MisterBen | 19.02.2014 00:51 | Zuerst der ADWcleaner. die beiden anderen poste ich dann sofort.
AdwCleaner Logfile: Code:
# AdwCleaner v3.019 - Bericht erstellt am 19/02/2014 um 00:47:18
# Aktualisiert 17/02/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Anwender - ANWENDER-PC
# Gestartet von : C:\Users\Anwender\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16518
-\\ Mozilla Firefox v27.0.1 (de)
[ Datei : C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\prefs.js ]
-\\ Google Chrome v32.0.1700.107
[ Datei : C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [4711 octets] - [17/02/2014 21:23:02]
AdwCleaner[R1].txt - [1068 octets] - [17/02/2014 21:30:20]
AdwCleaner[R2].txt - [1129 octets] - [18/02/2014 10:51:12]
AdwCleaner[R3].txt - [1189 octets] - [18/02/2014 18:38:22]
AdwCleaner[R4].txt - [1248 octets] - [19/02/2014 00:46:05]
AdwCleaner[S0].txt - [4223 octets] - [17/02/2014 21:24:57]
AdwCleaner[S1].txt - [1169 octets] - [19/02/2014 00:47:18]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1229 octets] ########## --- --- ---
Junkware removal bittesehr Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by Anwender on 19.02.2014 at 0:52:07,32
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2433209126-1084260488-3787671162-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Program Files (x86)\resultsalpha"
~~~ FireFox
Successfully deleted: [File] C:\Users\Anwender\AppData\Roaming\mozilla\firefox\profiles\ovzf72gq.default\extensions\toolbar_avira-v7@apn.ask.com.xpi
Successfully deleted: [File] C:\Users\Anwender\AppData\Roaming\mozilla\firefox\profiles\ovzf72gq.default\extensions\toolbar_myc3-v7@apn.ask.com.xpi
Successfully deleted the following from C:\Users\Anwender\AppData\Roaming\mozilla\firefox\profiles\ovzf72gq.default\prefs.js
user_pref("extensions.AVIRA-V7.com.avira.dnt.rules", "\"{\\\"Version\\\":39,\\\"Companies\\\":[{\\\"company\\\":\\\"Google Inc\\\",\\\"rules\\\":[{\\\"name\\\":\\\"Google Anal
Emptied folder: C:\Users\Anwender\AppData\Roaming\mozilla\firefox\profiles\ovzf72gq.default\minidumps [126 files]
~~~ Chrome
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.02.2014 at 0:56:33,72
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Und FRST
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2014
Ran by Anwender (administrator) on ANWENDER-PC on 19-02-2014 01:00:51
Running from C:\Users\Anwender\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(The Eraser Project) C:\Program Files\Eraser\Eraser.exe
(ManyCam LLC) C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(BitTorrent Inc.) C:\Users\Anwender\AppData\Roaming\uTorrent\uTorrent.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Windows\system32\IProsetMonitor.exe
() C:\Windows\system32\d3dx9`29.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\program files (x86)\avira\antivir desktop\ipmGui.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [Eraser] - C:\Program Files\Eraser\Eraser.exe [980920 2012-05-22] (The Eraser Project)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [43608 2010-09-07] ()
HKLM-x32\...\Run: [RUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe [115048 2011-09-20] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Cabinet] - C:\Program Files (x86)\Cabinet\Cabinet.exe [581632 2009-08-19] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2014-02-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKU\S-1-5-21-2433209126-1084260488-3787671162-1000\...\Run: [ManyCam] - C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe [5414912 2014-02-18] (ManyCam LLC)
HKU\S-1-5-21-2433209126-1084260488-3787671162-1000\...\Run: [uTorrent] - C:\Users\Anwender\AppData\Roaming\uTorrent\uTorrent.exe [1142864 2013-11-21] (BitTorrent Inc.)
Startup: C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3050A J611 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3050A J611 series.lnk -> C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default
FF Homepage: about:home
FF NetworkProxy: "autoconfig_url", "chrome://viewtubes/content/viewtubes_false.pac"
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Anwender\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: kitely.com/KitelyPlugin - C:\Users\Anwender\AppData\Roaming\Kitely\KitelyPlugin\npKitelyPlugin.dll (Kitely Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Flash Video Downloader - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\artur.dubovoy@gmail.com [2014-01-24]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\ich@maltegoetz.de [2013-12-31]
FF Extension: YouTube Unblocker - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\youtubeunblocker@unblocker.yt [2014-01-23]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\adblockpopups@jessehakanen.net.xpi [2013-12-31]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\elemhidehelper@adblockplus.org.xpi [2013-12-31]
FF Extension: Video Downloader professional - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\ffext_basicvideoext@startpage24.xpi [2013-12-31]
FF Extension: Viewtubes - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\FF_AddOn@viewtubes.de.xpi [2013-11-02]
FF Extension: Firebug - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\firebug@software.joehewitt.com.xpi [2013-03-22]
FF Extension: MP4 Downloader - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\mp4downloader@jeff.net.xpi [2013-12-31]
FF Extension: Screengrab (fix version) - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\{02450914-cdd9-410f-b1da-db004e18c671}.xpi [2014-01-17]
FF Extension: Modify Headers - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2013-12-31]
FF Extension: Easy Youtube Video Downloader Express - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi [2014-01-03]
FF Extension: Adblock Plus - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-31]
FF Extension: Adblock Edge - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\ovzf72gq.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2013-12-31]
Chrome:
