehart) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{d650973c-0444-4ac7-9d00-19e3613c83b9}(2)
[2011.01.22 15:17:50 | 000,000,000 | ---D | M] (Fox!Box) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{df4e4df5-5cb7-46b0-9aef-6c784c3249f8}
[2011.02.17 19:36:05 | 000,000,000 | ---D | M] (Print) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\{f199da35-0a9a-4ce9-8f59-c68524deba93}
[2012.10.14 15:59:40 | 000,000,000 | ---D | M] (German Dictionary, extended for Austria) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\de-AT@dictionaries.addons.mozilla.org
[2010.08.26 22:11:31 | 000,000,000 | ---D | M] ("Deutsches Wörterbuch">) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\de-DE@dictionaries.addons.mozilla(2).org
[2012.10.14 15:59:40 | 000,000,000 | ---D | M] (German Dictionary) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2013.07.21 17:19:05 | 000,000,000 | ---D | M] (Fast Translation) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\fasttrans@kemot
[2013.04.14 09:36:37 | 000,000,000 | ---D | M] ("FRITZ!Box AddOn") -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\fb_add_on@avm.de
[2013.06.22 14:59:43 | 000,000,000 | ---D | M] (FlashFirebug) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\flashfirebug@o-minds.com
[2013.07.25 16:09:51 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\ich@maltegoetz.de
[2010.08.26 22:11:32 | 000,000,000 | ---D | M] (Open Image In New Tab) -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\imagetab@next.gen.nz
[2011.03.16 19:22:46 | 000,000,000 | ---D | M] ("Link Alert") -- C:\Users\Ingo\AppData\Roaming\mozilla\Firefox\Profiles\n64mq0a4.default\extensions\linkalert.conlan@addons.mozilla.com
[2006.11.08 22:56:36 | 000,461,885 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\lo97a2qd.default\extensions\{5A170DD3-63CA-4c58-93B7-DE9FF536C2FF}(2)\chrome(2)\tmp.xpi
[2006.11.08 22:45:26 | 000,290,557 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\lo97a2qd.default\extensions\{d650973c-0444-4ac7-9d00-19e3613c83b9}(2)\chrome(2)\tmp.xpi
[2013.07.02 19:25:32 | 000,853,030 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\aeroimproved@rsjtdrjgfuzkfg.com.xpi
[2013.10.04 20:57:12 | 002,209,401 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\firebug@software.joehewitt.com.xpi
[2012.04.19 20:45:38 | 000,870,767 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\firebug@tools.sitepoint.com.xpi
[2013.09.07 16:36:58 | 000,084,201 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\FirePHPExtension-Build@firephp.org.xpi
[2011.10.19 14:08:19 | 000,174,405 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\guiconfig@slosd.net.xpi
[2013.10.01 19:17:54 | 000,348,387 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\langpack-de@firefox.mozilla.org.xpi
[2013.10.02 23:09:38 | 000,051,994 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\newtaburl@sogame.cat.xpi
[2013.05.04 09:13:34 | 000,114,250 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\nosquint@urandom.ca.xpi
[2013.08.03 11:24:46 | 000,276,275 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\sroussey@illumination-for-developers.com.xpi
[2012.03.01 20:11:10 | 000,011,510 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\youtube2mp3@mondayx.de.xpi
[2011.08.12 19:36:49 | 000,031,532 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\{9ab67d74-ec41-4cb2-b417-df5d93ba1beb}.xpi
[2013.08.02 10:44:07 | 000,224,035 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
[2012.07.20 16:24:40 | 000,111,899 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\{c151d79e-e61b-4a90-a887-5a46d38fba99}.xpi
[2013.07.31 09:39:45 | 000,824,302 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2006.11.08 22:56:36 | 000,461,885 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\{5A170DD3-63CA-4c58-93B7-DE9FF536C2FF}(2)\chrome(2)\tmp.xpi
[2006.11.08 22:45:26 | 000,290,557 | ---- | M] () (No name found) -- C:\Users\Ingo\AppData\Roaming\mozilla\firefox\profiles\n64mq0a4.default\extensions\{d650973c-0444-4ac7-9d00-19e3613c83b9}(2)\chrome(2)\tmp.xpi
