Trojaner-Board
Seite 2 von 4 1 2 34
100 Beitrge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekmpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Chrome Extension Grepo lsst sich nicht verjagen/kommt immer wieder (https://www.trojaner-board.de/154224-chrome-extension-grepo-laesst-verjagen-kommt-immer.html)

Cupa 24.05.2014 17:28
Code:
SystemLook 30.07.11 by jpshortstuff
Log created at 15:32 on 24/05/2014 by Dustin2
Administrator - Elevation successful

========== folderfind ==========

Searching for "*Grepo*"
C:\AdwCleaner\Quarantine\C\Users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\grepo@extension        d------        [16:11 06/03/2014]
C:\FRST\Quarantine\C\Program Files (x86)\Grepo        d------        [15:38 23/05/2014]
C:\FRST\Quarantine\C\Users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\grepo@extension        d------        [17:32 23/05/2014]
C:\FRST\Quarantine\C\Users\Uwe\AppData\Roaming\Mozilla\Firefox\Profiles\k01fu59j.default\extensions\grepo@extension        d------        [09:01 14/05/2014]
C:\Program Files (x86)\Grepo        d------        [12:06 24/05/2014]
C:\Users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\extensions\grepo@extension        d------        [12:06 24/05/2014]
C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport        d------        [05:32 14/07/2009]
C:\Windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.Resources        d------        [05:37 14/07/2009]
C:\Windows\winsxs\msil_microsoft.windows.d..ds.updatediagreport_31bf3856ad364e35_6.1.7600.16385_none_b52cef29a48aa15f        d------        [05:30 14/07/2009]
C:\Windows\winsxs\msil_microsoft.windows.d..iagreport.resources_31bf3856ad364e35_6.1.7600.16385_de-de_3a0c37196878f845        d------        [21:03 04/11/2009]

========== regfind ==========

Searching for "Grepo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{28A984B0-844D-48EC-AE42-6682BBB4FD33}]
@="grepo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{28A984B0-844D-48EC-AE42-6682BBB4FD33}\InprocServer32]
@="C:\Program Files (x86)\Grepo\grepo_x64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7A7C3277-8F84-4636-95B2-EBB5507FF77E}]
@="LatLongReport Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7A7C3277-8F84-4636-95B2-EBB5507FF77E}\ProgID]
@="LocationDisp.DispLatLongReport.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7A7C3277-8F84-4636-95B2-EBB5507FF77E}\VersionIndependentProgID]
@="LocationDisp.DispLatLongReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9DCC3CC8-8609-4863-BAD4-03601F4C65E8}]
@="LatLongReportFactory Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9DCC3CC8-8609-4863-BAD4-03601F4C65E8}\ProgID]
@="LocationDisp.LatLongReportFactory.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9DCC3CC8-8609-4863-BAD4-03601F4C65E8}\VersionIndependentProgID]
@="LocationDisp.LatLongReportFactory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ED81C073-1F84-4ca8-A161-183C776BC651}\ProgID]
@="LatLongReport.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ED81C073-1F84-4ca8-A161-183C776BC651}\VersionIndependentProgID]
@="LatLongReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06458C7D-4938-11D3-A42B-0060B0F8AA86}]
@="DIHPAiOFaxLogReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06458C7F-4938-11D3-A42B-0060B0F8AA86}]
@="_DIHPAiOFaxLogReportEvents"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06458C81-4938-11D3-A42B-0060B0F8AA86}]
@="DIHPAiOServiceLogReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06458C83-4938-11D3-A42B-0060B0F8AA86}]
@="_DIHPAiOServiceLogReportEvents"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{16EE6CB7-AB3C-424B-849F-269BE551FCBC}]
@="_ILatLongReportFactoryEvents"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3F0804CB-B114-447D-83DD-390174EBB082}]
@="ILatLongReportFactory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7FED806D-0EF8-4f07-80AC-36A0BEAE3134}]
@="ILatLongReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8AE32723-389B-4A11-9957-5BDD48FC9617}]
@="IDispLatLongReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LatLongReport]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LatLongReport\CurVer]
@="LatLongReport.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LatLongReport.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocationDisp.DispLatLongReport]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocationDisp.DispLatLongReport]
@="LatLongReport Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocationDisp.DispLatLongReport\CurVer]
@="LocationDisp.DispLatLongReport.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocationDisp.DispLatLongReport.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocationDisp.DispLatLongReport.1]
@="LatLongReport Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocationDisp.LatLongReportFactory]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocationDisp.LatLongReportFactory]
@="LatLongReportFactory Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocationDisp.LatLongReportFactory\CurVer]
@="LocationDisp.LatLongReportFactory.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocationDisp.LatLongReportFactory.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LocationDisp.LatLongReportFactory.1]
@="LatLongReportFactory Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{87692701-752A-4980-976A-6BD393FE441B}\1.0]
@="grepoLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{87692701-752A-4980-976A-6BD393FE441B}\1.0\0\win32]
@="C:\Program Files (x86)\Grepo\grepo.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{87692701-752A-4980-976A-6BD393FE441B}\1.0\0\win64]
@="C:\Program Files (x86)\Grepo\grepo_x64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{87692701-752A-4980-976A-6BD393FE441B}\1.0\HELPDIR]
@="C:\Program Files (x86)\Grepo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{28A984B0-844D-48EC-AE42-6682BBB4FD33}]
@="grepo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{28A984B0-844D-48EC-AE42-6682BBB4FD33}\InprocServer32]
@="C:\Program Files (x86)\Grepo\grepo.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{7A7C3277-8F84-4636-95B2-EBB5507FF77E}]
@="LatLongReport Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{7A7C3277-8F84-4636-95B2-EBB5507FF77E}\ProgID]
@="LocationDisp.DispLatLongReport.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{7A7C3277-8F84-4636-95B2-EBB5507FF77E}\VersionIndependentProgID]
@="LocationDisp.DispLatLongReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9DCC3CC8-8609-4863-BAD4-03601F4C65E8}]
@="LatLongReportFactory Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9DCC3CC8-8609-4863-BAD4-03601F4C65E8}\ProgID]
@="LocationDisp.LatLongReportFactory.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9DCC3CC8-8609-4863-BAD4-03601F4C65E8}\VersionIndependentProgID]
@="LocationDisp.LatLongReportFactory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{ED81C073-1F84-4ca8-A161-183C776BC651}\ProgID]
@="LatLongReport.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{ED81C073-1F84-4ca8-A161-183C776BC651}\VersionIndependentProgID]
@="LatLongReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{06458C7D-4938-11D3-A42B-0060B0F8AA86}]
@="DIHPAiOFaxLogReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{06458C7F-4938-11D3-A42B-0060B0F8AA86}]
@="_DIHPAiOFaxLogReportEvents"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{06458C81-4938-11D3-A42B-0060B0F8AA86}]
@="DIHPAiOServiceLogReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{06458C83-4938-11D3-A42B-0060B0F8AA86}]
@="_DIHPAiOServiceLogReportEvents"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{16EE6CB7-AB3C-424B-849F-269BE551FCBC}]
@="_ILatLongReportFactoryEvents"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{3F0804CB-B114-447D-83DD-390174EBB082}]
@="ILatLongReportFactory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7FED806D-0EF8-4f07-80AC-36A0BEAE3134}]
@="ILatLongReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{8AE32723-389B-4A11-9957-5BDD48FC9617}]
@="IDispLatLongReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{87692701-752A-4980-976A-6BD393FE441B}\1.0]
@="grepoLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{87692701-752A-4980-976A-6BD393FE441B}\1.0\0\win32]
@="C:\Program Files (x86)\Grepo\grepo.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{87692701-752A-4980-976A-6BD393FE441B}\1.0\0\win64]
@="C:\Program Files (x86)\Grepo\grepo_x64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{87692701-752A-4980-976A-6BD393FE441B}\1.0\HELPDIR]
@="C:\Program Files (x86)\Grepo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport, Version=6.1.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f19545b\567537a4\93]
"DisplayName"="Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport,6.1.0.0,,31bf3856ad364e35"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\746d0106\4f19545b\8b]
"DisplayName"="Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport,6.1.0.0,,31bf3856ad364e35"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\4f19545b\567537a4\89]
"DisplayName"="Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport,6.1.0.0,,31bf3856ad364e35"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\746d0106\4f19545b\89]
"DisplayName"="Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport,6.1.0.0,,31bf3856ad364e35"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754}]
"DllName"="ShoppingReport.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}]
"DllName"="ShoppingReport.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{28A984B0-844D-48EC-AE42-6682BBB4FD33}]
@="grepo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\msil_microsoft.windows.d..ds.updatediagreport_31bf3856ad364e35_none_828340e164b4eef6]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\msil_microsoft.windows.d..iagreport.resources_31bf3856ad364e35_de-de_a17aaed7327e01c0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport, Version=6.1.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\References\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport, Version=6.1.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\References\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.Resources, Version=1.0.0.0, Culture=de, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754}]
"DllName"="ShoppingReport.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}]
"DllName"="ShoppingReport.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{28A984B0-844D-48EC-AE42-6682BBB4FD33}]
@="grepo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Grepo]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Grepo]
"InstallLocation"="C:\Program Files (x86)\Grepo\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Grepo]
"DisplayName"="Grepo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Grepo]
"Publisher"="Grepo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Grepo]
"URLInfoAbout"="www.grepo.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Grepo]
"URLUpdateInfo"="www.grepo.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Grepo]
"HelpLink"="www.grepo.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Grepo]
"UninstallString"=""C:\Program Files (x86)\Grepo\1100.exe" /uninstall"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Grepo]
"QuietUninstallString"=""C:\Program Files (x86)\Grepo\1100.exe" /uninstall"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{28A984B0-844D-48EC-AE42-6682BBB4FD33}]
@="grepo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{28A984B0-844D-48EC-AE42-6682BBB4FD33}\InprocServer32]
@="C:\Program Files (x86)\Grepo\grepo.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{7A7C3277-8F84-4636-95B2-EBB5507FF77E}]
@="LatLongReport Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{7A7C3277-8F84-4636-95B2-EBB5507FF77E}\ProgID]
@="LocationDisp.DispLatLongReport.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{7A7C3277-8F84-4636-95B2-EBB5507FF77E}\VersionIndependentProgID]
@="LocationDisp.DispLatLongReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{9DCC3CC8-8609-4863-BAD4-03601F4C65E8}]
@="LatLongReportFactory Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{9DCC3CC8-8609-4863-BAD4-03601F4C65E8}\ProgID]
@="LocationDisp.LatLongReportFactory.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{9DCC3CC8-8609-4863-BAD4-03601F4C65E8}\VersionIndependentProgID]
@="LocationDisp.LatLongReportFactory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{ED81C073-1F84-4ca8-A161-183C776BC651}\ProgID]
@="LatLongReport.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{ED81C073-1F84-4ca8-A161-183C776BC651}\VersionIndependentProgID]
@="LatLongReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{06458C7D-4938-11D3-A42B-0060B0F8AA86}]
@="DIHPAiOFaxLogReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{06458C7F-4938-11D3-A42B-0060B0F8AA86}]
@="_DIHPAiOFaxLogReportEvents"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{06458C81-4938-11D3-A42B-0060B0F8AA86}]
@="DIHPAiOServiceLogReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{06458C83-4938-11D3-A42B-0060B0F8AA86}]
@="_DIHPAiOServiceLogReportEvents"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{16EE6CB7-AB3C-424B-849F-269BE551FCBC}]
@="_ILatLongReportFactoryEvents"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{3F0804CB-B114-447D-83DD-390174EBB082}]
@="ILatLongReportFactory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{7FED806D-0EF8-4f07-80AC-36A0BEAE3134}]
@="ILatLongReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{8AE32723-389B-4A11-9957-5BDD48FC9617}]
@="IDispLatLongReport"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{87692701-752A-4980-976A-6BD393FE441B}\1.0]
@="grepoLib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{87692701-752A-4980-976A-6BD393FE441B}\1.0\0\win32]
@="C:\Program Files (x86)\Grepo\grepo.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{87692701-752A-4980-976A-6BD393FE441B}\1.0\0\win64]
@="C:\Program Files (x86)\Grepo\grepo_x64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{87692701-752A-4980-976A-6BD393FE441B}\1.0\HELPDIR]
@="C:\Program Files (x86)\Grepo"

Searching for "        "
[HKEY_CURRENT_USER\Software\Borland\C++Builder\6.0\Direct]
"Headlines"="<!DOCTYPE html>
<!--[if lt IE 7 ]><html lang="en" class="no-js ie6 oldie"><![endif]-->
<!--[if IE 7 ]><html lang="en" class="no-js ie7 oldie"><![endif]-->
<!--[if IE 8 ]><html lang="en" class="no-js ie8 oldie"><![endif]-->
<!--[if gt IE 8]><!--><html class="no-js" lang="en"><!--<![endif]-->
<head> 
    <!-- Meta Information -->
    <meta charset="utf-8" /><meta http-equiv="cleartype" content="on" /><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /><meta http-equiv="cache-control" content="no-cache" />