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Kitely Plugin) - C:\Users\Anwender\AppData\Roaming\Kitely\KitelyPlugin\npKitelyPlugin.dll (Kitely Ltd.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Extension: (Download Protect) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\aanbmhcmlmnhgdhmphmhahnbfocegcmi [2014-02-03]
CHR Extension: (Angry Birds) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-01-16]
CHR Extension: (Adblock Plus) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-12-03]
CHR Extension: (ZenMate for Google Chrome™) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2013-08-29]
CHR Extension: (AdBlock) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-12-03]
CHR Extension: (Amazon-Icon) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg [2013-12-03]
CHR Extension: (Google Wallet) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Anwender\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2013-11-29]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2014-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2014-02-18] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2014-02-18] (Avira Operations GmbH & Co. KG)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
R2 SystenPropertiesProtection; C:\Windows\system32\d3dx9`29.exe [118784 2014-01-30] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation)
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [102912 2012-03-15] (Renesas Electronics Corporation)
R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [220672 2012-03-15] (Renesas Electronics Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-09-17] (Anchorfree Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-19 01:00 - 2014-02-19 01:01 - 00014187 _____ () C:\Users\Anwender\Desktop\FRST.txt
2014-02-19 00:56 - 2014-02-19 00:56 - 00001904 _____ () C:\Users\Anwender\Desktop\JRT.txt
2014-02-19 00:52 - 2014-02-19 00:52 - 00000000 ____D () C:\Windows\ERUNT
2014-02-19 00:48 - 2014-02-19 00:48 - 00000784 _____ () C:\Windows\PFRO.log
2014-02-19 00:45 - 2014-02-19 00:45 - 02153472 _____ (Farbar) C:\Users\Anwender\Desktop\FRST64.exe
2014-02-19 00:45 - 2014-02-19 00:45 - 01037530 _____ (Thisisu) C:\Users\Anwender\Desktop\JRT.exe
2014-02-19 00:44 - 2014-02-19 00:44 - 01241834 _____ () C:\Users\Anwender\Desktop\adwcleaner.exe
2014-02-19 00:41 - 2014-02-19 00:41 - 00055232 _____ () C:\Users\Anwender\AppData\Local\recently-used.xbel
2014-02-18 21:55 - 2014-02-18 21:55 - 00013938 _____ () C:\ComboFix.txt
2014-02-18 21:43 - 2014-02-18 21:55 - 00000000 ____D () C:\Qoobox
2014-02-18 21:43 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-18 21:43 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-18 21:43 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-18 21:43 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-18 21:43 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-18 21:43 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-18 21:43 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-18 21:43 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-18 21:42 - 2014-02-18 21:50 - 00000000 ____D () C:\Windows\erdnt
2014-02-18 21:41 - 2014-02-18 21:41 - 05183341 ____R (Swearware) C:\Users\Anwender\Downloads\ComboFix.exe
2014-02-18 18:29 - 2014-02-18 18:30 - 00047360 _____ () C:\Users\Anwender\Downloads\FRST.txt
2014-02-18 18:29 - 2014-02-18 18:30 - 00026168 _____ () C:\Users\Anwender\Downloads\Addition.txt
2014-02-18 18:28 - 2014-02-19 01:00 - 00000000 ____D () C:\FRST
2014-02-18 18:28 - 2014-02-18 18:28 - 02152448 _____ (Farbar) C:\Users\Anwender\Downloads\FRST64.exe
2014-02-18 04:01 - 2014-02-18 04:01 - 00002066 _____ () C:\Users\Public\Desktop\GetDataBack Simple.lnk
2014-02-18 04:01 - 2014-02-18 04:01 - 00000000 ____D () C:\Program Files (x86)\Runtime Software
2014-02-18 04:00 - 2014-02-18 04:01 - 05674672 _____ () C:\Users\Anwender\Downloads\gdbsimsetup.exe
2014-02-17 21:22 - 2014-02-19 00:47 - 00000000 ____D () C:\AdwCleaner
2014-02-17 21:22 - 2014-02-18 18:38 - 01241834 _____ () C:\Users\Anwender\Downloads\adwcleaner.exe
2014-02-17 02:09 - 2014-02-17 02:09 - 00000000 _____ () C:\Users\Anwender\Desktop\Neues Textdokument (4).txt
2014-02-17 01:56 - 2014-02-17 02:32 - 00119803 _____ () C:\Users\Anwender\Desktop\OpenDocument Text (neu).odt
2014-02-16 22:46 - 2014-02-16 22:46 - 00000000 ____D () C:\Program Files\File Shredder
2014-02-16 22:45 - 2014-02-16 22:45 - 09110456 _____ (The Eraser Project) C:\Users\Anwender\Downloads\eraser_6.0.10.2620.exe
2014-02-16 22:45 - 2014-02-16 22:45 - 02317839 _____ (PowTools ) C:\Users\Anwender\Downloads\file_shredder_setup.exe
2014-02-16 22:44 - 2014-02-16 22:44 - 01128960 _____ (Disk Wipe) C:\Users\Anwender\Downloads\diskwipe.exe
2014-02-16 01:00 - 2014-02-19 00:48 - 00000392 _____ () C:\Windows\setupact.log
2014-02-16 01:00 - 2014-02-16 01:00 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-15 16:11 - 2014-02-15 16:11 - 00192704 _____ () C:\Users\Anwender\Documents\cc_20140215_161129.reg
2014-02-14 01:18 - 2014-02-14 01:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 03:01 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 03:01 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 03:00 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 03:00 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 03:00 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 03:00 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 03:00 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 03:00 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-13 03:00 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 03:00 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 03:00 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 03:00 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 03:00 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-13 03:00 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-13 03:00 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-13 03:00 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 03:00 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-13 03:00 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 03:00 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 03:00 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-13 03:00 