[2013.10.01 19:15:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013.10.01 19:15:28 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{20A82645-C095-46ED-80E3-08825760534B}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{2E18002D-DF43-4C65-9FDA-40D02F066D9E}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{66E978CD-981F-47DF-AC42-E3CF417C1467}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{6AC85730-7D0F-4DE0-B3FA-21142DD85326}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{987311C6-B504-4AA2-90BF-60CC49808D42}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{9AB67D74-EC41-4CB2-B417-DF5D93BA1BEB}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{C151D79E-E61B-4A90-A887-5A46D38FBA99}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{C50CA3C4-5656-43C2-A061-13E717F73FC8}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{CDBBB3F6-A50E-4B20-A154-5FCBB3BBF43D}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{DDC359D1-844A-42A7-9AA1-88A850A938A8}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\{F199DA35-0A9A-4CE9-8F59-C68524DEBA93}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\DE-AT@DICTIONARIES.ADDONS.MOZILLA.ORG
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\FB_ADD_ON@AVM.DE
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\IMAGETAB@NEXT.GEN.NZ
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\INFO@YOUTUBE-MP3.ORG
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\INGO-M\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\LO97A2QD.DEFAULT\EXTENSIONS\LINKALERT.CONLAN@ADDONS.MOZILLA.COM
File not found (No name found) -- D:\PROGRAMME\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
File not found (No name found) -- D:\PROGRAMME\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
File not found (No name found) -- D:\PROGRAMME\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
File not found (No name found) -- D:\PROGRAMME\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
File not found (No name found) -- D:\PROGRAMME\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
File not found (No name found) -- D:\PROGRAMME\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010.09.21 20:48:15 | 000,065,536 | ---- | M] ( ) -- C:\Program Files (x86)\mozilla firefox\plugins\npfoxitpdf.dll
[2010.10.27 14:41:47 | 000,075,208 | ---- | M] (Foxit Software Company) -- C:\Program Files (x86)\mozilla firefox\plugins\npFoxitReaderPlugin.dll
[2009.08.03 15:07:42 | 000,373,104 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npOGAPlugin.dll
========== Chrome ==========
CHR - homepage:
CHR - default_search_provider: ()
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - homepage:
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aofkhphjhkanpddmfmbckdlcajhnehlf\1.3_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbameneiokkgbdmiekhjnmfkcnldhhm\0.4.1_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench\1.4.0.11967_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.2_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko\2.1.3_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1466_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\icpgjfneehieebagbmdbhnlpiopdcmna\1.0.5_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgfpelakfkbbkkdchaaaknckhoadkcbo\1.0.2_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjpagcblmlakmpcihopmpfknakkimjdh\0.2_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbmlagghjjcbdhgmkedmbmedengocbn\3.10_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbmlagghjjcbdhgmkedmbmedengocbn\3.9_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiaejidbmkiecgbjeifoejpgmdaleoha\1.7.3.1_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiaejidbmkiecgbjeifoejpgmdaleoha\1.7_0\
CHR - Extension: No name found = C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (no name) - {11111111-1111-1111-1111-110311301136} - No CLSID value found.
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\Avast5\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (ExplorerWatcher Class) - {F8A6CAA2-533D-4AED-9E05-8EB19A4021AB} - d:\Programme\Clover\TabHelper64.dll (EJIE Technology)
O2 - BHO: (no name) - {11111111-1111-1111-1111-110311301136} - No CLSID value found.
O2 - BHO: (no name) - {1ED16E0A-E8C4-40A0-8BC2-79485D21F796} - No CLSID value found.