 
    <title>Open &amp; Agile Requirement, Test &amp; Change Management Solutions - Borland</title>
 
 
 
      <meta name="description" content="Build better quality software, faster with market leading solutions for Requirements, Test & Change Management. Open. Agile. Enterprise." />
 




   
        <!-- Icons -->
    <link rel="shortcut icon" href="hxxp://www.microfocus.com/_ex/borland
[HKEY_LOCAL_MACHINE\SOFTWARE\Acer\Live Updater]
"BrandName"="acer          "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{8BED7942-FCD9-4CB0-A949-4631A0D4A5DD}]
"RatingsInfo"="<Ratings xmlns="urn:schemas-microsoft-com:GameDescription.v1">
            <Rating ratingSystemID="{36798944-B235-48ac-BF21-E25671F597EE}" ratingID="{97D9239C-2BA3-4e1d-A710-B626DC4602A6}">
                <Descriptor descriptorID="{F110F831-9412-40c9-860A-B489407ED374}"/>
            </Rating>
            <Rating ratingSystemID="{7F2A4D3A-23A8-4123-90E7-D986BF1D9718}" ratingID="{97D9239C-2BA3-4e1d-A710-B626DC4602A6}">
                <Descriptor descriptorID="{F110F831-9412-40c9-860A-B489407ED374}"/>
            </Rating>
            <Rating ratingSystemID="{9AAFBACD-EAB9-4946-8BE8-C4D997927C81}" ratingID="{F7066480-67CC-4697-9B47-7E534B74089D}">
                <Descriptor descriptorID="{F110F831-9412-40c9-860A-B489407ED374}"/>
            </Rating>
            <Rating ratingSystemID="{5B39D1B8-ED49-4055-8A47-04B29A579AD6}" ratingID="{9AE7AC26-0F9A-4f59-A167-00E4F6C96E
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{92704B92-EFAC-4E1B-A13A-3C76C3278972}]
"RatingsInfo"="<Ratings xmlns="urn:schemas-microsoft-com:GameDescription.v1">
            <Rating ratingSystemID="{768BD93D-63BE-46A9-8994-0B53C4B5248F}" ratingID="{18CD34B7-7AA3-42b9-A303-5A729B2FF228}">
                <Descriptor descriptorID="{9A82F712-5A9D-4409-9539-666BBCDFE12D}"/>
                <Descriptor descriptorID="{6AB026D3-FAD5-4a18-A53B-2CAFA358AE8F}"/>
                <Descriptor descriptorID="{1A796A5D-1E25-4862-9443-1550578FF4C4}"/>
                <Descriptor descriptorID="{E04AAEE8-950C-43c4-B75C-D87736A7FAFD}"/>
                <Descriptor descriptorID="{BE562A5F-2A80-4c28-9752-74C696E2ABAF}"/>
            </Rating>
            <Rating ratingSystemID="{EC290BBB-D618-4cb9-9963-1CAAE515443E}" ratingID="{068D40C4-7809-4c67-8FEA-DA457CF990B4}"/>
            <Rating ratingSystemID="{36798944-B235-48ac-BF21-E25671F597EE}" ratingID="{CEC5DB5A-B4C9-4809-96C6-39CE715E4790}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{99891FA9-4BA9-4DBA-9C2B-548B7259C07B}]
"RatingsInfo"="<Ratings xmlns="urn:schemas-microsoft-com:GameDescription.v1">
            <Rating ratingSystemID="{36798944-B235-48ac-BF21-E25671F597EE}" ratingID="{97D9239C-2BA3-4e1d-A710-B626DC4602A6}">
                <Descriptor descriptorID="{F110F831-9412-40c9-860A-B489407ED374}"/>
            </Rating>
            <Rating ratingSystemID="{7F2A4D3A-23A8-4123-90E7-D986BF1D9718}" ratingID="{97D9239C-2BA3-4e1d-A710-B626DC4602A6}">
                <Descriptor descriptorID="{F110F831-9412-40c9-860A-B489407ED374}"/>
            </Rating>
            <Rating ratingSystemID="{9AAFBACD-EAB9-4946-8BE8-C4D997927C81}" ratingID="{F7066480-67CC-4697-9B47-7E534B74089D}">
                <Descriptor descriptorID="{F110F831-9412-40c9-860A-B489407ED374}"/>
            </Rating>
            <Rating ratingSystemID="{5B39D1B8-ED49-4055-8A47-04B29A579AD6}" ratingID="{9AE7AC26-0F9A-4f59-A167-00E4F6C96E
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{C1EC6583-3440-4FCE-8240-3A8E3B7B3458}]
"RatingsInfo"="<Ratings xmlns="urn:schemas-microsoft-com:GameDescription.v1">
            <Rating ratingSystemID="{36798944-B235-48ac-BF21-E25671F597EE}" ratingID="{CEC5DB5A-B4C9-4809-96C6-39CE715E4790}">
                <Descriptor descriptorID="{F110F831-9412-40c9-860A-B489407ED374}"/>
            </Rating>
            <Rating ratingSystemID="{C705DCF4-6AFE-4f4f-BC51-21807E4E5CFB}" ratingID="{B3F8E60B-DF77-4104-88AC-F5919C64649A}"/>
            <Rating ratingSystemID="{EC290BBB-D618-4cb9-9963-1CAAE515443E}" ratingID="{997B7D18-2AFA-49dc-847B-0E8A69723040}"/>
            <Rating ratingSystemID="{768BD93D-63BE-46A9-8994-0B53C4B5248F}" ratingID="{18CD34B7-7AA3-42b9-A303-5A729B2FF228}">
                <Descriptor descriptorID="{9A82F712-5A9D-4409-9539-666BBCDFE12D}"/>
                <Descriptor descriptorID="{BE562A5F-2A80-4c28-9752-74C696E2ABAF}"/>
            </Rating>
            <R
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{F878D6FE-638F-4949-B543-625E0BC8C765}]
"RatingsInfo"="<Ratings xmlns="urn:schemas-microsoft-com:GameDescription.v1">
            <Rating ratingSystemID="{768BD93D-63BE-46A9-8994-0B53C4B5248F}" ratingID="{18CD34B7-7AA3-42b9-A303-5A729B2FF228}">
                <Descriptor descriptorID="{9A82F712-5A9D-4409-9539-666BBCDFE12D}"/>
                <Descriptor descriptorID="{6AB026D3-FAD5-4a18-A53B-2CAFA358AE8F}"/>
                <Descriptor descriptorID="{1A796A5D-1E25-4862-9443-1550578FF4C4}"/>
                <Descriptor descriptorID="{E04AAEE8-950C-43c4-B75C-D87736A7FAFD}"/>
                <Descriptor descriptorID="{BE562A5F-2A80-4c28-9752-74C696E2ABAF}"/>
            </Rating>
            <Rating ratingSystemID="{36798944-B235-48ac-BF21-E25671F597EE}" ratingID="{CEC5DB5A-B4C9-4809-96C6-39CE715E4790}">
                <Descriptor descriptorID="{F110F831-9412-40c9-860A-B489407ED374}"/>
            </Rating>
            <Rati
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]
"ConfigXML"="            <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" >                <InitializationParameters>                    <Param Name="PSVersion" Value="2.0"/>                </InitializationParameters>                <Resources>                    <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true">                        <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                        <Capability Type="Shell"/>                    </Resource>                </Res
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]
"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" Architecture="32" >                        <InitializationParameters>                            <Param Name="PSVersion" Value="2.0"/>                        </InitializationParameters>                        <Resources>                            <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true">                                <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                               
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000]
"DriverDesc"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\Settings]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaCategories\{fc57559e-2e09-463b-a72f-a5bf64c86eba}]
"Name"="AK5370          "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Video\{3F4BA163-3D04-4C8F-B26F-AB9D61531C47}\0000]
"DriverDesc"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Video\{3F4BA163-3D04-4C8F-B26F-AB9D61531C47}\0000]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Video\{3F4BA163-3D04-4C8F-B26F-AB9D61531C47}\0000\Settings]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Video\{3F4BA163-3D04-4C8F-B26F-AB9D61531C47}\0001]
"DriverDesc"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Video\{3F4BA163-3D04-4C8F-B26F-AB9D61531C47}\0001]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Video\{3F4BA163-3D04-4C8F-B26F-AB9D61531C47}\0001\Settings]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_1002&DEV_9553&SUBSYS_02051025&REV_00\4&2721f094&0&0008]
"DeviceDesc"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_#12052112009262&0#]
"DeviceDesc"="                "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_USB_2.0&REV_1.0#2008102822595696867&0#]
"DeviceDesc"="USB 2.0        "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\atikmdag\Device0]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\atikmdag\Device1]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\atikmdag\Device2]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\atikmdag\Device3]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000]
"DriverDesc"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\Settings]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaCategories\{fc57559e-2e09-463b-a72f-a5bf64c86eba}]
"Name"="AK5370          "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\PCI\VEN_1002&DEV_9553&SUBSYS_02051025&REV_00\4&2721f094&0&0008]
"DeviceDesc"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_#12052112009262&0#]
"DeviceDesc"="                "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_USB_2.0&REV_1.0#2008102822595696867&0#]
"DeviceDesc"="USB 2.0        "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\atikmdag\Device0]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\atikmdag\Device1]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\atikmdag\Device2]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\atikmdag\Device3]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000]
"DriverDesc"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\Settings]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaCategories\{fc57559e-2e09-463b-a72f-a5bf64c86eba}]
"Name"="AK5370          "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video\{3F4BA163-3D04-4C8F-B26F-AB9D61531C47}\0000]
"DriverDesc"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video\{3F4BA163-3D04-4C8F-B26F-AB9D61531C47}\0000]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video\{3F4BA163-3D04-4C8F-B26F-AB9D61531C47}\0000\Settings]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video\{3F4BA163-3D04-4C8F-B26F-AB9D61531C47}\0001]
"DriverDesc"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video\{3F4BA163-3D04-4C8F-B26F-AB9D61531C47}\0001]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Video\{3F4BA163-3D04-4C8F-B26F-AB9D61531C47}\0001\Settings]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\PCI\VEN_1002&DEV_9553&SUBSYS_02051025&REV_00\4&2721f094&0&0008]
"DeviceDesc"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_#12052112009262&0#]
"DeviceDesc"="                "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_USB_2.0&REV_1.0#2008102822595696867&0#]
"DeviceDesc"="USB 2.0        "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\atikmdag\Device0]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\atikmdag\Device1]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\atikmdag\Device2]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\atikmdag\Device3]
"Device Description"="ATI Mobility Radeon HD 4570                  "
[HKEY_USERS\S-1-5-21-2972218083-3551369242-1309756512-1006\Software\Borland\C++Builder\6.0\Direct]
"Headlines"="<!DOCTYPE html>
<!--[if lt IE 7 ]><html lang="en" class="no-js ie6 oldie"><![endif]-->
<!--[if IE 7 ]><html lang="en" class="no-js ie7 oldie"><![endif]-->
<!--[if IE 8 ]><html lang="en" class="no-js ie8 oldie"><![endif]-->
<!--[if gt IE 8]><!--><html class="no-js" lang="en"><!--<![endif]-->
<head> 
    <!-- Meta Information -->
    <meta charset="utf-8" /><meta http-equiv="cleartype" content="on" /><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /><meta http-equiv="cache-control" content="no-cache" />

 
    <title>Open &amp; Agile Requirement, Test &amp; Change Management Solutions - Borland</title>
 
 
 
      <meta name="description" content="Build better quality software, faster with market leading solutions for Requirements, Test & Change Management. Open. Agile. Enterprise." />
 




   
        <!-- Icons -->
    <link rel="shortcut icon" hre

-= EOF =-

M-K-D-B 24.05.2014 18:17
Meinen letzten Post gelesen?
Was hast du gemacht, dass die Erweiterung wieder da ist?

Cupa 26.05.2014 16:17
Ich habe nichts deswegen gemacht.