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-13 03:00 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-13 03:00 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 03:00 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-13 03:00 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-13 03:00 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 03:00 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-13 03:00 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-13 03:00 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-13 03:00 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-13 03:00 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-13 03:00 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 03:00 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 03:00 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-13 03:00 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-13 03:00 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-13 03:00 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 03:00 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-13 03:00 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-13 03:00 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-13 03:00 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-13 02:11 - 2014-02-13 02:11 - 00734473 _____ () C:\Users\Anwender\Downloads\CoreTemp_1.0rc6.zip
2014-02-13 02:11 - 2014-02-13 02:11 - 00000000 ____D () C:\Users\Anwender\Downloads\CoreTemp_1.0rc6
2014-02-12 22:49 - 2014-02-12 22:49 - 00000000 ____D () C:\Users\Anwender\Downloads\XIPack1ur2b
2014-02-12 22:48 - 2014-02-12 22:48 - 00001261 _____ () C:\Users\Anwender\Desktop\Legacy Modding Tools.lnk
2014-02-12 22:37 - 2014-02-12 22:48 - 00001261 _____ () C:\Users\Anwender\Desktop\Ultimate Universe Tools.lnk
2014-02-12 22:37 - 2014-02-12 22:37 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ultimate Universe 2.0
2014-02-12 22:29 - 2014-02-12 22:29 - 03343872 _____ (Microsoft Corporation) C:\Users\Anwender\Downloads\xipack1up2.exe
2014-02-12 22:28 - 2014-02-12 22:29 - 71988736 _____ () C:\Users\Anwender\Downloads\XIPack1ur2b.zip
2014-02-12 22:11 - 2014-02-12 22:11 - 00268112 _____ () C:\Users\Anwender\Downloads\UU22MiniPatch.1.exe
2014-02-12 22:02 - 2014-02-12 22:11 - 183389042 _____ () C:\Users\Anwender\Downloads\UU22Updateb.exe
2014-02-12 21:38 - 2014-02-12 22:00 - 2356756720 _____ () C:\Users\Anwender\Downloads\UU20Part1of2.exe
2014-02-12 20:55 - 2014-02-12 21:23 - 1051738235 _____ () C:\Users\Anwender\Downloads\UU20Part2of2.exe
2014-02-12 08:53 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 08:53 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 08:53 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 08:53 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 08:53 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 08:53 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 08:53 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 08:53 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 08:53 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 08:53 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 08:53 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 08:53 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 08:53 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 08:53 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 08:53 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 08:53 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 08:53 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 08:53 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 08:53 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 08:53 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 08:53 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 08:53 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 08:53 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 08:53 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 08:53 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 08:53 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 08:53 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 08:53 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 18:48 - 2014-02-12 22:17 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks
2014-02-11 18:43 - 2014-02-11 19:24 - 00000000 ____D () C:\Program Files (x86)\Bethesda Softworks
2014-02-11 14:18 - 2014-02-11 14:18 - 00000000 ____D () C:\Users\Anwender\Downloads\enemy_at_the_gate
2014-02-11 13:58 - 2014-02-11 13:58 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alliance Beta
2014-02-11 13:57 - 2014-02-11 13:57 - 00000000 ____D () C:\Users\Anwender\Downloads\alliance_beta
2014-02-11 13:41 - 2014-02-13 17:29 - 00000000 ____D () C:\Users\Anwender\Documents\STLSave
2014-02-10 19:01 - 2014-02-10 19:01 - 00000989 _____ () C:\Users\Public\Desktop\Harry Potter Creative CD.lnk
2014-02-10 19:00 - 2014-02-10 19:01 - 00000000 ____D () C:\Program Files (x86)\Harry Potter Creative CD
2014-02-10 18:13 - 2014-02-10 18:13 - 00000000 ____D () C:\Program Files (x86)\Software2000
2014-02-10 18:06 - 2014-02-10 18:08 - 00000000 ____D () C:\Program Files\Cbsinstall
2014-02-10 02:31 - 2014-02-10 02:33 - 135435227 _____ () C:\Users\Anwender\Downloads\tb3desetup.exe
2014-02-10 02:29 - 2014-02-10 02:29 - 01563891 _____ () C:\Users\Anwender\Downloads\tb3patch1setup.exe
2014-02-10 02:19 - 2014-02-10 03:02 - 1049760254 _____ () C:\Users\Anwender\Downloads\tb3setup.exe
2014-02-08 21:03 - 2014-02-08 21:03 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Unity
2014-02-08 20:48 - 2014-02-08 20:48 - 01050624 _____ (Unity Technologies ApS) C:\Users\Anwender\Downloads\UnityWebPlayer.exe
2014-02-08 20:48 - 2014-02-08 20:48 - 00000000 ____D () C:\Users\Anwender\AppData\Local\Unity
2014-02-05 20:27 - 2014-02-05 20:29 - 53963269 _____ () C:\Users\Anwender\Downloads\enemy_at_the_gate.zip
2014-02-05 20:25 - 2014-02-05 20:28 - 74589677 _____ () C:\Users\Anwender\Downloads\alliance_beta.zip
2014-02-04 16:35 - 2014-02-04 16:35 - 00567781 _____ () C:\Users\Anwender\Downloads\writtenfonts.zip