O2 - BHO: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {F8A6CAA2-533D-4AED-9E05-8EB19A4021AB} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\Avast5\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\Avast5\aswWebRepIE.dll (AVAST Software)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4:64bit: - HKLM..\Run: [IntelPAN] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [AdressLittle] D:\Programme\Adress Little 2.0\ageb.exe (Joachim Stroemer)
O4 - HKLM..\Run: [avast] C:\Program Files (x86)\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [KeePass 2 PreLoad] C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe (Dominik Reichl)
O4 - HKCU..\Run: [clipdiary] D:\Programme\Clipdiary\ClipDiary.exe ()
O4 - HKCU..\Run: [DeskSave] D:\Programme\Desksave\DeskSave.exe ()
O4 - HKCU..\Run: [MWSnap] C:\Program Files (x86)\MWSnap\MWSnap.exe (Mirek Wojtowicz)
O4 - HKCU..\Run: [PureSync] C:\Program Files (x86)\PureSync\PureSyncTray.exe (Jumping Bytes)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - Startup: C:\Users\Ingo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Ingo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Ingo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Persbackup.lnk = D:\Programme\Personal Backup 5\Persbackup.exe (J. Rathlev, IEAP, Uni-Kiel)
O4 - Startup: C:\Users\Ingo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SystemExplorerDisabled [2013.10.04 22:15:38 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
O8:64bit: - Extra context menu item: add to &BOM - D:\\PROGRA~1\\BIET-O~1\\\\AddToBOM.hta ()
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Ingo\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm File not found
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Ingo\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm File not found
O8 - Extra context menu item: add to &BOM - D:\\PROGRA~1\\BIET-O~1\\\\AddToBOM.hta ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\Ingo\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm File not found
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Ingo\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm File not found
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} Reg Error: Value error. (Java Plug-in 1.7.0_01)
O16 - DPF: {CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab (Java Plug-in 1.7.0_11)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{27B2EBF4-4FE1-4E15-85D3-A92B7F9110BF}: NameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F0DE66A5-7F08-4BB9-B55E-D34FE758B7CE}: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.)
O28 - HKLM ShellExecuteHooks: UPB:{B5A7F190-DDA6-4420-B3BA-52453494E6CD} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012.03.12 23:30:26 | 000,000,000 | ---D | M] - F:\Auto-Shutdown -- [ NTFS ]
O32 - AutoRun File - [2010.08.24 20:32:47 | 000,000,000 | ---D | M] - F:\Autoruns -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013.10.06 19:30:30 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Ingo\Desktop\OTL.exe
[2013.10.06 15:36:08 | 000,000,000 | ---D | C] -- C:\Users\Ingo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
[2013.10.06 15:35:04 | 000,000,000 | ---D | C] -- C:\Users\Ingo\AppData\Roaming\Dropbox
[2013.10.05 18:56:07 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
[2013.10.02 21:36:27 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2013.10.02 20:34:46 | 000,000,000 | ---D | C] -- C:\FRST
[2013.10.01 21:14:50 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013.10.01 19:34:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2013.10.01 19:30:17 | 000,312,744 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe
[2013.10.01 19:30:08 | 000,189,352 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe
[2013.10.01 19:30:08 | 000,189,352 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\java.exe
[2013.10.01 19:30:08 | 000,108,968 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll
[2013.10.01 19:30:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2013.10.01 19:29:40 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2013.10.01 19:15:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013.09.28 11:37:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
[2013.09.11 22:37:20 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013.09.11 22:37:20 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013.09.11 22:37:17 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013.09.11 22:37:17 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013.09.11 22:37:17 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013.09.11 22:37:17 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013.09.11 22:37:16 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013.09.11 22:37:16 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013.09.11 22:37:16 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013.09.11 22:37:16 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013.09.11 22:37:15 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013.09.11 22:37:11 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013.09.11 22:37:10 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013.09.11 22:37:10 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.09.11 22:37:09 | 003,959,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013.09.11 20:29:43 | 000,000,000 | ---D | C] -- C:\Users\Ingo\Desktop\Iris
[2013.09.11 20:22:48 | 000,155,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ataport.sys