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02
Ran by Dustin2 (administrator) on DUSTINS-PC on 26-05-2014 17:17:22
Running from C:\Users\Dustin2\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AuthenTec, Inc.) C:\Program Files (x86)\Fingerprint Sensor\AtService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\CompPtcVUI.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\BASVC.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
() C:\Program Files (x86)\pc essentials\updater.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
() C:\Windows\PLFSetI.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Akamai Technologies, Inc.) C:\Users\Dustin2\AppData\Local\Akamai\netsession_win.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(McAfee, Inc.) C:\Program Files\McAfee.com\Agent\mcagent.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Akamai Technologies, Inc.) C:\Users\Dustin2\AppData\Local\Akamai\netsession_win.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Deutsche Telekom AG) C:\Program Files (x86)\T-Online\T-Online_Software_6\Basis-Software\Basis2\kernel.exe
(Deutsche Telekom AG) C:\Program Files (x86)\T-Online\T-Online_Software_6\Basis-Software\Basis2\sc_watch.exe
(Deutsche Telekom AG) C:\Program Files (x86)\T-Online\T-Online_Software_6\Basis-Software\Basis2\profilemgr.exe
(fun communications GmbH, hxxp://www.fun.de) C:\Program Files (x86)\T-Online\T-Online_Software_6\Notifier\Notifier.exe
(Deutsche Telekom AG, Marmiko IT-Solutions GmbH) C:\Program Files (x86)\Common Files\Marmiko Shared\MWLaMaS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-08-07] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-06] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [295936 2009-05-22] (Alps Electric Co., Ltd.)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2008-07-29] ()
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [828960 2009-08-05] (Acer Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-08-21] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [EgisTecLiveUpdate] => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-04] (Egis Technology Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [VitaKeyPdtWzd] => c:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe [3567104 2009-08-06] (Egis Technology Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1194504 2009-08-27] (Dritek System Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [419112 2009-10-06] (CyberLink Corp.)
HKLM-x32\...\Run: [MDS_Menu] => C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [1675160 2012-03-21] (McAfee, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-2972218083-3551369242-1309756512-1006\...\Run: [Akamai NetSession Interface] => C:\Users\Dustin2\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Dustin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Dustin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk
ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (No File)
Startup: C:\Users\Dustin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NH ()
Startup: C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {07E4E221-A889-475B-BD66-105D1FF7AAD3} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wiki-tab_internet_std&q={searchTerms}&br=ie10-toi
SearchScopes: HKCU - {2E6179AB-203B-4FF5-AC4E-86534ED8A805} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie10-toi
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {70E2AB1D-B10F-4174-BE89-034529C41867} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=interactivemesuche-21&index=blended&linkCode=ur2&camp=1638&creative=6742
SearchScopes: HKCU - ŸZ’2pvI*X(Ž2s(Jӵ v˰!—(48иpatm6o^Mp`_iw˜!„†x8€j*;a[†8*~Rxœ8'-)x** URL =
BHO: grepo - {28A984B0-844D-48EC-AE42-6682BBB4FD33} - C:\Program Files (x86)\Grepo\grepo_x64.dll (grepo)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120902183112.dll (McAfee, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: grepo - {28A984B0-844D-48EC-AE42-6682BBB4FD33} - C:\Program Files (x86)\Grepo\grepo.dll (grepo)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120902183114.dll (McAfee, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll No File
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @bittorrent.com/BitTorrentDNA - C:\Program Files (x86)\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @live.heroesandgenerals.com/npretox - C:\Program Files (x86)\Heroes & Generals\live\npretoxlive.dll (Reto-Moto ApS)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\progra~2\mcafee\msc\npmcsn~1.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Dustin2\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Dustin2\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Dustin2\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: thehappycloud.com/HappyCloudPlugin - C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFp501.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFp522.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFv501.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: grepo - C:\Users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\grepo@extension [2014-05-26]
FF Extension: Adblock Plus - C:\Users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-18]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-07-04]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-04-15]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2009-08-22]
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: McAfee ScriptScan for Firefox - C:\Program Files (x86)\Common Files\McAfee\SystemCore [2012-09-02]

Chrome:
=======
CHR HomePage: hxxp://www.youtube.com/
CHR StartupUrls: "hxxp://www.youtube.com/"
CHR Extension: (Google Translate) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2014-05-23]
CHR Extension: (Magic Actions for YouTube™) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2014-05-23]
CHR Extension: (SiteAdvisor) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2013-08-10]
CHR Extension: (AdBlock) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-05-23]
CHR Extension: (Chrome to Mobile) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd [2014-05-23]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2014-02-22]
CHR Extension: (Disconnect) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo [2014-05-23]
CHR Extension: (Google Play) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2014-05-23]
CHR Extension: (Turbo for YouTube) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhgnmngkgolhffjjdaipkkjbmbnpefef [2014-05-23]
CHR Extension: (Ghostery) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2014-05-23]
CHR Extension: (Google Wallet) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Currently) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojhmphdkpgbibohbnpbfiefkgieacjmh [2014-05-23]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-05-21]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]
CHR StartMenuInternet: Google Chrome - C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 ATService; C:\Program Files (x86)\Fingerprint Sensor\AtService.exe [1807608 2009-06-30] (AuthenTec, Inc.)
R2 IGBASVC; c:\Program Files (x86)\Acer Bio Protection\BASVC.exe [3449856 2009-08-06] (Egis Technology Inc.)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [140424 2014-04-23] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 McNASvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [502064 2012-08-23] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [199304 2012-05-25] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [210616 2012-05-25] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [162224 2012-05-25] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [311592 2009-08-07] (Egis Technology Inc.)
S2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [99616 2014-03-05] (Overwolf LTD)
R2 pc essentials; C:\Program Files (x86)\pc essentials\updater.exe [1731072 2013-04-18] ()
S3 TriDefService; C:\Program Files (x86)\TriDef 3D\TriDef\Common\TriDefService.exe [1327104 2009-09-15] ()
S3 Browser7Maintenance; "C:\Program Files (x86)\Browser 7 Maintenance Service\maintenanceservice.exe" [X]
S2 XAMPP; C:\Users\Dustin\Desktop\xampp\service.exe [X]

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [65264 2012-02-22] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [160792 2012-02-22] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [229528 2012-02-22] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [487296 2012-02-22] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [647208 2012-02-22] (McAfee, Inc.)
R1 mfenlfk; C:\Windows\System32\DRIVERS\mfenlfk.sys [75936 2012-02-22] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [100912 2012-02-22] (McAfee, Inc.)
R1 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [289664 2012-02-22] (McAfee, Inc.)
R3 stdriver; C:\Windows\System32\DRIVERS\stdriverx64.sys [32536 2013-03-23] ()
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2010-01-21] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27648 2010-01-21] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33280 2010-01-21] (LG Electronics Inc.)
S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-26 17:16 - 2014-05-26 17:16 - 00000000 ____D () C:\Users\Dustin2\Desktop\FRST-OlderVersion
2014-05-24 18:35 - 2014-05-24 18:35 - 00000222 _____ () C:\Users\Dustin2\Desktop\Starbound.url
2014-05-24 15:32 - 2014-05-24 15:52 - 00064382 _____ () C:\Users\Dustin2\Downloads\SystemLook.txt
2014-05-24 15:32 - 2014-05-24 15:32 - 00165376 _____ () C:\Users\Dustin2\Downloads\SystemLook_x64.exe
2014-05-24 14:06 - 2014-05-26 15:22 - 00000000 ____D () C:\Program Files (x86)\Grepo
2014-05-23 22:33 - 2014-05-23 22:33 - 00000034 _____ () C:\Users\Dustin2\Downloads\winamp-dsl.m3u
2014-05-23 18:47 - 2014-05-23 18:49 - 00067021 _____ () C:\Users\Dustin2\Desktop\Addition.txt
2014-05-23 18:23 - 2014-05-23 17:33 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-05-23 18:22 - 2014-05-23 18:22 - 00000084 _____ () C:\folders.txt
2014-05-23 17:52 - 2014-05-23 18:31 - 00026273 _____ () C:\zoek-results.log
2014-05-23 15:26 - 2014-05-23 18:17 - 00000000 ____D () C:\zoek_backup
2014-05-23 15:26 - 2014-05-23 15:26 - 01285120 _____ () C:\Users\Dustin2\Downloads\zoek.exe
2014-05-23 14:51 - 2014-05-23 14:51 - 00000695 _____ () C:\Users\Dustin2\Desktop\JRT.txt
2014-05-23 14:37 - 2014-04-06 08:36 - 01016261 _____ (Thisisu) C:\Users\Dustin2\Desktop\JRT_NEW.exe
2014-05-22 20:51 - 2014-05-22 20:51 - 01326389 _____ () C:\Users\Dustin2\Downloads\adwcleaner_3.210.exe
2014-05-22 20:51 - 2014-05-22 20:51 - 01326389 _____ () C:\Users\Dustin2\Desktop\adwcleaner_3.210.exe
2014-05-22 19:58 - 2014-05-22 19:58 - 00036749 _____ () C:\ComboFix.txt
2014-05-22 17:58 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-22 17:58 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-22 17:58 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-22 17:48 - 2014-05-22 19:58 - 00000000 ____D () C:\Qoobox
2014-05-22 17:46 - 2014-05-22 19:55 - 00000000 ____D () C:\Windows\erdnt
2014-05-22 17:34 - 2014-05-22 17:34 - 05200426 ____R (Swearware) C:\Users\Dustin2\Desktop\ComboFix.exe
2014-05-22 17:34 - 2014-05-22 17:34 - 05200426 _____ (Swearware) C:\Users\Dustin2\Downloads\ComboFix.exe
2014-05-22 17:00 - 2014-05-22 17:00 - 00000031 _____ () C:\Users\Dustin2\Downloads\tune_in_dsl.m3u
2014-05-15 16:42 - 2014-05-16 17:20 - 00000000 ____D () C:\Users\Dustin2\Documents\RPGVXAce
2014-05-15 15:22 - 2014-05-15 15:22 - 00001188 _____ () C:\Users\Public\Desktop\RPG MAKER VX Ace Lite.lnk
2014-05-15 15:22 - 2014-05-15 15:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RPG MAKER VX Ace Lite
2014-05-15 15:21 - 2014-05-15 15:21 - 00000000 ____D () C:\Users\Dustin2\Desktop\rpg-maker-vx-ace-lite
2014-05-15 15:12 - 2014-05-15 15:13 - 00773686 _____ () C:\Users\Dustin2\Downloads\VXAceWallpaperThing1024withlogo.zip
2014-05-15 15:10 - 2014-05-15 15:11 - 01049372 _____ () C:\Users\Dustin2\Downloads\VXAceWallpaperThing1280withlogo.zip
2014-05-15 15:09 - 2014-05-15 15:20 - 109892162 _____ () C:\Users\Dustin2\Downloads\rpg-maker-vx-ace-lite.zip
2014-05-14 11:33 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-14 11:33 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-14 11:33 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 11:32 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-14 11:32 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-14 11:32 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-14 10:32 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 10:32 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 10:32 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 10:32 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 10:29 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 10:29 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 10:29 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 10:29 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 10:29 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 10:29 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 10:29 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 10:29 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 10:29 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 10:29 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 10:29 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 10:29 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 10:29 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 10:29 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 10:29 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 10:29 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-10 15:05 - 2014-05-10 15:05 - 00015496 _____ () C:\Users\Dustin2\Downloads\NewCommands.jar
2014-05-10 14:49 - 2014-05-10 14:49 - 00006097 _____ () C:\Users\Dustin2\Downloads\kCommand_1.4.jar
2014-05-05 19:31 - 2014-05-10 22:51 - 00000607 _____ () C:\Users\Dustin2\Desktop\Habbo Missis.txt
2014-05-05 19:31 - 2014-05-05 19:31 - 00000000 ____D () C:\Users\Dustin2\Desktop\BIGMacroTool
2014-05-03 23:55 - 2014-05-03 23:55 - 00000000 ____D () C:\Program Files (x86)\BigMacroTool
2014-05-03 23:54 - 2014-05-03 23:54 - 00603961 _____ (TLProd ) C:\Users\Dustin2\Downloads\bigmacrotoolsetup.exe
2014-05-03 23:52 - 2014-05-03 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macro Recorder
2014-05-03 23:52 - 2014-05-03 23:52 - 00000000 ____D () C:\Program Files (x86)\MacroRecorder
2014-05-03 23:51 - 2014-05-03 23:51 - 00720656 _____ (Jitbit Software ) C:\Users\Dustin2\Downloads\MacroRecorderSetup.exe
2014-05-02 19:34 - 2014-05-02 19:34 - 00158576 _____ () C:\Users\Dustin2\Downloads\TukMC[3.2.5].zip
2014-05-02 18:46 - 2014-05-02 18:46 - 00065601 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2-api_2.0.397-experimental (1).zip
2014-05-02 18:45 - 2014-05-02 18:46 - 03699473 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2_2.0.397-experimental.jar
2014-05-02 18:45 - 2014-05-02 18:45 - 00065601 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2-api_2.0.397-experimental.zip
2014-04-30 21:16 - 2014-05-14 15:40 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-04-28 18:44 - 2014-04-28 18:44 - 00001140 _____ () C:\Users\Dustin2\Downloads\windmillschematic.schematic
2014-04-28 18:44 - 2014-04-28 18:44 - 00001128 _____ () C:\Users\Dustin2\Downloads\small_house.schematic
2014-04-28 18:42 - 2014-04-28 18:43 - 08072516 _____ () C:\Users\Dustin2\Downloads\templeofspirits.zip
2014-04-28 18:42 - 2014-04-28 18:42 - 00003166 _____ () C:\Users\Dustin2\Downloads\medievaltowerbyyowsky.schematic
2014-04-28 18:34 - 2014-04-28 18:34 - 00072336 _____ () C:\Users\Dustin2\Downloads\elijastemple.schematic
2014-04-28 18:33 - 2014-04-28 18:33 - 00040538 _____ () C:\Users\Dustin2\Downloads\spawn2745.schematic
2014-04-28 18:29 - 2014-04-28 18:29 - 00002034 _____ () C:\Users\Dustin2\Downloads\largemedievalhouse.schematic
2014-04-28 18:29 - 2014-04-28 18:29 - 00000892 _____ () C:\Users\Dustin2\Downloads\smallmedievalhouse3155.schematic
2014-04-28 18:28 - 2014-04-28 18:28 - 00032780 _____ () C:\Users\Dustin2\Downloads\faction-spawn.schematic
2014-04-28 18:27 - 2014-04-28 18:27 - 00265730 _____ () C:\Users\Dustin2\Downloads\aysgarth-medieval.schematic
2014-04-28 18:27 - 2014-04-28 18:27 - 00188559 _____ () C:\Users\Dustin2\Downloads\airship-shipyard.schematic
2014-04-28 18:21 - 2014-04-28 18:21 - 00691201 _____ () C:\Users\Dustin2\Downloads\Heroes.zip
2014-04-28 18:21 - 2014-04-28 18:21 - 00131877 _____ () C:\Users\Dustin2\Downloads\HeroChat.jar
2014-04-28 18:21 - 2014-04-28 18:21 - 00014885 _____ () C:\Users\Dustin2\Downloads\ArathosRPG.jar
2014-04-28 18:21 - 2014-04-28 18:21 - 00011463 _____ () C:\Users\Dustin2\Downloads\Dynmap-HeroChat-0.30-bin.zip
2014-04-27 14:02 - 2014-04-27 14:02 - 00428068 _____ () C:\Users\Dustin2\Downloads\OptiFine_1.6.4_HD_U_D1.jar
2014-04-27 13:54 - 2014-04-27 13:54 - 00002008 _____ () C:\Users\Dustin2\Desktop\FileZilla Client.lnk
2014-04-27 13:53 - 2014-04-27 13:54 - 04968079 _____ (Tim Kosse) C:\Users\Dustin2\Downloads\FileZilla_3.8.0_win32-setup.exe
2014-04-27 13:50 - 2014-04-27 14:06 - 89906602 _____ () C:\Users\Dustin2\Downloads\modpacks^AgrarianSkiesHQ^2_1_2^AgrarianSkiesHQServer.zip
2014-04-26 20:22 - 2014-04-26 20:22 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client
2014-04-26 18:45 - 2014-04-26 18:45 - 01696408 _____ () C:\Users\Dustin2\Downloads\mcore (2).jar
2014-04-26 18:25 - 2014-04-26 18:26 - 03792105 _____ () C:\Users\Dustin2\Downloads\com_gameserver_3.1.3_joomla3.zip
2014-04-26 18:08 - 2014-04-26 18:08 - 00043202 _____ () C:\Users\Dustin2\Downloads\mod_mh_ts3viewer.rev.39.zip