2014-02-03 15:47 - 2014-02-03 15:47 - 00283096 _____ (Mozilla) C:\Users\Anwender\Downloads\Firefox Setup Stub 26.0.exe
2014-02-02 13:14 - 2014-02-16 23:03 - 00002159 _____ () C:\Users\Anwender\Desktop\Neues Textdokument (3).txt
2014-01-31 00:17 - 2014-01-31 00:18 - 00000000 ____D () C:\Users\Public\Bundesjugendspiele
2014-01-31 00:17 - 2014-01-31 00:17 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BDE Information Utility
2014-01-31 00:17 - 2014-01-31 00:17 - 00000000 ____D () C:\BDE
2014-01-31 00:17 - 2001-11-05 09:30 - 00165376 _____ () C:\Windows\UNWISE.EXE
2014-01-30 19:50 - 2014-02-15 14:04 - 00000000 ____D () C:\Users\Anwender\AppData\Local\gtk-2.0
2014-01-30 13:23 - 2014-01-30 13:23 - 00118784 _____ () C:\Windows\system32\d3dx9`29.exe
2014-01-30 00:40 - 2014-01-30 00:40 - 00000000 ____D () C:\Users\Anwender\Documents\Updater
2014-01-30 00:38 - 2014-01-30 00:38 - 00000000 ____D () C:\Users\Public\Documents\Adobe PDF
2014-01-30 00:35 - 2014-01-30 00:35 - 00000000 ____D () C:\PhSp_CS2_UE_Ret
2014-01-29 21:10 - 2014-01-29 21:13 - 00000000 ____D () C:\Windows\uninstall
2014-01-28 22:41 - 2014-01-28 22:51 - 00000000 ____D () C:\GEW-Zeugnis
2014-01-28 22:41 - 2014-01-28 22:41 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GEW-Zeugnis
2014-01-26 22:23 - 2014-01-26 22:23 - 00002165 _____ () C:\Users\Public\Desktop\Secure Eraser.lnk
2014-01-26 22:23 - 2014-01-26 22:23 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\ASCOMP Software
2014-01-26 22:23 - 2014-01-26 22:23 - 00000000 ____D () C:\Program Files (x86)\ASCOMP Software
2014-01-26 22:22 - 2014-01-26 22:22 - 04233064 _____ (ASCOMP Software GmbH ) C:\Users\Anwender\Downloads\sEraser4201.exe
2014-01-26 16:54 - 2014-01-26 16:54 - 00002041 _____ () C:\Users\Anwender\Desktop\Entfernen des Avira PC Cleaners.lnk
2014-01-26 16:54 - 2014-01-26 16:54 - 00001985 _____ () C:\Users\Anwender\Desktop\Avira PC Cleaner.lnk
2014-01-21 23:53 - 2014-01-26 16:54 - 02278856 _____ () C:\Users\Anwender\Downloads\avira_pc_cleaner_de.exe
==================== One Month Modified Files and Folders =======
2014-02-19 01:01 - 2014-02-19 01:00 - 00014187 _____ () C:\Users\Anwender\Desktop\FRST.txt
2014-02-19 01:00 - 2014-02-18 18:28 - 00000000 ____D () C:\FRST
2014-02-19 00:59 - 2013-10-28 00:48 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\uTorrent
2014-02-19 00:58 - 2013-03-22 14:20 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-19 00:57 - 2009-07-14 05:45 - 00021264 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-19 00:57 - 2009-07-14 05:45 - 00021264 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-19 00:56 - 2014-02-19 00:56 - 00001904 _____ () C:\Users\Anwender\Desktop\JRT.txt
2014-02-19 00:53 - 2013-03-13 16:35 - 01231210 _____ () C:\Windows\WindowsUpdate.log
2014-02-19 00:52 - 2014-02-19 00:52 - 00000000 ____D () C:\Windows\ERUNT
2014-02-19 00:49 - 2013-04-26 00:56 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-19 00:49 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-19 00:48 - 2014-02-19 00:48 - 00000784 _____ () C:\Windows\PFRO.log
2014-02-19 00:48 - 2014-02-16 01:00 - 00000392 _____ () C:\Windows\setupact.log
2014-02-19 00:48 - 2009-07-14 05:45 - 00321648 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-19 00:47 - 2014-02-17 21:22 - 00000000 ____D () C:\AdwCleaner
2014-02-19 00:45 - 2014-02-19 00:45 - 02153472 _____ (Farbar) C:\Users\Anwender\Desktop\FRST64.exe
2014-02-19 00:45 - 2014-02-19 00:45 - 01037530 _____ (Thisisu) C:\Users\Anwender\Desktop\JRT.exe
2014-02-19 00:45 - 2013-04-21 02:21 - 00000000 ____D () C:\Users\Anwender\.gimp-2.8
2014-02-19 00:45 - 2013-03-22 14:08 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\vlc
2014-02-19 00:44 - 2014-02-19 00:44 - 01241834 _____ () C:\Users\Anwender\Desktop\adwcleaner.exe
2014-02-19 00:41 - 2014-02-19 00:41 - 00055232 _____ () C:\Users\Anwender\AppData\Local\recently-used.xbel
2014-02-19 00:32 - 2013-04-26 00:56 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-18 21:55 - 2014-02-18 21:55 - 00013938 _____ () C:\ComboFix.txt
2014-02-18 21:55 - 2014-02-18 21:43 - 00000000 ____D () C:\Qoobox
2014-02-18 21:55 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-18 21:50 - 2014-02-18 21:42 - 00000000 ____D () C:\Windows\erdnt
2014-02-18 21:49 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-18 21:48 - 2013-03-13 16:39 - 00000000 ____D () C:\Users\Anwender
2014-02-18 21:41 - 2014-02-18 21:41 - 05183341 ____R (Swearware) C:\Users\Anwender\Downloads\ComboFix.exe
2014-02-18 18:38 - 2014-02-17 21:22 - 01241834 _____ () C:\Users\Anwender\Downloads\adwcleaner.exe
2014-02-18 18:30 - 2014-02-18 18:29 - 00047360 _____ () C:\Users\Anwender\Downloads\FRST.txt
2014-02-18 18:30 - 2014-02-18 18:29 - 00026168 _____ () C:\Users\Anwender\Downloads\Addition.txt
2014-02-18 18:28 - 2014-02-18 18:28 - 02152448 _____ (Farbar) C:\Users\Anwender\Downloads\FRST64.exe
2014-02-18 04:01 - 2014-02-18 04:01 - 00002066 _____ () C:\Users\Public\Desktop\GetDataBack Simple.lnk
2014-02-18 04:01 - 2014-02-18 04:01 - 00000000 ____D () C:\Program Files (x86)\Runtime Software
2014-02-18 04:01 - 2014-02-18 04:00 - 05674672 _____ () C:\Users\Anwender\Downloads\gdbsimsetup.exe
2014-02-18 03:50 - 2013-05-19 21:41 - 00000000 ____D () C:\Program Files\Recuva
2014-02-17 22:07 - 2013-06-22 11:12 - 00000000 ____D () C:\Users\Anwender\Downloads\d2a536_4e9f4215a711b
2014-02-17 21:25 - 2013-03-13 16:39 - 00000000 ___RD () C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-17 02:32 - 2014-02-17 01:56 - 00119803 _____ () C:\Users\Anwender\Desktop\OpenDocument Text (neu).odt
2014-02-17 02:09 - 2014-02-17 02:09 - 00000000 _____ () C:\Users\Anwender\Desktop\Neues Textdokument (4).txt
2014-02-17 01:25 - 2013-04-15 18:08 - 00000000 ____D () C:\Users\Anwender\AppData\Local\SecondLife
2014-02-16 23:03 - 2014-02-02 13:14 - 00002159 _____ () C:\Users\Anwender\Desktop\Neues Textdokument (3).txt
2014-02-16 22:46 - 2014-02-16 22:46 - 00000000 ____D () C:\Program Files\File Shredder
2014-02-16 22:45 - 2014-02-16 22:45 - 09110456 _____ (The Eraser Project) C:\Users\Anwender\Downloads\eraser_6.0.10.2620.exe
2014-02-16 22:45 - 2014-02-16 22:45 - 02317839 _____ (PowTools ) C:\Users\Anwender\Downloads\file_shredder_setup.exe