[2013.09.11 20:20:10 | 003,968,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2013.09.11 20:20:09 | 003,913,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2013.09.11 20:20:08 | 005,550,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2013.09.11 20:20:07 | 001,732,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2013.09.11 20:20:06 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2013.09.11 20:20:04 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2013.09.11 20:20:02 | 001,161,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2013.09.11 20:20:01 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2013.09.11 20:20:01 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2013.09.11 20:20:00 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2013.09.11 20:20:00 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2013.09.11 20:20:00 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2013.09.11 20:19:59 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2013.09.11 20:19:59 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2013.09.11 20:19:59 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2013.09.11 20:19:58 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2013.09.11 20:19:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2013.09.11 20:19:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2013.09.11 20:19:57 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2013.09.11 20:19:57 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2013.09.11 20:19:56 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2013.09.11 20:19:52 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2013.09.11 20:19:52 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2013.09.11 20:19:52 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2013.09.11 20:19:52 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2013.09.11 20:19:51 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2013.09.11 20:19:51 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2013.09.11 20:19:51 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2013.09.11 20:19:51 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2013.09.11 20:19:50 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013.09.11 20:19:50 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2013.09.11 20:19:50 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2013.09.11 20:19:50 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013.09.11 20:19:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2013.09.11 20:19:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2013.09.11 20:19:48 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2013.09.11 20:19:48 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2013.09.11 20:19:47 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2013.09.11 20:19:44 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2013.09.11 20:19:44 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2013.09.11 20:19:44 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2013.09.11 20:19:44 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2013.09.11 20:19:43 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2013.09.11 20:19:42 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2013.09.11 20:19:36 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.09.11 20:19:35 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.09.11 20:19:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2013.09.11 20:19:35 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2013.09.11 20:19:34 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2013.09.11 20:19:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2013.09.11 20:19:33 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2013.09.11 20:19:33 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2013.09.11 20:19:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2013.09.11 20:19:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2013.09.11 20:19:31 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2013.09.11 20:19:31 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2013.09.11 20:19:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2013.09.11 20:19:28 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2013.09.11 20:19:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2013.09.11 20:19:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2013.09.11 20:19:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2013.09.11 20:19:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2013.09.11 20:19:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2013.09.11 20:19:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2013.09.11 20:19:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2013.09.11 20:19:22 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2013.09.11 20:19:21 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2013.09.11 20:19:21 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2013.09.11 20:19:20 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2013.09.11 20:19:20 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2013.09.11 20:19:19 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2013.09.11 20:19:19 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2013.09.11 20:19:18 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2013.09.11 20:19:18 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2013.09.11 20:19:18 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
[2013.09.11 20:19:17 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2013.09.11 20:19:16 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2013.09.11 20:16:08 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
[2013.09.08 14:11:40 | 000,000,000 | ---D | C] -- C:\Users\Ingo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
[2010.08.30 22:14:15 | 000,703,352 | ---- | C] (Sysinternals - www.sysinternals.com) -- C:\Program Files (x86)\autoruns.exe
[1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013.10.06 19:32:01 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3237284612-487690776-1710373329-1001UA.job