==================== One Month Modified Files and Folders =======

2014-05-26 17:20 - 2014-03-09 18:46 - 00033223 _____ () C:\Users\Dustin2\Desktop\FRST.txt
2014-05-26 17:17 - 2014-03-03 17:48 - 00000000 ____D () C:\FRST
2014-05-26 17:16 - 2014-05-26 17:16 - 00000000 ____D () C:\Users\Dustin2\Desktop\FRST-OlderVersion
2014-05-26 17:16 - 2014-03-09 18:46 - 02066944 _____ (Farbar) C:\Users\Dustin2\Desktop\FRST64.exe
2014-05-26 17:16 - 2012-08-03 16:13 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-26 17:14 - 2010-04-25 13:50 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-26 17:14 - 2010-04-25 13:50 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-26 17:12 - 2012-07-27 13:13 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006UA.job
2014-05-26 17:02 - 2012-03-30 16:51 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000UA.job
2014-05-26 16:26 - 2013-11-06 17:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-26 15:57 - 2009-11-04 14:15 - 01349085 _____ () C:\Windows\WindowsUpdate.log
2014-05-26 15:22 - 2014-05-24 14:06 - 00000000 ____D () C:\Program Files (x86)\Grepo
2014-05-26 15:12 - 2012-07-27 13:13 - 00001076 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006Core.job
2014-05-26 15:02 - 2012-03-30 16:51 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000Core.job
2014-05-26 14:43 - 2012-11-13 19:50 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{B3019771-99BB-46F9-8D8E-A65277738BB5}
2014-05-26 14:34 - 2009-07-14 06:45 - 00017376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-26 14:34 - 2009-07-14 06:45 - 00017376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-26 14:28 - 2013-02-02 11:10 - 00001832 _____ () C:\Users\Public\Desktop\McAfee Internet Security Suite.lnk
2014-05-26 14:25 - 2009-07-14 06:51 - 00309606 _____ () C:\Windows\setupact.log
2014-05-26 14:22 - 2011-09-19 08:43 - 00000437 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-05-26 14:20 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-25 13:56 - 2013-08-17 12:47 - 00000000 ____D () C:\Users\Uwe\AppData\Local\TSVNCache
2014-05-25 13:44 - 2012-10-09 13:08 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{DDA221F5-94E0-4BB6-BDA5-D7912CCC2ACC}
2014-05-24 22:19 - 2012-07-27 13:20 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\Skype
2014-05-24 19:55 - 2009-11-04 14:30 - 00128883 _____ () C:\Windows\DirectX.log
2014-05-24 18:35 - 2014-05-24 18:35 - 00000222 _____ () C:\Users\Dustin2\Desktop\Starbound.url
2014-05-24 15:52 - 2014-05-24 15:32 - 00064382 _____ () C:\Users\Dustin2\Downloads\SystemLook.txt
2014-05-24 15:32 - 2014-05-24 15:32 - 00165376 _____ () C:\Users\Dustin2\Downloads\SystemLook_x64.exe
2014-05-24 13:07 - 2013-08-14 20:22 - 00000000 ____D () C:\Users\Dustin2\AppData\Local\TSVNCache
2014-05-23 22:33 - 2014-05-23 22:33 - 00000034 _____ () C:\Users\Dustin2\Downloads\winamp-dsl.m3u
2014-05-23 18:49 - 2014-05-23 18:47 - 00067021 _____ () C:\Users\Dustin2\Desktop\Addition.txt
2014-05-23 18:31 - 2014-05-23 17:52 - 00026273 _____ () C:\zoek-results.log
2014-05-23 18:30 - 2009-08-22 10:34 - 01448136 _____ () C:\Windows\PFRO.log
2014-05-23 18:22 - 2014-05-23 18:22 - 00000084 _____ () C:\folders.txt
2014-05-23 18:17 - 2014-05-23 15:26 - 00000000 ____D () C:\zoek_backup
2014-05-23 17:33 - 2014-05-23 18:23 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-05-23 15:26 - 2014-05-23 15:26 - 01285120 _____ () C:\Users\Dustin2\Downloads\zoek.exe
2014-05-23 14:51 - 2014-05-23 14:51 - 00000695 _____ () C:\Users\Dustin2\Desktop\JRT.txt
2014-05-22 21:11 - 2014-03-06 18:03 - 00000000 ____D () C:\AdwCleaner
2014-05-22 20:51 - 2014-05-22 20:51 - 01326389 _____ () C:\Users\Dustin2\Downloads\adwcleaner_3.210.exe
2014-05-22 20:51 - 2014-05-22 20:51 - 01326389 _____ () C:\Users\Dustin2\Desktop\adwcleaner_3.210.exe
2014-05-22 20:17 - 2012-07-27 13:16 - 00002376 _____ () C:\Users\Dustin2\Desktop\Google Chrome.lnk
2014-05-22 19:58 - 2014-05-22 19:58 - 00036749 _____ () C:\ComboFix.txt
2014-05-22 19:58 - 2014-05-22 17:48 - 00000000 ____D () C:\Qoobox
2014-05-22 19:55 - 2014-05-22 17:46 - 00000000 ____D () C:\Windows\erdnt
2014-05-22 19:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-05-22 19:42 - 2009-07-14 04:34 - 99352576 _____ () C:\Windows\system32\config\software.bak
2014-05-22 19:42 - 2009-07-14 04:34 - 25427968 _____ () C:\Windows\system32\config\system.bak
2014-05-22 19:42 - 2009-07-14 04:34 - 02097152 _____ () C:\Windows\system32\config\default.bak
2014-05-22 19:42 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\security.bak
2014-05-22 19:42 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak
2014-05-22 19:24 - 2012-07-27 13:00 - 00000000 ____D () C:\Users\Dustin2
2014-05-22 19:23 - 2009-11-04 14:16 - 00000000 ____D () C:\Program Files (x86)\Acer Bio Protection
2014-05-22 17:34 - 2014-05-22 17:34 - 05200426 ____R (Swearware) C:\Users\Dustin2\Desktop\ComboFix.exe
2014-05-22 17:34 - 2014-05-22 17:34 - 05200426 _____ (Swearware) C:\Users\Dustin2\Downloads\ComboFix.exe
2014-05-22 17:00 - 2014-05-22 17:00 - 00000031 _____ () C:\Users\Dustin2\Downloads\tune_in_dsl.m3u
2014-05-22 14:09 - 2009-08-22 07:29 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-05-20 11:17 - 2012-09-09 15:37 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\.minecraft
2014-05-16 17:20 - 2014-05-15 16:42 - 00000000 ____D () C:\Users\Dustin2\Documents\RPGVXAce
2014-05-15 15:22 - 2014-05-15 15:22 - 00001188 _____ () C:\Users\Public\Desktop\RPG MAKER VX Ace Lite.lnk
2014-05-15 15:22 - 2014-05-15 15:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RPG MAKER VX Ace Lite
2014-05-15 15:22 - 2013-08-06 16:49 - 00000000 ____D () C:\Program Files (x86)\Enterbrain
2014-05-15 15:21 - 2014-05-15 15:21 - 00000000 ____D () C:\Users\Dustin2\Desktop\rpg-maker-vx-ace-lite
2014-05-15 15:20 - 2014-05-15 15:09 - 109892162 _____ () C:\Users\Dustin2\Downloads\rpg-maker-vx-ace-lite.zip
2014-05-15 15:13 - 2014-05-15 15:12 - 00773686 _____ () C:\Users\Dustin2\Downloads\VXAceWallpaperThing1024withlogo.zip
2014-05-15 15:11 - 2014-05-15 15:10 - 01049372 _____ () C:\Users\Dustin2\Downloads\VXAceWallpaperThing1280withlogo.zip
2014-05-15 00:47 - 2012-06-10 16:49 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-15 00:47 - 2012-06-10 16:49 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-14 18:27 - 2013-11-06 17:57 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 18:27 - 2012-07-06 04:24 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 18:27 - 2011-06-16 16:54 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 16:23 - 2012-12-05 18:21 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\FTB-Launcher
2014-05-14 15:53 - 2012-07-27 13:00 - 00000000 ___RD () C:\Users\Dustin2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-14 15:53 - 2012-07-27 13:00 - 00000000 ___RD () C:\Users\Dustin2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-14 15:40 - 2014-04-30 21:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-14 11:31 - 2009-08-22 10:35 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-14 11:29 - 2013-07-13 14:47 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-14 11:23 - 2010-05-02 22:09 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 10:18 - 2013-12-08 14:32 - 00000000 ____D () C:\Program Files (x86)\Deutsche Telekom AG
2014-05-10 22:51 - 2014-05-05 19:31 - 00000607 _____ () C:\Users\Dustin2\Desktop\Habbo Missis.txt
2014-05-10 15:13 - 2012-08-24 19:24 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\TS3Client
2014-05-10 15:07 - 2012-07-27 13:13 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006UA
2014-05-10 15:07 - 2012-07-27 13:13 - 00003706 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006Core
2014-05-10 15:05 - 2014-05-10 15:05 - 00015496 _____ () C:\Users\Dustin2\Downloads\NewCommands.jar
2014-05-10 14:49 - 2014-05-10 14:49 - 00006097 _____ () C:\Users\Dustin2\Downloads\kCommand_1.4.jar
2014-05-09 08:14 - 2014-05-14 10:32 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 10:32 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-06 17:09 - 2010-04-25 13:50 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-06 17:09 - 2010-04-25 13:50 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-06 06:40 - 2014-05-14 11:33 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-14 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-14 11:32 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-14 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-14 11:33 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-14 11:33 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-05 19:31 - 2014-05-05 19:31 - 00000000 ____D () C:\Users\Dustin2\Desktop\BIGMacroTool
2014-05-05 16:02 - 2012-12-05 18:03 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\ftblauncher
2014-05-03 23:55 - 2014-05-03 23:55 - 00000000 ____D () C:\Program Files (x86)\BigMacroTool
2014-05-03 23:54 - 2014-05-03 23:54 - 00603961 _____ (TLProd ) C:\Users\Dustin2\Downloads\bigmacrotoolsetup.exe
2014-05-03 23:52 - 2014-05-03 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macro Recorder
2014-05-03 23:52 - 2014-05-03 23:52 - 00000000 ____D () C:\Program Files (x86)\MacroRecorder
2014-05-03 23:51 - 2014-05-03 23:51 - 00720656 _____ (Jitbit Software ) C:\Users\Dustin2\Downloads\MacroRecorderSetup.exe
2014-05-02 19:34 - 2014-05-02 19:34 - 00158576 _____ () C:\Users\Dustin2\Downloads\TukMC[3.2.5].zip
2014-05-02 18:46 - 2014-05-02 18:46 - 00065601 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2-api_2.0.397-experimental (1).zip
2014-05-02 18:46 - 2014-05-02 18:45 - 03699473 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2_2.0.397-experimental.jar
2014-05-02 18:45 - 2014-05-02 18:45 - 00065601 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2-api_2.0.397-experimental.zip
2014-04-28 18:44 - 2014-04-28 18:44 - 00001140 _____ () C:\Users\Dustin2\Downloads\windmillschematic.schematic
2014-04-28 18:44 - 2014-04-28 18:44 - 00001128 _____ () C:\Users\Dustin2\Downloads\small_house.schematic
2014-04-28 18:43 - 2014-04-28 18:42 - 08072516 _____ () C:\Users\Dustin2\Downloads\templeofspirits.zip
2014-04-28 18:42 - 2014-04-28 18:42 - 00003166 _____ () C:\Users\Dustin2\Downloads\medievaltowerbyyowsky.schematic
2014-04-28 18:34 - 2014-04-28 18:34 - 00072336 _____ () C:\Users\Dustin2\Downloads\elijastemple.schematic
2014-04-28 18:33 - 2014-04-28 18:33 - 00040538 _____ () C:\Users\Dustin2\Downloads\spawn2745.schematic
2014-04-28 18:29 - 2014-04-28 18:29 - 00002034 _____ () C:\Users\Dustin2\Downloads\largemedievalhouse.schematic
2014-04-28 18:29 - 2014-04-28 18:29 - 00000892 _____ () C:\Users\Dustin2\Downloads\smallmedievalhouse3155.schematic
2014-04-28 18:28 - 2014-04-28 18:28 - 00032780 _____ () C:\Users\Dustin2\Downloads\faction-spawn.schematic
2014-04-28 18:27 - 2014-04-28 18:27 - 00265730 _____ () C:\Users\Dustin2\Downloads\aysgarth-medieval.schematic
2014-04-28 18:27 - 2014-04-28 18:27 - 00188559 _____ () C:\Users\Dustin2\Downloads\airship-shipyard.schematic
2014-04-28 18:21 - 2014-04-28 18:21 - 00691201 _____ () C:\Users\Dustin2\Downloads\Heroes.zip
2014-04-28 18:21 - 2014-04-28 18:21 - 00131877 _____ () C:\Users\Dustin2\Downloads\HeroChat.jar
2014-04-28 18:21 - 2014-04-28 18:21 - 00014885 _____ () C:\Users\Dustin2\Downloads\ArathosRPG.jar
2014-04-28 18:21 - 2014-04-28 18:21 - 00011463 _____ () C:\Users\Dustin2\Downloads\Dynmap-HeroChat-0.30-bin.zip
2014-04-27 15:20 - 2013-03-24 15:38 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\FileZilla
2014-04-27 14:06 - 2014-04-27 13:50 - 89906602 _____ () C:\Users\Dustin2\Downloads\modpacks^AgrarianSkiesHQ^2_1_2^AgrarianSkiesHQServer.zip
2014-04-27 14:02 - 2014-04-27 14:02 - 00428068 _____ () C:\Users\Dustin2\Downloads\OptiFine_1.6.4_HD_U_D1.jar
2014-04-27 13:54 - 2014-04-27 13:54 - 00002008 _____ () C:\Users\Dustin2\Desktop\FileZilla Client.lnk
2014-04-27 13:54 - 2014-04-27 13:53 - 04968079 _____ (Tim Kosse) C:\Users\Dustin2\Downloads\FileZilla_3.8.0_win32-setup.exe
2014-04-27 13:54 - 2013-03-24 15:37 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2014-04-27 13:54 - 2013-03-24 15:37 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2014-04-26 20:22 - 2014-04-26 20:22 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client
2014-04-26 18:45 - 2014-04-26 18:45 - 01696408 _____ () C:\Users\Dustin2\Downloads\mcore (2).jar
2014-04-26 18:26 - 2014-04-26 18:25 - 03792105 _____ () C:\Users\Dustin2\Downloads\com_gameserver_3.1.3_joomla3.zip
2014-04-26 18:08 - 2014-04-26 18:08 - 00043202 _____ () C:\Users\Dustin2\Downloads\mod_mh_ts3viewer.rev.39.zip
2014-04-26 17:48 - 2014-04-20 15:41 - 00014519 _____ () C:\Users\Dustin2\Desktop\groups.yml