2014-02-16 22:44 - 2014-02-16 22:44 - 01128960 _____ (Disk Wipe) C:\Users\Anwender\Downloads\diskwipe.exe
2014-02-16 03:03 - 2013-09-02 09:06 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-16 03:00 - 2013-09-02 09:06 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 01:00 - 2014-02-16 01:00 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-15 20:33 - 2013-08-01 02:12 - 00001157 _____ () C:\Users\Public\Desktop\Second Life Viewer.lnk
2014-02-15 16:19 - 2013-03-13 16:31 - 00000000 ____D () C:\Windows\Panther
2014-02-15 16:11 - 2014-02-15 16:11 - 00192704 _____ () C:\Users\Anwender\Documents\cc_20140215_161129.reg
2014-02-15 14:04 - 2014-01-30 19:50 - 00000000 ____D () C:\Users\Anwender\AppData\Local\gtk-2.0
2014-02-15 13:26 - 2013-03-15 07:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 09:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-14 01:18 - 2014-02-14 01:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 17:29 - 2014-02-11 13:41 - 00000000 ____D () C:\Users\Anwender\Documents\STLSave
2014-02-13 03:03 - 2013-03-14 15:23 - 01597378 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-13 03:03 - 2011-04-12 08:43 - 00700454 _____ () C:\Windows\system32\perfh007.dat
2014-02-13 03:03 - 2011-04-12 08:43 - 00150092 _____ () C:\Windows\system32\perfc007.dat
2014-02-13 03:03 - 2009-07-14 06:13 - 01597378 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-13 02:11 - 2014-02-13 02:11 - 00734473 _____ () C:\Users\Anwender\Downloads\CoreTemp_1.0rc6.zip
2014-02-13 02:11 - 2014-02-13 02:11 - 00000000 ____D () C:\Users\Anwender\Downloads\CoreTemp_1.0rc6
2014-02-12 22:49 - 2014-02-12 22:49 - 00000000 ____D () C:\Users\Anwender\Downloads\XIPack1ur2b
2014-02-12 22:48 - 2014-02-12 22:48 - 00001261 _____ () C:\Users\Anwender\Desktop\Legacy Modding Tools.lnk
2014-02-12 22:48 - 2014-02-12 22:37 - 00001261 _____ () C:\Users\Anwender\Desktop\Ultimate Universe Tools.lnk
2014-02-12 22:37 - 2014-02-12 22:37 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ultimate Universe 2.0
2014-02-12 22:29 - 2014-02-12 22:29 - 03343872 _____ (Microsoft Corporation) C:\Users\Anwender\Downloads\xipack1up2.exe
2014-02-12 22:29 - 2014-02-12 22:28 - 71988736 _____ () C:\Users\Anwender\Downloads\XIPack1ur2b.zip
2014-02-12 22:17 - 2014-02-11 18:48 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks
2014-02-12 22:11 - 2014-02-12 22:11 - 00268112 _____ () C:\Users\Anwender\Downloads\UU22MiniPatch.1.exe
2014-02-12 22:11 - 2014-02-12 22:02 - 183389042 _____ () C:\Users\Anwender\Downloads\UU22Updateb.exe
2014-02-12 22:00 - 2014-02-12 21:38 - 2356756720 _____ () C:\Users\Anwender\Downloads\UU20Part1of2.exe
2014-02-12 21:23 - 2014-02-12 20:55 - 1051738235 _____ () C:\Users\Anwender\Downloads\UU20Part2of2.exe
2014-02-11 22:27 - 2013-04-26 00:56 - 00004110 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-11 22:27 - 2013-04-26 00:56 - 00003858 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-11 19:24 - 2014-02-11 18:43 - 00000000 ____D () C:\Program Files (x86)\Bethesda Softworks
2014-02-11 14:18 - 2014-02-11 14:18 - 00000000 ____D () C:\Users\Anwender\Downloads\enemy_at_the_gate
2014-02-11 13:58 - 2014-02-11 13:58 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alliance Beta
2014-02-11 13:57 - 2014-02-11 13:57 - 00000000 ____D () C:\Users\Anwender\Downloads\alliance_beta
2014-02-10 19:14 - 2013-03-14 15:33 - 00074992 _____ () C:\Users\Anwender\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-10 19:01 - 2014-02-10 19:01 - 00000989 _____ () C:\Users\Public\Desktop\Harry Potter Creative CD.lnk
2014-02-10 19:01 - 2014-02-10 19:00 - 00000000 ____D () C:\Program Files (x86)\Harry Potter Creative CD
2014-02-10 18:13 - 2014-02-10 18:13 - 00000000 ____D () C:\Program Files (x86)\Software2000
2014-02-10 18:08 - 2014-02-10 18:06 - 00000000 ____D () C:\Program Files\Cbsinstall
2014-02-10 13:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-10 03:02 - 2014-02-10 02:19 - 1049760254 _____ () C:\Users\Anwender\Downloads\tb3setup.exe
2014-02-10 02:33 - 2014-02-10 02:31 - 135435227 _____ () C:\Users\Anwender\Downloads\tb3desetup.exe
2014-02-10 02:29 - 2014-02-10 02:29 - 01563891 _____ () C:\Users\Anwender\Downloads\tb3patch1setup.exe
2014-02-08 21:03 - 2014-02-08 21:03 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Unity
2014-02-08 20:48 - 2014-02-08 20:48 - 01050624 _____ (Unity Technologies ApS) C:\Users\Anwender\Downloads\UnityWebPlayer.exe
2014-02-08 20:48 - 2014-02-08 20:48 - 00000000 ____D () C:\Users\Anwender\AppData\Local\Unity
2014-02-07 23:11 - 2014-01-16 19:23 - 00000794 _____ () C:\Users\Anwender\Desktop\Neues Textdokument (2).txt
2014-02-06 13:16 - 2014-02-13 03:00 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-13 03:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-13 03:00 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-13 03:00 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-13 03:00 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-13 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-13 03:00 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-13 03:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-13 03:00 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-13 03:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-13 03:00 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-13 03:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-13 03:00 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-13 03:00 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-13 03:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-13 03:00 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-13 03:00 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-13 03:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-13 03:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-13 03:00 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-13 03:00 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-13 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-13 03:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-13 03:00 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-13 03:00 