[2013.10.06 18:59:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.10.06 18:44:00 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.10.06 15:36:33 | 000,001,060 | ---- | M] () -- C:\Users\Ingo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2013.10.06 13:17:28 | 000,026,192 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.10.06 13:17:28 | 000,026,192 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.10.06 13:05:39 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.10.06 13:04:36 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.10.06 13:04:16 | 3195,211,776 | -HS- | M] () -- C:\hiberfil.sys
[2013.10.06 10:19:33 | 000,076,322 | ---- | M] () -- C:\Users\Ingo\Desktop\SystemExplorerDisab.jpg
[2013.10.05 16:21:46 | 001,622,004 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.10.05 16:21:46 | 000,700,592 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.10.05 16:21:46 | 000,655,264 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.10.05 16:21:46 | 000,149,356 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.10.05 16:21:46 | 000,122,136 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.10.05 12:32:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3237284612-487690776-1710373329-1001Core.job
[2013.10.03 13:36:22 | 000,042,359 | ---- | M] () -- C:\Users\Ingo\Desktop\Firefox Startseite wiederherstellen (about_config).jpg
[2013.10.02 08:38:58 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Ingo\Desktop\OTL.exe
[2013.10.01 20:21:08 | 000,000,898 | ---- | M] () -- C:\Windows\SysWow64\InstallUtil.InstallLog
[2013.10.01 19:29:53 | 000,108,968 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll
[2013.10.01 19:29:48 | 000,312,744 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe
[2013.10.01 19:29:48 | 000,189,352 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe
[2013.10.01 19:29:47 | 000,189,352 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\java.exe
[2013.10.01 19:29:44 | 001,095,080 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll
[2013.10.01 19:29:44 | 000,973,736 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll
[2013.10.01 18:45:35 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2013.09.29 08:58:17 | 000,007,680 | ---- | M] () -- C:\Users\Ingo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.09.28 11:41:14 | 000,001,274 | ---- | M] () -- C:\Users\Ingo\Desktop\WebCam.lnk
[2013.09.28 11:25:32 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\lvuvc.hs
[2013.09.19 19:59:47 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2013.09.19 19:59:46 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013.09.18 19:59:41 | 000,074,253 | ---- | M] () -- C:\Users\Ingo\Desktop\Kleid.jpg
[2013.09.12 19:38:19 | 000,569,096 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013.10.06 15:36:33 | 000,001,060 | ---- | C] () -- C:\Users\Ingo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2013.10.06 10:19:33 | 000,076,322 | ---- | C] () -- C:\Users\Ingo\Desktop\SystemExplorerDisab.jpg
[2013.10.03 13:36:22 | 000,042,359 | ---- | C] () -- C:\Users\Ingo\Desktop\Firefox Startseite wiederherstellen (about_config).jpg
[2013.10.01 20:11:26 | 000,000,898 | ---- | C] () -- C:\Windows\SysWow64\InstallUtil.InstallLog
[2013.09.28 11:41:14 | 000,001,274 | ---- | C] () -- C:\Users\Ingo\Desktop\WebCam.lnk
[2013.09.18 19:59:41 | 000,074,253 | ---- | C] () -- C:\Users\Ingo\Desktop\Kleid.jpg
[2013.07.23 17:02:05 | 000,000,367 | ---- | C] () -- C:\Users\Ingo\Heimnetzgruppe - Verknüpfung.lnk
[2013.04.08 18:33:01 | 000,001,464 | ---- | C] () -- C:\Users\Ingo\AppData\Local\recently-used.xbel
[2012.08.29 21:34:56 | 000,001,011 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2012.08.29 21:34:56 | 000,000,159 | ---- | C] () -- C:\Windows\brpcfx.ini
[2012.08.29 21:34:36 | 000,000,432 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2012.08.29 21:34:36 | 000,000,034 | ---- | C] () -- C:\Windows\SysWow64\BD7840W.DAT
[2012.08.29 21:33:29 | 000,106,496 | ---- | C] () -- C:\Windows\SysWow64\BrMuSNMP.dll
[2012.08.29 21:33:29 | 000,000,066 | ---- | C] () -- C:\Windows\Brfaxrx.ini
[2012.08.29 21:33:29 | 000,000,000 | ---- | C] () -- C:\Windows\brdfxspd.dat
[2012.08.29 21:33:22 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\BRTCPCON.DLL
[2012.08.29 21:33:10 | 000,000,114 | ---- | C] () -- C:\Windows\SysWow64\BRLMW03A.INI
[2012.04.19 20:45:46 | 000,000,000 | ---- | C] () -- C:\Users\Ingo\mm_backup.cfg
[2012.03.22 19:36:17 | 000,007,250 | ---- | C] () -- C:\Windows\HCWPNP.INI
[2012.03.21 21:29:59 | 000,038,194 | ---- | C] () -- C:\Windows\Irremote.ini
[2012.03.21 21:29:33 | 000,000,135 | ---- | C] () -- C:\Windows\ODBC.INI
[2012.03.21 21:29:32 | 000,000,209 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2012.03.21 21:29:07 | 000,142,337 | ---- | C] () -- C:\Windows\SysWow64\Wait.exe
[2012.01.18 07:44:00 | 010,920,984 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
[2012.01.18 07:44:00 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
[2012.01.18 07:44:00 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
[2012.01.04 13:28:18 | 000,000,030 | ---- | C] () -- C:\Windows\Iedit_.INI
[2011.07.31 14:21:53 | 000,004,096 | -H-- | C] () -- C:\Users\Ingo\AppData\Local\keyfile3.drm
[2011.05.21 23:10:58 | 000,000,017 | ---- | C] () -- C:\Users\Ingo\AppData\Local\resmon.resmoncfg
[2011.03.21 19:41:21 | 000,001,854 | ---- | C] () -- C:\Users\Ingo\AppData\Roaming\GhostObjGAFix.xml
[2011.02.12 21:11:50 | 000,001,478 | ---- | C] () -- C:\Users\Ingo\AppData\Local\RecConfig.xml
[2010.10.11 20:41:15 | 000,007,680 | ---- | C] () -- C:\Users\Ingo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.08.25 21:23:01 | 000,000,970 | ---- | C] () -- C:\Users\Ingo\Windows-EasyTransfer.lnk
[2010.08.25 21:23:01 | 000,000,758 | ---- | C] () -- C:\Users\Ingo\autorun.inf
========== ZeroAccess Check ==========
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.07.26 04:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== Alternate Data Streams ==========
@Alternate Data Stream - 219 bytes -> C:\ProgramData\Temp:D282699C
@Alternate Data Stream - 128 bytes -> C:\Windows:nlsPreferences
< End of report > --- --- ---
Danke und schöne Grüße,
imebro |