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-22 21:14

==================== End Of Log ============================
--- --- ---

Cupa 26.05.2014 16:26
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-05-2014 02
Ran by Dustin2 at 2014-05-26 17:21:31
Running from C:\Users\Dustin2\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: McAfee  Anti-Virus und Anti-Spyware (Enabled - Up to date) {86355677-4064-3EA7-ABB3-1B136EB04637}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee  Anti-Virus und Anti-Spyware (Enabled - Up to date) {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee  Firewall (Enabled) {BE0ED752-0A0B-3FFF-80EC-B2269063014C}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Access 97rt PAN EURO G (HKLM-x32\...\Access 97rt PAN EURO G) (Version:  - )
Ace of Spades (HKLM-x32\...\{6037B8AD-7D5B-4D50-9BCA-A586C44EEF34}) (Version: 0.75.015 - Ben Aksoy)
Acer Arcade Deluxe (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 3.0.7020 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 3.0.7020 - CyberLink Corp.) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.22 - NewTech Infosystems)
Acer Bio Protection (HKLM-x32\...\InstallShield_{565A39D6-4FB0-4F35-A2AC-0DC66ACC3520}) (Version: 6.1.48 - Egis Technology Inc.)
Acer Crystal Eye Webcam (HKLM-x32\...\{7760D94E-B1B5-40A0-9AA0-ABF942108755}) (Version: 5.2.7.1 - Suyin Optronics Corp)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 4.05.3002 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3003 - Acer Incorporated)
Acer GameZone Console (HKLM-x32\...\{8ed9688e-4f79-4308-91ca-f1c37ca142b4}_is1) (Version: 5.1.0.2 - Oberon Media, Inc.)
Acer GridVista (HKLM-x32\...\GridVista) (Version: 3.01.0730 - Acer Inc.)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.02.3004 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0903 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.01.3014 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat 4.0, 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.04) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.04 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.5.146 - Adobe Systems, Inc.)
Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)
Alice Greenfingers (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}) (Version:  - Oberon Media)
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.105.2015.1103 - Alps Electric)
Amazonia (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11273477}) (Version:  - Oberon Media)
Angry Birds (HKLM-x32\...\{07A6B206-3F11-4D92-92A1-90E116ADD660}) (Version: 2.0.2 - Rovio)
Angry Birds Space (HKLM-x32\...\{45FFEC16-0615-47E2-8B70-CBAFD31D820C}) (Version: 1.3.0 - Rovio)
ANNO 1404 - Knigsedition (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 3.10.0000 - Ubisoft)
ANNO 1503 (HKLM-x32\...\{EBBB1DEF-8878-4CB8-BC0D-1196B30E7527}) (Version: 1.05 - )
ANNO 1503 GOLD (HKLM-x32\...\{DB833EF9-A198-49BE-970A-BD46F30BFBB4}) (Version: 1.05.00 - )
ANNO 1602 (HKLM-x32\...\{84F7CAD9-2316-4701-B5CA-E90FD60029E9}) (Version:  - )
ANNO 1602 Knigs-Edition (HKLM-x32\...\{077A7810-A937-4465-AD08-ACED9807995F}) (Version: 1.00 - )
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI AVIVO64 Codecs (Version: 10.7.0.40702 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{D10D9994-4337-8067-F5D7-9F8FEC1E4A00}) (Version: 3.0.732.0 - ATI Technologies, Inc.)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
AuthenTec Fingerprint Software (HKLM-x32\...\{6CE5CC07-BCE8-4F4E-8287-101B59900A73}) (Version: 8.5.0.306 - AuthenTec, Inc.)
B109n-z (x32 Version: 130.0.396.000 - Hewlett-Packard) Hidden
Backup Manager Basic (x32 Version: 2.0.0.22 - NewTech Infosystems) Hidden
Battlefield 2(TM) (HKLM-x32\...\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}) (Version:  - )
Bauernhof (HKLM-x32\...\Bauernhof) (Version:  - )
BigMacroTool 1.5 (HKLM-x32\...\{620CAD2D-0757-43A9-AA5F-C8D48A1E4D85}_is1) (Version:  - TLProd)
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Blue Byte Game Channel (HKLM-x32\...\Blue Byte Game Channel) (Version:  - UbiSoft)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borland C++Builder 6 (HKLM-x32\...\{2864C41B-EF2D-4640-95A2-526276524519}) (Version: 6.0 - Borland Software Corporation)
Broadcom Gigabit NetLink Controller (HKLM\...\{96F70DF8-160F-4F9C-9B9E-2A9B439B4EB9}) (Version: 12.26.02 - Broadcom Corporation)
Browser 7 der Telekom (HKLM-x32\...\Browser 7 der Telekom 28.0.28 (x86 de)) (Version: 28.0.28 - Deutsche Telekom AG)
Browser 7 Maintenance Service (HKLM-x32\...\Browser7MaintenanceService) (Version: 28.0.28 - Deutsche Telekom AG)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2009.0702.1239.20840 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Czech (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Danish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Dutch (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help English (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Finnish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help French (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help German (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Greek (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Italian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Japanese (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Korean (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Polish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Russian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Spanish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Swedish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Thai (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Turkish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
ccc-core-static (x32 Version: 2009.0702.1239.20840 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2009.0702.1239.20840 - ATI) Hidden
Cheat Engine 6.2 (HKLM-x32\...\Cheat Engine 6.2_is1) (Version:  - Dark Byte)
Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}) (Version:  - Oberon Media)
Compatibility Pack fr 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CortonAndHomePage (HKLM-x32\...\CortonAndHomePage) (Version:  - CortonAndHomePage)
Covert Operations (HKLM-x32\...\Covert Operations) (Version:  - )
CyberLink Audio Pack (5.1ch) for TriDefMediaPlayer 1.0 (HKLM-x32\...\CyberLink Audio Pack for TriDefMediaPlayer_is1) (Version: 1.0 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dachser Global Player (HKLM-x32\...\Dachser Global Player) (Version:  - )
Dairy Dash (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}) (Version:  - Oberon Media)
DarkWave Studio 3.5.7 (HKLM-x32\...\DarkWave Studio) (Version: 3.5.7 - ExperimentalScene)
Der Herr der Ringe Online (HKCU\...\LOTROde) (Version:  - )
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
Dev-C++ 5 beta 9 release (4.9.9.2) (HKLM-x32\...\Dev-C++) (Version:  - )
DeviceDiscovery (x32 Version: 130.0.372.000 - Hewlett-Packard) Hidden
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
DIE SIEDLER - Das Erbe der Knige - Gold Edition (HKLM-x32\...\{E08DE897-B6AF-4DFF-9E90-131E80C876B4}) (Version: 1.00.0000 - Blue Byte)
Die Siedler IV (HKLM-x32\...\S4Uninst) (Version:  - )
Die Sims 2 (HKLM-x32\...\{6E7DD182-9FC6-4651-0095-2E666CC6AF35}) (Version:  - )
Die Sims™ 2 Haustiere (HKLM-x32\...\{4817189D-1785-4627-A33C-39FD90919300}) (Version:  - )
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)
Dragon's Prophet (HKLM-x32\...\{C31556D7-F2B9-4787-B223-F7A035067E89}_is1) (Version: 1.0.1050 - Infernum Productions AG)
Dream Day First Home (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}) (Version:  - Oberon Media)
eBay Worldwide (HKLM-x32\...\{AAF89271-2594-468D-B578-96B2E30C41C4}) (Version: 2.1.0703 - OEM)
EE-ZDE (HKLM-x32\...\{B49C924C-A651-4378-94F6-5D9BF44A959F}) (Version:  - )
Empire Earth (HKLM-x32\...\{2447500B-22D7-47BD-9B13-1A927F43A267}) (Version:  - )
eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
Euro Truck Simulator 1.00 (HKLM-x32\...\Euro Truck Simulator) (Version: 1.00 - )
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
Ezvid (HKLM-x32\...\{F96D619D-99D6-4C9C-A393-0CD22DE1CA66}_is1) (Version: 0.8.8.2 - Ezvid, inc.)
Farm Frenzy 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11531173}) (Version:  - Oberon Media)
FileZilla Client 3.8.0 (HKCU\...\FileZilla Client) (Version: 3.8.0 - Tim Kosse)
Fingerprint Solution (x32 Version: 6.1.48.0 - Egis Technology Inc.) Hidden
Flatcast Producer Plugin 5.2.2.471 (HKLM-x32\...\Flatcast_is1) (Version:  - 1 mal 1 Software GmbH)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free AVI Video Converter version 5.0.22.128 (HKLM-x32\...\Free AVI Video Converter_is1) (Version: 5.0.22.128 - DVDVideoSoft Ltd.)
Free MP4 Video Converter version 5.0.22.128 (HKLM-x32\...\Free MP4 Video Converter_is1) (Version: 5.0.22.128 - DVDVideoSoft Ltd.)
Free Screen To Video V 2.0 (HKLM-x32\...\Free Screen To Video_is1) (Version: 2.0.0.0 - Koyote Soft)
Free YouTube Download version 3.2.16.1030 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.16.1030 - DVDVideoSoft Ltd.)
Game Dev Tycoon (HKLM-x32\...\Steam App 239820) (Version:  - Greenheart Games)
GameRanger (HKCU\...\GameRanger) (Version:  - GameRanger Technologies)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Garry)
GitHub (HKCU\...\5f7eb300e2ea4ebf) (Version: 1.2.3.0 - GitHub, Inc.)
Gizmodock (HKLM-x32\...\Gizmodock) (Version:  - Gizmodock)
Google Chrome (HKCU\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Grand Fantasia (HKLM-x32\...\Grand Fantasia) (Version:  - )
Granny In Paradise (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110551697}) (Version:  - Oberon Media)
Green Line 2 Sprachtrainer (HKLM-x32\...\{16281EBA-AA00-44D2-BC8B-06F3C3380DA1}) (Version: 1.00.000 - Klett)
Grepo (HKLM-x32\...\Grepo) (Version:  - Grepo)
Happy Cloud Client (HKCU\...\HappyCloud) (Version: 3.41 - Happy Cloud, Inc.)
Heroes & Generals (HKLM-x32\...\Heroes & Generals) (Version: 1.0.4.6 - Reto-Moto)
Heroes of Hellas (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380}) (Version:  - Oberon Media)
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Wireless B109n-z All-In-One Driver Software 13.0 Rel .6 (HKLM\...\{722B4A13-F24D-43AE-8813-5DB82C0B23C2}) (Version:  - HP)
HP Print Projects 1.0 (HKLM\...\HP Print Projects) (Version: 1.0 - HP)
HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
hpPrintProjects (x32 Version: 130.0.303.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
hpWLPGInstaller (x32 Version: 130.0.303.000 - Hewlett-Packard) Hidden
HyperCam 2 (HKLM-x32\...\HyperCam 2) (Version: 2.25.01 - Hyperionics Technology LLC)
iCloud (HKLM\...\{EAFB2AD8-D92B-464C-8D97-B9CB94703C4A}) (Version: 3.0.2.163 - Apple Inc.)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3001 - Acer Incorporated)
Intel Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
iTunes (HKLM\...\{A04DCB25-7040-4935-A30D-8E0A893ABF2D}) (Version: 11.1.2.32 - Apple Inc.)
Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java SE Development Kit 7 Update 9 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0170090}) (Version: 1.7.0.90 - Oracle)
Java(TM) 6 Update 30 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216025FF}) (Version: 6.0.300 - Oracle)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
L&H TTS3000 Deutsch (HKLM-x32\...\LHTTSGED) (Version:  - )
Lagarith lossless video codec (Remove Only) (HKLM-x32\...\LAGARITH) (Version:  - )
Launch Manager (HKLM-x32\...\LManager) (Version: 3.0.04 - Acer Inc.)
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
LEGO Star Wars™: Die Komplette Saga (HKLM-x32\...\InstallShield_{D596980D-17BE-4425-B8F0-5640719AADE9}) (Version: 1.00.0000 - LucasArts)