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-13 03:00 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-13 03:00 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-13 03:00 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-13 03:00 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-13 03:00 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-13 03:00 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-13 03:00 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-13 03:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-13 03:00 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-13 03:00 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-13 03:00 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-13 03:00 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-13 03:00 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-13 03:00 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-05 20:29 - 2014-02-05 20:27 - 53963269 _____ () C:\Users\Anwender\Downloads\enemy_at_the_gate.zip
2014-02-05 20:28 - 2014-02-05 20:25 - 74589677 _____ () C:\Users\Anwender\Downloads\alliance_beta.zip
2014-02-05 18:58 - 2013-03-22 14:20 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 18:58 - 2013-03-22 14:20 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 18:58 - 2013-03-22 14:20 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-04 16:35 - 2014-02-04 16:35 - 00567781 _____ () C:\Users\Anwender\Downloads\writtenfonts.zip
2014-02-04 13:30 - 2013-08-01 20:52 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-03 15:56 - 2013-12-30 13:24 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-03 15:47 - 2014-02-03 15:47 - 00283096 _____ (Mozilla) C:\Users\Anwender\Downloads\Firefox Setup Stub 26.0.exe
2014-02-03 15:42 - 2013-07-18 20:16 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-02-03 15:41 - 2013-03-22 14:20 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Adobe
2014-02-02 15:42 - 2014-01-06 18:09 - 00027837 _____ () C:\Users\Anwender\Desktop\Unbenannt 1.odt
2014-01-31 00:18 - 2014-01-31 00:17 - 00000000 ____D () C:\Users\Public\Bundesjugendspiele
2014-01-31 00:17 - 2014-01-31 00:17 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BDE Information Utility
2014-01-31 00:17 - 2014-01-31 00:17 - 00000000 ____D () C:\BDE
2014-01-30 17:47 - 2013-08-08 21:35 - 00000000 ____D () C:\Users\Anwender\Downloads\86ab906349847e885c19
2014-01-30 17:47 - 2013-06-25 19:55 - 00000000 ____D () C:\Users\Anwender\Downloads\Stunde-Null-Trainer104
2014-01-30 13:23 - 2014-01-30 13:23 - 00118784 _____ () C:\Windows\system32\d3dx9`29.exe
2014-01-30 00:48 - 2013-03-29 12:10 - 00000000 ____D () C:\Users\Anwender\AppData\Local\Adobe
2014-01-30 00:40 - 2014-01-30 00:40 - 00000000 ____D () C:\Users\Anwender\Documents\Updater
2014-01-30 00:38 - 2014-01-30 00:38 - 00000000 ____D () C:\Users\Public\Documents\Adobe PDF
2014-01-30 00:37 - 2013-03-13 16:45 - 00000000 ____D () C:\ProgramData\Adobe
2014-01-30 00:35 - 2014-01-30 00:35 - 00000000 ____D () C:\PhSp_CS2_UE_Ret
2014-01-29 21:13 - 2014-01-29 21:10 - 00000000 ____D () C:\Windows\uninstall
2014-01-28 22:56 - 2013-03-13 16:39 - 00000000 ____D () C:\Users\Anwender\AppData\Local\VirtualStore
2014-01-28 22:51 - 2014-01-28 22:41 - 00000000 ____D () C:\GEW-Zeugnis
2014-01-28 22:41 - 2014-01-28 22:41 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GEW-Zeugnis
2014-01-27 17:32 - 2013-05-01 16:56 - 00000000 ____D () C:\Users\Anwender\Desktop\Programme
2014-01-26 22:23 - 2014-01-26 22:23 - 00002165 _____ () C:\Users\Public\Desktop\Secure Eraser.lnk
2014-01-26 22:23 - 2014-01-26 22:23 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\ASCOMP Software
2014-01-26 22:23 - 2014-01-26 22:23 - 00000000 ____D () C:\Program Files (x86)\ASCOMP Software
2014-01-26 22:22 - 2014-01-26 22:22 - 04233064 _____ (ASCOMP Software GmbH ) C:\Users\Anwender\Downloads\sEraser4201.exe
2014-01-26 16:54 - 2014-01-26 16:54 - 00002041 _____ () C:\Users\Anwender\Desktop\Entfernen des Avira PC Cleaners.lnk
2014-01-26 16:54 - 2014-01-26 16:54 - 00001985 _____ () C:\Users\Anwender\Desktop\Avira PC Cleaner.lnk
2014-01-26 16:54 - 2014-01-21 23:53 - 02278856 _____ () C:\Users\Anwender\Downloads\avira_pc_cleaner_de.exe
Some content of TEMP:
====================
C:\Users\Anwender\AppData\Local\Temp\avgnt.exe
C:\Users\Anwender\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-08 16:07
==================== End Of Log ============================ --- --- ---
Addition zum FRST Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-02-2014
Ran by Anwender at 2014-02-19 01:01:29
Running from C:\Users\Anwender\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
µTorrent (HKCU Version: 3.3.2.30303 - BitTorrent Inc.)
7-Zip 9.20 (x32 Version: - )
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 12.10.100.30328 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1124.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.80328.2204 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.10 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Ashampoo Photo Commander 10 v.10.2.1 (x32 Version: 10.2.1 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 9 v.9.4.3 (x32 Version: 9.4.3 - Ashampoo GmbH & Co. KG)
Ask Toolbar (x32 Version: 12.2.2.576 - Ask Partner Network) <==== ATTENTION
Avira Free Antivirus (x32 Version: 14.0.2.344 - Avira)
Avira SearchFree Toolbar plus Web Protection (x32 Version: 12.2.2.663 - Ask Partner Network)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
BurnInTest v6.0 Pro (Version: 6.0 - Passmark Software)
Cabinet-1.10 (x32 Version: - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2013.0328.2218.38225 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
CCleaner (Version: 4.07 - Piriform)
Celestia 1.6.1 (x32 Version: - Shatters Software)
Command & Conquer 3 (x32 Version: 1.00.0000 - Ihr Firmenname)
Command & Conquer Die ersten 10 Jahre (x32 Version: 1.00.0000 - Electronic Arts)
Command & Conquer™ 3: Kanes Rache (x32 Version: 1.00.0000 - Ihr Firmenname)
Cyotek WebCopy (x32 Version: - Cyotek)
Die Polizei (x32 Version: - Quadriga Games GmbH)
Driver Genius Professional Edition (x32 Version: 10.0 - Driver-Soft Inc.)