LEGO Star Wars™: The Complete Saga (x32 Version: 1.00.0000 - LucasArts) Hidden
LG Internet Kit (HKLM-x32\...\LG Internet Kit) (Version: 4.2.1 - LG Electronics)
LG USB Modem Drivers (HKLM-x32\...\{3E8DE1A6-B365-4FF6-B917-2892A34990E8}) (Version: 4.9.7 - LG Electronics)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.1.0.210 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.1.0.210 - LogMeIn, Inc.) Hidden
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.1.94 - LSI Corporation)
Macro Recorder 5.7.4 (HKLM-x32\...\Macro Recorder_is1) (Version: 5.7.4 - Jitbit Software)
MAGIX Content und Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (HKLM-x32\...\MAGIX_{B332E15B-243F-4F40-8530-1524F84230A0}) (Version: 4.3.2.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (Version: 4.3.2.0 - MAGIX AG) Hidden
MAGIX Music Maker 2013 Trial Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
McAfee Internet Security Suite (HKLM-x32\...\MSC) (Version: 11.0.678 - McAfee, Inc.)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)
Meine Dienste Software (HKLM\...\Meine Dienste Software) (Version: 2.0.5.0 - Telekom)
Merriam Websters Spell Jam (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112662477}) (Version:  - Oberon Media)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Age of Empires (HKLM-x32\...\Age of Empires) (Version:  - )
Microsoft Age of Empires Expansion (HKLM-x32\...\Age of Empires Expansion 1.0) (Version:  - )
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Crimson Skies Trial (HKLM-x32\...\Crimson Skies Trial 1.0) (Version:  - )
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Language Pack 2007 - German/Deutsch (HKLM-x32\...\OMUI.de-de) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office O MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office SharePoint Designer MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office X MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft Texturepack Editor (HKLM-x32\...\Minecraft Texturepack Editor) (Version:  - )
MixPad Audiodatei-Mixer (HKLM-x32\...\MixPad) (Version:  - NCH Software)
Mozilla Firefox 22.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 22.0 (x86 de)) (Version: 22.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 22.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MWS Reader 4 (HKLM-x32\...\MWS Reader 4_is1) (Version: 4.8 - Micro WAL Software, directINNOVATION UG (haftungsbeschrnkt))
MyWinLocker (HKLM-x32\...\{68301905-2DEA-41CE-A4D4-E8B443B099BA}) (Version: 3.1.72.0 - Egis Technology Inc.)
NavyField2 (HKLM-x32\...\NavyField2 EU) (Version:  - )
Network64 (Version: 130.0.374.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
Netzmanager (HKLM-x32\...\Netzmanager) (Version: 1.071 - Deutsche Telekom AG)
Netzmanager (Version: 1.071 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
No-IP DUC (HKLM-x32\...\NoIPDUC) (Version: 3.0.4 - Vitalwerks Internet Solutions LLC)
Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.0.36 - Symantec)
Norton Security Scan (HKLM-x32\...\NSS) (Version: 3.5.1.8 - Symantec Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 5.9.3 - )
NTI Backup Now 5 (HKLM-x32\...\InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}) (Version: 5.1.2.627 - NewTech Infosystems)
NTI Backup Now Standard (x32 Version: 5.1.2.627 - NewTech Infosystems) Hidden
NTI Media Maker 8 (HKLM-x32\...\InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}) (Version: 8.0.12.6619 - NewTech Infosystems)
NTI Media Maker 8 (x32 Version: 8.0.12.6619 - NewTech Infosystems) Hidden
OLYMPUS ib (HKLM-x32\...\InstallShield_{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}) (Version: 1.1.1404 - OLYMPUS IMAGING CORP.)
OLYMPUS ib (x32 Version: 1.1.1404 - OLYMPUS IMAGING CORP.) Hidden
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.1.10.2728 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\{FB83467F-D8EB-43E6-8B3D-860B045C1C52}) (Version: 0.51.325 - Overwolf)
Pagealicious (HKLM-x32\...\Pagealicious) (Version:  - Pagealicious) <==== ATTENTION
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.)
PC Beschleunigen (HKLM\...\PK-PCSU_is1) (Version: 1.3.10.20086 - PC Beschleunigen)
Pflanzen gegen Zombies (HKLM-x32\...\BFG-Pflanzen gegen Zombies) (Version:  - )
Photo Notifier and Animation Creator (HKLM-x32\...\Photo Notifier and Animation Creator) (Version: 1.0.0.1009 - IncrediMail Ltd.)
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009 - Ihr Firmenname) Hidden
PhotoStage Diashow-Ersteller (HKLM-x32\...\PhotoStage) (Version:  - NCH Software)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.8 - Google, Inc.)
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version:  - PokerStars.net)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
PS_AIO_06_B109n-z_SW_Min (x32 Version: 130.0.396.000 - Hewlett-Packard) Hidden
Quick Memory Editor 5.5 (HKLM-x32\...\Quick Memory Editor_is1) (Version:  - softcows.com)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 3.6 - Razer USA Ltd)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5911 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30093 - Realtek Semiconductor Corp.)
Red Ace Squadron (HKLM-x32\...\{BB930C8A-DDAA-4BAC-B02B-F27440479B2D}) (Version:  - )
Reef Club Casino (HKLM-x32\...\Reef Club Casino) (Version:  - )
Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version:  - )
Roll (HKLM-x32\...\RollerCoaster Tycoon Setup) (Version:  - )
RPG MAKER VX Ace Lite (HKLM-x32\...\RPGVXAceLite_E_is1) (Version: 1.01b - Enterbrain)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Schmidt Interaktivspa Doppelkopf (HKLM-x32\...\{BA947C14-9B71-484D-B66C-055E2E6CA7B1}) (Version:  - )
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 1.0.0.0 - Electronic Arts)
simplitec simplicheck (HKLM-x32\...\{183D780B-28F9-41BA-A2CB-605F324A5781}) (Version: 1.3.10.0 - simplitec GmbH)
Sir Henry's Anno 1602 InselEditor (HKLM-x32\...\Sir Henry's Anno 1602 InselEditor) (Version:  - )
SketchUp 2014 (HKLM-x32\...\{D71C0CA7-A245-4CB7-A958-7DB3377602AE}) (Version: 14.0.4900 - Trimble Navigation Limited)
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
SL-6640 Black Widow Flightstick (HKLM-x32\...\InstallShield_{10D4F38B-5436-4673-B861-F301929B373B}) (Version: 3.1 - Joellenbeck GmbH)
SL-6640 Black Widow Flightstick (x32 Version: 3.1 - Joellenbeck GmbH) Hidden
SmartWebPrinting (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
SoundTap Audiostream-Rekorder (HKLM-x32\...\SoundTap) (Version:  - NCH Software)
Sprachtrainer Fonts (HKLM-x32\...\{FBCF2ED3-AFB5-475E-BF9A-30BEAD366FBC}) (Version: 1.00.01 - Ernst Klett Verlag GmbH)
SQLiteManager (HKLM-x32\...\{C4BA538B-FEF1-4769-A4A3-AE3A9FEAC336}) (Version: 4.2.8 - SQLabs)
Star Defender 4 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-114803710}) (Version:  - Oberon Media)
Star Wars Battlefront II (HKLM-x32\...\{3D374523-CFDE-461A-827E-2A102E2AB365}) (Version: 1.0 - LucasArts)
Star Wars Empire at War (HKLM-x32\...\{99AE7207-8612-4DBA-A8F8-BAE5C633390D}) (Version: 1.0 - LucasArts)
Starbound (HKLM-x32\...\Steam App 211820) (Version:  - )
Status (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Stronghold (HKLM-x32\...\{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}) (Version:  - )
Stronghold 2 (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.00 - Firefly Studios)
Stronghold Crusader Extreme (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: 1.20.0000 - Firefly Studios)
Stronghold Legends (HKLM-x32\...\{66A405D2-BA14-4594-BF36-B3B544F0754E}) (Version: 1.20.0000 - Firefly Studios)
Subversion (HKLM-x32\...\{234AE151-D441-4504-A439-0FE428F8F989}) (Version: 1.8.0.1 - CollabNet)
Switch Audiodatei-Konverter (HKLM-x32\...\Switch) (Version:  - NCH Software)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TEdit 3 (HKLM-x32\...\{B161A5C0-F7C2-4F9B-BA93-051D7C26E624}) (Version: 3.5.14060.0 - BinaryConstruct)
TEdit 3 (HKLM-x32\...\{B81207ED-C990-4AB1-B5D5-A191EA253C0D}) (Version: 3.5.14064.0 - BinaryConstruct)
TEdit 3 (HKLM-x32\...\{EDEAA16E-C6A6-439F-AD8D-B2B68B64176F}) (Version: 3.4.13298.0 - BinaryConstruct)
TEdit 3 (HKLM-x32\...\{F015942F-C1BD-4297-A8A4-C0B8D42B39C5}) (Version: 3.4.13358.0 - BinaryConstruct)
Telekom Fotoservice (HKLM-x32\...\Telekom Fotoservice) (Version:  - )
TempoPerfect Metronome Software (HKLM-x32\...\TempoPerfect) (Version:  - NCH Software)
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version:  - Edmund McMillen and Florian Himsl)
Thirsty Punk (HKLM-x32\...\{11DFFB78-5C06-476A-9EAA-747106633545}) (Version: 1.00.0000 - )
Tiny Media Player v1.0 (HKLM-x32\...\Tiny Media Player_is1) (Version: 1.0.0.0 - )
Titan Quest (HKLM-x32\...\{412B69AF-C352-4F6F-A318-B92B3CB9ACC6}) (Version: 1.00.0000 - Iron Lore)
TomTom HOME 2.7.6.2056 (HKLM-x32\...\TomTom HOME) (Version: 2.7.6.2056 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
T-Online 6.0 (HKLM-x32\...\{B1275E23-717A-4D52-997A-1AD1E24BC7F3}) (Version:  - )
T-Online WLAN-Access Finder (HKLM-x32\...\{295C31E5-3F91-498E-9623-DA24D2FA2B6A}) (Version:  - )
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TopStyle Lite (Version 3.0) (HKLM-x32\...\TopStyle Lite (Version 3.0)) (Version: 3.1.0 - Bradbury Software, LLC)
TortoiseSVN 1.8.1.24570 (64 bit) (HKLM\...\{ECA99F0F-4FCE-40F6-B086-B9A0F7F5563F}) (Version: 1.8.24570 - TortoiseSVN)
Torus Trooper (HKLM-x32\...\{AEB04055-F5B1-47A1-ACEE-F53C23339936}) (Version: 1.00.0000 - Ihr Firmenname)
TrayApp (x32 Version: 130.0.376.000 - Hewlett-Packard) Hidden
TriDef 3D (OEM-A) 1.4.10 (HKLM-x32\...\experience-oem-a-bundle) (Version: 1.4.10gm - )
TriDef 3D Ignition 2.3.3 (HKLM-x32\...\ignition-pkg) (Version: 2.3.3gm - )
TriDef 3D Media Player 6.4.21 (HKLM-x32\...\media-player-pkg) (Version: 6.4.21gm - )
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AB365889-0395-4FAD-B702-CA5985D53D42}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{199DF7B6-169C-448C-B511-1054101BE9C9}) (Version:  - Microsoft)
Update for Microsoft Office OneNote 2007 Help (KB963670) (HKLM-x32\...\{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2744EF05-38E1-4D5D-B333-E021EDAEA245}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{397B1D4F-ED7B-4ACA-A637-43B670843876}) (Version:  - Microsoft)
Update for Microsoft Office Script Editor Help (KB963671) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}) (Version:  - Microsoft)
Update for Microsoft Office Word 2007 (KB974631) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{052CA271-6C3E-4B8F-9EEE-CEA84BC901DC}) (Version:  - Microsoft)
Update for Microsoft Office Word 2007 (KB974631) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CA2F3DF8-C8AE-4933-92F1-FE482442F6E6}) (Version:  - Microsoft)
Update for Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{80E762AA-C921-4839-9D7D-DB62A72C0726}) (Version:  - Microsoft)
Update fr Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update fr Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update fr Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update fr Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VideoPad Videobearbeitungs-Software (HKLM-x32\...\VideoPad) (Version:  - NCH Software)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WavePad Audiobearbeitungs-Software (HKLM-x32\...\WavePad) (Version:  - NCH Software)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.00.3005 - Acer Incorporated)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
WinRAR 4.01 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
YGOPro DevPro Version 1.9.8 r9 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.8 r9 - YGOPro DevPro Online)
Zulu DJ-Software (HKLM-x32\...\Zulu) (Version:  - NCH Software)

==================== Restore Points  =========================

23-04-2014 14:26:20 Installed Java 7 Update 55
30-04-2014 19:10:24 Windows Update
02-05-2014 20:51:36 Windows Update
14-05-2014 09:16:33 Windows Update
22-05-2014 15:59:13 ComboFix created restore point
23-05-2014 15:52:18 zoek.exe restore point
24-05-2014 17:52:32 DirectX wurde installiert

==================== Hosts content: ==========================

2009-07-14 04:34 - 2014-05-22 19:46 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {07EE24B1-5C8C-4D23-AFDE-DF38C402164F} - System32\Tasks\{F41867D0-906D-47F3-9505-7D4A4C5295B4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {08ED0173-7023-4ECE-B904-9F4BF9C9BD15} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {0EEBBE99-C529-4B15-AD3E-6A6670ACC7A8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006Core => C:\Users\Dustin2\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-27] (Google Inc.)
Task: {170BD267-5E3C-44DC-97EA-CE5527D9C7C4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-25] (Google Inc.)
Task: {1C0D0C07-9A30-4E36-9DC6-13937CCA1B57} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000UA => C:\Users\Dustin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-30] (Google Inc.)
Task: {23BC9A63-F735-4E6C-A010-AD669726BD1E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {28F38A2A-17F8-41F4-985B-3EE38E446F28} - System32\Tasks\{E1B1C975-FB3D-4BD7-A326-77A88CEB6252} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {2EAF805E-1793-431B-A79B-BE8A74BC0E4C} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe [2013-05-07] ()
Task: {3154DB27-569A-49FE-9351-C27A412898BE} - System32\Tasks\{91369C71-A5B5-4B7A-9C84-3F550E43D1F4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {39A7D493-7EC7-499D-9BFF-6C0706FE7FE9} - System32\Tasks\{4BC2CDCB-DFC3-4776-B2C5-D884E3846FA4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {482BC811-BBFA-436A-A608-3EC6BB0EC1E2} - System32\Tasks\{619D66F0-BDFA-4102-86C6-B3771BD17950} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {55813747-4151-45A6-BF9D-3B38A85AA89E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {64C957D3-B0C5-4E39-9D64-B09A8C470F12} - System32\Tasks\{8AE5858A-D627-4EEC-850C-7EF95FCC4F35} => Chrome.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/abandoninstall?page=tsProgressBar
Task: {651A3C3F-1DA5-4B3B-9E99-313F6B0D0691} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2972218083-3551369242-1309756512-1006
Task: {67A527CA-D1D9-43A4-9DAB-23A8FA47BA26} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2009-07-09] (Acer)
Task: {67E811AB-A056-48F3-9127-B33B21C161F8} - System32\Tasks\{A9E31417-2142-4F9A-BB85-1B6D6B2C0DE2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {708F4270-0C36-4543-8804-6EAC46214BE3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-25] (Google Inc.)
Task: {73A6CF2B-7BF5-4A55-B2FB-EE45F6A64B04} - System32\Tasks\{D535A955-DC6F-4D2A-8001-AA62A4B42718} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {7E75CFEE-9B68-4136-8CCA-9CB910ACDD31} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000Core => C:\Users\Dustin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-30] (Google Inc.)
Task: {7E9BFD60-05E8-44CA-9032-B0F403C6679B} - System32\Tasks\{F5D96F90-CCE0-4A37-8779-F6D750790D81} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {8BF882A3-1078-4F6A-8703-D0E77ACC571A} - System32\Tasks\{CBEE636B-6390-41FD-B7C1-2A29B523F030} => C:\Program Files (x86)\MAESTIA\Maestia.exe
Task: {975C2F73-A19E-4570-A161-7916C54AAFD9} - System32\Tasks\{B53B4F90-035C-40A9-8D24-EDB78FE441D3} => C:\Program Files (x86)\MAESTIA\Maestia.exe
Task: {A76477DC-EFBF-4CAC-A5D6-D9E734A09BB8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006UA => C:\Users\Dustin2\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-27] (Google Inc.)
Task: {AD72E41E-DBC3-4135-A6A0-8EBC77E49062} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {DDC7CB5D-3F94-408D-86F5-2597208AF063} - System32\Tasks\{1921F2C4-E2C3-4A78-A8D1-2CD38AE039AF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {DEE0E07F-633F-42D1-8303-E18BD89B0963} - System32\Tasks\{EAFB9936-9EC5-4723-8A2B-163FADD36ECE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {DFCB70E5-82DF-488F-A26D-B7DB16DC115A} - System32\Tasks\{C20B8553-DDFC-459A-8062-4C0729B2B688} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {E0FD416F-4B08-412D-BE65-91F0EB8576C8} - System32\Tasks\{41FD7B73-1435-48BB-A42A-4B1D03C2FF7A} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: {E104C726-04CF-4CA9-BA85-BE429D107195} - System32\Tasks\{3E112CA3-F4C0-4677-B300-CC06D5A818EC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {E435CE5A-7424-4D7B-9AF6-651C169D2049} - System32\Tasks\{4AF42F1C-379B-4311-81D9-9F6A5A82B81D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {ECFEB674-8834-41F0-8EA1-3FD06219E6E5} - System32\Tasks\{7DEAE150-C539-4E10-BC04-2046364152A1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsInstall&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {ED4F7DF8-5970-476D-A533-8D5FC35F7464} - System32\Tasks\{24C2E171-0F75-46BC-814E-B1D8C946B448} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {ED87B43F-B4DB-44D7-B128-0E43B5943246} - System32\Tasks\{973A8573-3253-46A9-B038-D0309DBD7210} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {FEC8B849-9820-4215-94A4-EAEE8B6921ED} - System32\Tasks\Norton Security Scan for Dustin => C:\Program Files (x86)\Norton Security Scan\Engine\3.5.1.8\Nss.exe [2011-08-05] (Symantec Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000Core.job => C:\Users\Dustin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000UA.job => C:\Users\Dustin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006Core.job => C:\Users\Dustin2\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006UA.job => C:\Users\Dustin2\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Norton Security Scan for Dustin.job => C:\PROGRA~2\NORTON~2\Engine\351~1.8\Nss.exe

==================== Loaded Modules (whitelisted) =============

2013-07-22 20:41 - 2013-07-22 20:41 - 00075504 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll
2013-07-22 20:41 - 2013-07-22 20:41 - 00088304 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-04-18 12:10 - 2013-04-18 12:10 - 01731072 _____ () C:\Program Files (x86)\pc essentials\updater.exe
2009-11-04 14:16 - 2008-07-29 20:29 - 00200704 _____ () C:\Windows\PLFSetI.exe
2009-07-29 14:10 - 2009-07-29 14:10 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2009-11-04 14:15 - 2009-11-04 14:15 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-02-03 02:33 - 2009-02-03 02:33 - 00460199 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2008-09-29 02:55 - 2008-09-29 02:55 - 01076224 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2012-07-05 20:17 - 2005-07-20 12:34 - 00700497 ____N () C:\Program Files (x86)\T-Online\T-Online_Software_6\Notifier\libcurl.dll
2012-07-05 20:17 - 2004-04-16 15:45 - 00143360 ____N () C:\Program Files (x86)\T-Online\T-Online_Software_6\Notifier\libexpat.dll
2014-03-28 11:35 - 2014-03-28 11:35 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2013-07-22 19:49 - 2013-07-22 19:49 - 00065264 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub32.dll
2014-05-22 20:17 - 2014-05-14 01:40 - 00716616 _____ () C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
2014-05-22 20:17 - 2014-05-14 01:40 - 00126280 _____ () C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\35.0.1916.114\libegl.dll
2014-05-22 20:17 - 2014-05-14 01:40 - 04217672 _____ () C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-05-22 20:17 - 2014-05-14 01:40 - 00414536 _____ () C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-05-22 20:17 - 2014-05-14 01:40 - 01732424 _____ () C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll
2014-05-22 20:17 - 2014-05-14 01:40 - 13695816 _____ () C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^simplicheck.lnk => C:\Windows\pss\simplicheck.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Dustin2^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Meine Dienste.lnk => C:\Windows\pss\Meine Dienste.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Dustin2^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Netzmanager.lnk => C:\Windows\pss\Netzmanager.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: KPeerNexonEU => C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
MSCONFIG\startupreg: PlayMovie => "C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent

==================== Faulty Device Manager Devices =============

Name: Photosmart Wireless B109n-z
Description: Photosmart Wireless B109n-z
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Photosmart Wireless B109n-z
Description: Photosmart Wireless B109n-z
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/25/2014 00:52:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: updater.exe, Version: 0.0.0.0, Zeitstempel: 0x516fb867
Name des fehlerhaften Moduls: netprofm.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4a5bda75
Ausnahmecode: 0xc0000005
Fehleroffset: 0x6acc2505
ID des fehlerhaften Prozesses: 0x954
Startzeit der fehlerhaften Anwendung: 0xupdater.exe0
Pfad der fehlerhaften Anwendung: updater.exe1
Pfad des fehlerhaften Moduls: updater.exe2
Berichtskennung: updater.exe3

Error: (05/23/2014 06:58:22 PM) (Source: Steam Client Service) (EventID: 1) (User: )
Description: Error: Failed to poke open firewall


System errors:
=============
Error: (05/26/2014 02:28:28 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (05/26/2014 02:26:19 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrckmeldung von Dienst ShellHWDetection erreicht.