eMpTy-V-loader version 3.21 (x32 Version: 3.21 - Daniel Schmidt)
Eraser 6.0.10.2620 (Version: 6.0.2620 - The Eraser Project)
FFMPEG Addon (x32 Version: 1.00 - FFMPEG)
File Shredder 2.5 (Version: - Pow Tools)
GetDataBack Simple (x32 Version: 1.00.001 - Runtime Software)
GIMP 2.8.10 (Version: 2.8.10 - The GIMP Team)
GIMP LqR Plug-In (x32 Version: PlugIn: 0.7.1 - Lib: 0.4.1 - Carlo Baldassi)
Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Harry Potter Creative CD (x32 Version: 1.0.2 - Microgistix, Inc)
HP Deskjet 3050A J611 series - Grundlegende Software für das Gerät (Version: 25.0.571.0 - Hewlett-Packard Co.)
HP Deskjet 3050A J611 series Hilfe (x32 Version: 140.0.2.2 - Hewlett Packard)
Intel(R) Network Connections 18.6.110.0 (Version: 18.6.110.0 - Intel)
Intel(R) Network Connections 18.6.110.0 (Version: 18.6.110.0 - Intel) Hidden
Intel(R) Rapid Storage Technology (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.0.0.1083 - Intel Corporation) Hidden
IrfanView (remove only) (x32 Version: 4.35 - Irfan Skiljan)
iTunes (Version: 11.1.3.8 - Apple Inc.)
JMicron JMB36X Driver (x32 Version: 1.17.65.11 - JMicron Technology Corp.)
Kitely Plugin 2.0.1 (HKCU Version: 2.0.1 - Kitely Ltd.)
K-Lite Mega Codec Pack 9.9.5 (x32 Version: 9.9.5 - )
LibreOffice 3.4 (x32 Version: 3.4.302 - LibreOffice)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
ManyCam 3.1.59 (x32 Version: 3.1.59 - ManyCam LLC)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 1.2.0241 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 27.0.1 (x86 de) (x32 Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 27.0.1 - Mozilla)
No One Lives Forever 2 (x32 Version: - )
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
Pando Media Booster (x32 Version: 2.6.0.9 - Pando Networks Inc.)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6650 - Realtek Semiconductor Corp.)
Recuva (Version: 1.49 - Piriform)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 3.0.16.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 3.0.16.0 - Renesas Electronics Corporation) Hidden
SecondLifeViewer (remove only) (x32 Version: - )
Secure Eraser (x32 Version: 4.2.0.1 - ASCOMP Software GmbH)
Star Trek Legacy (x32 Version: 1.00.0000 - Ihr Firmenname)
Star Trek Online (x32 Version: - Cryptic Studios)
Stellarium 0.12.4 (Version: 0.12.4 - Stellarium team)
SWING (x32 Version: - )
Tim's (168 Kane's Wrath Maps) 2.0.0.9 (x32 Version: - )
Unity Web Player (HKCU Version: - Unity Technologies ApS)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH)
==================== Restore Points =========================
18-02-2014 20:43:15 ComboFix created restore point
==================== Hosts content: ==========================
2009-07-14 03:34 - 2014-02-18 21:49 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {068424B3-AA96-4114-8D93-54140753D058} - System32\Tasks\hpUrlLauncher.exe_{5F39E289-FEFC-440A-9A44-7DD387EE749A} => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\utils\hpUrlLauncher.exe [2011-06-08] (Hewlett-Packard Co.)
Task: {1FEA40A0-126F-42C1-B7AB-E15500FC476C} - System32\Tasks\{DF7086D8-FAF3-449C-AD98-D92B3EA8CF3A} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer Red Alert(tm) II\AR2\YURI.exe
Task: {2717B7A3-64D1-455C-8BFB-4565E4DD2E32} - System32\Tasks\{73DB69E5-DFC3-4037-807A-74979F4026D9} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer Red Alert(tm) II\AR2\YURI.exe
Task: {2864200F-DFF8-48D5-9B51-817771FB3B53} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-26] (Google Inc.)
Task: {2D231A6E-16BA-4CDF-AB6B-3137E124516C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-26] (Google Inc.)
Task: {305F7D39-FD4A-45EB-89BD-580268E452DD} - System32\Tasks\{79B768C1-EF9E-4101-8B21-9D7CC2331DB4} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer Red Alert(tm) II\AR2\YURI.exe
Task: {3223CD43-C1B0-4C85-BDBB-4EF593C1FDFF} - \Scheduled Update for Ask Toolbar No Task File
Task: {359234E9-59C1-479F-9F17-66CA6CC196D1} - System32\Tasks\{8AF2AFE1-0EEC-4627-9526-7862857C151D} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer Red Alert(tm) II\AR2\YURI.exe
Task: {3CFBC584-8B5D-4B26-9DE6-46EC035F53A3} - System32\Tasks\{67692A24-80C4-4B78-A753-A22D29BCFA86} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer Red Alert(tm) II\AR2\YURI.exe
Task: {54E2C06B-54E7-442E-8EA6-CA88E0815CD9} - System32\Tasks\{64452CC5-6B9E-4C64-A60F-6E9B1FCDA453} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer Red Alert(tm) II\AR2\YURI.exe
Task: {67AAC828-4E4B-4B7B-A616-5A860E3CF424} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {6964D8D0-D53F-4F2B-850E-35AC1805B2E0} - System32\Tasks\{8C7433E5-DFD1-4E2E-8272-2F29E860387B} => C:\Users\Anwender\Downloads\6ceb87491503ff470d85\CCGenerals-iMSDOX.exe [2013-06-21] ()
Task: {6D23C818-781D-4826-BD4C-6EDC58CDE1F5} - System32\Tasks\{0F1CAD1E-E25A-4379-A315-D85A348E0851} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer Red Alert(tm) II\AR2\YURI.exe
Task: {772EADAB-7277-4385-9310-2DBDB223A255} - System32\Tasks\{A69EFA75-98C0-4C4F-8939-90BAC79CA224} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer Red Alert(tm) II\AR2\YURI.exe
Task: {8063E5A1-F688-46F0-8594-D3B5B91BF845} - System32\Tasks\{A5C285FE-9D34-4F5B-9D7C-C5F47D9019FC} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer(tm) Generals\generals.exe
Task: {89BB17BA-9E9D-477B-B727-227B06633DBB} - System32\Tasks\{CA6DF542-3B56-429B-B126-F20BE56C56EE} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer Red Alert(tm) II\AR2\YURI.exe
Task: {C9250C9D-6C24-44B5-88DB-9F4418E4A258} - System32\Tasks\{F32C22C6-5523-46FD-8728-04398D1DDD09} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer Red Alert(tm) II\AR2\YURI.exe
Task: {DEF20ED6-9767-49E4-9653-9201024999EB} - System32\Tasks\{1C7AD97E-DC19-48E8-9C0C-27C953AB5710} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer Red Alert(tm) II\AR2\YURI.exe
Task: {E900BD7C-AFC7-48BD-942C-BF6BB1FADEAA} - System32\Tasks\{2977A1EC-651F-4F2E-8C54-F0795E55E35F} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer Red Alert(tm) II\AR2\YURI.exe
Task: {F09CE8A8-588F-4B72-9244-1D44DA9C6AFC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05] (Adobe Systems Incorporated)
Task: {F4E03114-9D52-4CE2-8D25-FC9B5B623C90} - System32\Tasks\{A73B00BE-88EF-4978-ADB2-9A5DBAC32FA9} => C:\Program Files (x86)\EA Games\Command & Conquer Die ersten 10 Jahre\Command & Conquer Red Alert(tm) II\AR2\YURI.exe
Task: {F561CD02-4B4F-40E8-A662-2888DAD42A03} - \DSite No Task File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-01-30 13:23 - 2014-01-30 13:23 - 00118784 _____ () C:\Windows\system32\d3dx9`29.exe
2014-02-16 22:46 - 2012-04-01 00:06 - 02689536 _____ () C:\Program Files\File Shredder\fsshell.dll
2014-01-26 22:23 - 2012-09-07 16:57 - 00559424 _____ () C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll
2013-08-05 18:11 - 2013-08-05 18:03 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-07-22 05:33 - 2013-07-22 05:33 - 02010624 _____ () C:\Program Files (x86)\ManyCam\Bin\opencv_core220.dll
2013-07-22 05:33 - 2013-07-22 05:33 - 01241088 _____ () C:\Program Files (x86)\ManyCam\Bin\opencv_imgproc220.dll
2013-07-22 05:33 - 2013-07-22 05:33 - 00201216 _____ () C:\Program Files (x86)\ManyCam\Bin\opencv_video220.dll
2013-07-22 05:33 - 2013-07-22 05:33 - 00241152 _____ () C:\Program Files (x86)\ManyCam\Bin\opencv_objdetect220.dll
2013-07-22 05:33 - 2013-07-22 05:33 - 00775680 _____ () C:\Program Files (x86)\ManyCam\Bin\opencv_highgui220.dll
2014-02-19 00:49 - 2014-02-19 00:49 - 00075776 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMDE5C.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00056320 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMDE9D.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00055296 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMDE9F.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00068608 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMDEA1.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00075776 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMDF5E.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00033792 _____ () C:\Users\Anwender\AppData\Local\Temp\YTMP7MC8AA\TAADFDD.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00033792 _____ () C:\Users\Anwender\AppData\Local\Temp\YTMP7MC8AA\TAADFDF.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00075776 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMDFE0.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00033792 _____ () C:\Users\Anwender\AppData\Local\Temp\YTMP7MC8AA\TAADFE3.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00075776 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMDFE5.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00033792 _____ () C:\Users\Anwender\AppData\Local\Temp\YTMP7MC8AA\TAADFE7.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00056832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMDFF7.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00075776 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME048.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00075776 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME069.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00075776 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME07B.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00056320 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME08D.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00075776 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME08F.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00075776 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME0A0.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00053760 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME0A2.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00064000 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME0B4.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00053760 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME104.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00057344 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME115.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00072192 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME156.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00072704 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME167.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00072192 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME198.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00072192 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME1C9.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME229.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME2F6.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME3F2.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME423.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME473.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME494.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME4E4.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME515.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME5A3.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME5D4.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME682.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME6C2.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME8B7.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME8D8.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME938.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME988.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME9A9.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEME9F9.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMEA3A.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00120832 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMEA99.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00086016 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMEB39.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00086016 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMEBD7.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00086016 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMEBD9.tmp
2014-02-19 00:49 - 2014-02-19 00:49 - 00086016 _____ () C:\Users\Anwender\AppData\Local\Temp\XTMP1MC3VE\DEMEBDB.tmp
2013-09-13 19:51 - 2013-09-13 19:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-09-13 19:51 - 2013-09-13 19:51 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\Anwender\Documents\Bestätigung_Ihrer_Zahlung_an_Perfect_World_Europe_B_V.eml:OECustomProperty
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2014-02-18 21:48:50.060
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-02-18 21:48:50.013
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 24%
Total physical RAM: 8151.06 MB
Available physical RAM: 6170.45 MB
Total Pagefile: 16300.3 MB
Available Pagefile: 13943.63 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.66 GB) (Free:352.05 GB) NTFS
Drive e: (Volume) (Fixed) (Total:439.45 GB) (Free:426.32 GB) NTFS
Drive f: (Volume) (Fixed) (Total:439.45 GB) (Free:439.03 GB) NTFS
Drive g: (Volume) (Fixed) (Total:518.36 GB) (Free:491.96 GB) NTFS
Drive h: () (Fixed) (Total:1863.01 GB) (Free:1862.87 GB) NTFS
Drive n: (CnMemory) (Fixed) (Total:1863.01 GB) (Free:1786.34 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: ECB7604F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: 9071B15D)
Partition 1: (Not Active) - (Size=439 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=439 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=518 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 7CD95295)
Partition 1: (Not Active) - (Size=-198626508800) - (Type=07 NTFS)
========================================================
Disk: 3 (Size: 1863 GB) (Disk ID: 05A283E0)
Partition 1: (Not Active) - (Size=-198626966528) - (Type=07 NTFS)
==================== End Of Log ============================ |