Error: (05/26/2014 02:22:32 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 25.116.3.128192.168.137.0255.255.255.0

Error: (05/26/2014 02:22:21 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (05/26/2014 02:21:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "XAMPP Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (05/26/2014 02:21:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Netzmanager Infrastruktur Informationssystem Dienst erreicht.

Error: (05/25/2014 08:43:23 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 25.116.3.128192.168.137.0255.255.255.0

Error: (05/25/2014 02:15:17 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 25.116.3.128192.168.137.0255.255.255.0

Error: (05/25/2014 02:13:02 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (05/25/2014 02:12:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "XAMPP Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-05-22 19:23:01.497
  Description: Windows konnte die Abbildintegritt der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht berprfen, weil der Dateihash nicht im System gefunden wurde. Mglicherweise wurde durch eine krzlich durchgefhrte Hardware- oder Softwarenderung eine falsch signierte oder beschdigte Datei oder eine Datei, bei der es sich um schdliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-22 19:23:01.295
  Description: Windows konnte die Abbildintegritt der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht berprfen, weil der Dateihash nicht im System gefunden wurde. Mglicherweise wurde durch eine krzlich durchgefhrte Hardware- oder Softwarenderung eine falsch signierte oder beschdigte Datei oder eine Datei, bei der es sich um schdliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 52%
Total physical RAM: 4090.93 MB
Available physical RAM: 1946.1 MB
Total Pagefile: 8180.03 MB
Available Pagefile: 4802.96 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:583.38 GB) (Free:360.29 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 596 GB) (Disk ID: 9BBB9BBB)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=583 GB) - (Type=07 NTFS)

==================== End Of Log ============================

M-K-D-B 26.05.2014 17:03
Servus,


hhmm... alles sehr komisch... wir versuchen mal folgendes:

1. Fix mit ComboFix durchfhren
2. AdwCleaner (neue Version 3.211) ausfhren
3. FRST-Suchlauf als Kontrolle durchfhren

ganz wichtig:
Kein Browser ffnen, die Tools ber einen anderen Rechner per USB-Stick auf den Desktop abspeichern und von dort starten!



Schritt 1
Combofix-Skript
WARNUNG fr die MITLESER:
Folgendes ComboFix Skript ist ausschlielich fr diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schdigen!

  • Lsche die vorhandene Combofix.exe von deinem Desktop und lade das Programm von folgenden Download-Spiegel neu herunter: Link
  • Speichere es erneut auf dem Desktop (nicht woanders hin, das ist wichtig)!
  • Drcke die Windows + R Taste --> notepad (hinein schreiben) --> OK
  • Kopiere nun den Text aus der folgenden Codebox komplett in das leere Textdokument.

    Code:
    http://www.trojaner-board.de/154224-chrome-extension-grepo-laesst-verjagen-kommt-immer.html#post1304241

    KillAll::

    Collect::
    C:\Program Files (x86)\Grepo\grepo_x64.dll

    Folder::
    C:\Program Files (x86)\Grepo
    C:\Users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\grepo@extension
  • Speichere dies als CFScript.txt auf deinem Desktop.
  • Wichtig: Stelle deine Anti Viren Software temporr ab. Dies kann ComboFix nmlich bei der Arbeit behindern.
    Danach wieder anstellen nicht vergessen!
  • Schliee alle laufenden Programme damit ComboFix ungehindert arbeiten kann.
  • Ziehe CFScript.txt in die ComboFix.exe wie in diesem Bild:
  • Mache nichts am Computer, bewege nicht die Maus ber das ComboFix-Fenster oder klicke in dieses hinein. Dies kann dazu fhren, dass ComboFix sich aufhngt.
  • Wenn ComboFix fertig ist wird es ein Log erstellen: C:\ComboFix.txt
    Bitte fge es hier als Antwort (in CODE-Tags mit dem #-Button des Editors) ein.

Hinweis:
Suspect:: und Collect::
Falls im Skript diese Anweisungen enthalten sind, sollen Dateien zur Analyse eingeschickt werden. Es erscheint eine Message-Box, nachdem Combofix fertig ist. Klicke OK und folge den Aufforderungen/Anweisungen, um die Dateien hochzuladen. Teile mir unbedingt mit, ob der Upload geklappt hat!







Schritt 2
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schliee alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewhlt sind:
    • "Tracing" Schlssel lschen
    • Winsock Einstellungen zurcksetzen
    • Proxy Einstellungen zurcksetzen
    • Internet Explorer Richtlinien zurcksetzen
    • Chrome Richtlinien zurcksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewhlt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Lschen und besttige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart ffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nchsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).






Schritt 3
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drcke auf Scan.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nchsten Antwort.





Bitte poste mit deiner nchsten Antwort
  • die Logdatei von ComboFix,
  • die Logdatei von AdwCleaner,
  • die beiden Logdateien von FRST.

Cupa 27.05.2014 13:19
Zitat:
Zitat von M-K-D-B (Beitrag 1306139)
ganz wichtig:
Kein Browser ffnen, die Tools ber einen anderen Rechner per USB-Stick auf den Desktop abspeichern und von dort starten![/B]
Hab keinen 2. PC....
brigends: Die Erweiterung ist jetzt nicht wieder gekommen o.o Ist aber wahrscheinlich nur eine Frage der Zeit :-/

Zitat:
Zitat von Cupa (Beitrag 1306494)
Ist aber wahrscheinlich nur eine Frage der Zeit :-/
Ist wieder da.

M-K-D-B 27.05.2014 15:36
Hast du auch meine Schritte ausgefhrt? Wenn ja, wo sind die Logdateien?


Loggst du dich bei Google Chrome in deinen Acccount oder hnliches ein? Gut mglich, dass du dich dadurch immer wieder infizierst....

Cupa 28.05.2014 17:37
Okay wegen diesem Regiestrierungsschlsselfehler musste ich die Datei ber die Manuelle Datei hochladen. Hoffentlich ist das nicht schlimm '.' Hat Combofix brigends so gesagt.

Combofix Logfile:
Code:
ComboFix 14-05-27.02 - Dustin2 28.05.2014  17:11:29.2.2 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.4091.2795 [GMT 2:00]
ausgefhrt von:: c:\users\Dustin2\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: c:\users\Dustin2\Desktop\CFScript.txt
AV: McAfee  Anti-Virus und Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
FW: McAfee  Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
SP: McAfee  Anti-Virus und Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Im Speicher befindliches AV aktiv.
.
.
.
.
((((((((((((((((((((((((((((((((((((  Weitere Lschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Grepo
c:\program files (x86)\Grepo\1100.exe
c:\program files (x86)\Grepo\grepo.dll
c:\program files (x86)\Grepo\grepo_x64.dll
c:\users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\grepo@extension
c:\users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\grepo@extension\chrome.manifest
c:\users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\grepo@extension\content\browserOverlay.xul
c:\users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\grepo@extension\content\common.js
c:\users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\grepo@extension\install.rdf
c:\users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\grepo@extension\local\jquery.min.js
.
.
(((((((((((((((((((((((  Dateien erstellt von 2014-04-28 bis 2014-05-28  ))))))))))))))))))))))))))))))
.
.
2014-05-28 15:37 . 2014-05-28 15:37        --------        d-----w-        c:\users\Uwe\AppData\Local\temp
2014-05-28 15:37 . 2014-05-28 15:37        --------        d-----w-        c:\users\Dustin\AppData\Local\temp
2014-05-28 15:37 . 2014-05-28 15:37        --------        d-----w-        c:\users\Default\AppData\Local\temp
2014-05-23 16:23 . 2014-05-23 15:33        24064        ----a-w-        c:\windows\zoek-delete.exe
2014-05-23 16:23 . 2014-05-28 15:44        --------        d-----w-        c:\users\Dustin2\AppData\Local\Temp
2014-05-23 13:26 . 2014-05-23 16:17        --------        d-----w-        C:\zoek_backup
2014-05-14 09:33 . 2014-05-06 04:40        23544320        ----a-w-        c:\windows\system32\mshtml.dll
2014-05-14 09:33 . 2014-05-06 03:00        84992        ----a-w-        c:\windows\system32\mshtmled.dll
2014-05-14 09:32 . 2014-05-06 04:17        2724864        ----a-w-        c:\windows\system32\mshtml.tlb
2014-05-14 09:32 . 2014-05-06 03:07        2724864        ----a-w-        c:\windows\SysWow64\mshtml.tlb
2014-05-14 08:32 . 2014-03-25 02:43        14175744        ----a-w-        c:\windows\system32\shell32.dll
2014-05-14 08:32 . 2014-05-09 06:14        477184        ----a-w-        c:\windows\system32\aepdu.dll
2014-05-14 08:32 . 2014-05-09 06:11        424448        ----a-w-        c:\windows\system32\aeinv.dll
2014-05-03 21:55 . 2014-05-03 21:55        --------        d-----w-        c:\program files (x86)\BigMacroTool
2014-05-03 21:52 . 2014-05-03 21:52        --------        d-----w-        c:\program files (x86)\MacroRecorder
2014-04-30 19:16 . 2014-05-14 13:40        --------        d-s---w-        c:\windows\system32\CompatTel
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-05-14 16:27 . 2012-07-06 02:24        692400        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2014-05-14 16:27 . 2011-06-16 14:54        70832        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-05-14 09:23 . 2010-05-02 20:09        93223848        ----a-w-        c:\windows\system32\MRT.exe
2014-04-14 18:13 . 2014-04-23 14:34        96168        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-03-31 20:46 . 2014-03-31 20:46        130712        ----a-w-        c:\windows\SysWow64\MSSTDFMT.DLL
2014-03-31 20:46 . 2014-03-31 20:46        1070232        ----a-w-        c:\windows\SysWow64\MSCOMCTL.OCX
2014-03-06 09:31 . 2014-04-13 10:40        4096        ----a-w-        c:\windows\system32\ieetwcollectorres.dll
2014-03-06 08:59 . 2014-04-13 10:40        66048        ----a-w-        c:\windows\system32\iesetup.dll
2014-03-06 08:57 . 2014-04-13 10:41        548352        ----a-w-        c:\windows\system32\vbscript.dll
2014-03-06 08:57 . 2014-04-13 10:40        48640        ----a-w-        c:\windows\system32\ieetwproxystub.dll
2014-03-06 08:53 . 2014-04-13 10:40        2767360        ----a-w-        c:\windows\system32\iertutil.dll
2014-03-06 08:40 . 2014-04-13 10:40        51200        ----a-w-        c:\windows\system32\jsproxy.dll
2014-03-06 08:39 . 2014-04-13 10:40        33792        ----a-w-        c:\windows\system32\iernonce.dll
2014-03-06 08:32 . 2014-04-13 10:41        574976        ----a-w-        c:\windows\system32\ieui.dll
2014-03-06 08:29 . 2014-04-13 10:40        139264        ----a-w-        c:\windows\system32\ieUnatt.exe
2014-03-06 08:29 . 2014-04-13 10:40        111616        ----a-w-        c:\windows\system32\ieetwcollector.exe
2014-03-06 08:28 . 2014-04-13 10:40        752640        ----a-w-        c:\windows\system32\jscript9diag.dll
2014-03-06 08:15 . 2014-04-13 10:40        940032        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe
2014-03-06 08:11 . 2014-04-13 10:40        5784064        ----a-w-        c:\windows\system32\jscript9.dll
2014-03-06 08:09 . 2014-04-13 10:40        453120        ----a-w-        c:\windows\system32\dxtmsft.dll
2014-03-06 08:03 . 2014-04-13 10:40        586240        ----a-w-        c:\windows\system32\ie4uinit.exe
2014-03-06 08:02 . 2014-04-13 10:40        61952        ----a-w-        c:\windows\SysWow64\iesetup.dll
2014-03-06 08:02 . 2014-04-13 10:41        455168        ----a-w-        c:\windows\SysWow64\vbscript.dll
2014-03-06 08:01 . 2014-04-13 10:40        51200        ----a-w-        c:\windows\SysWow64\ieetwproxystub.dll
2014-03-06 07:56 . 2014-04-13 10:40        38400        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll
2014-03-06 07:48 . 2014-04-13 10:40        195584        ----a-w-        c:\windows\system32\msrating.dll
2014-03-06 07:46 . 2014-04-13 10:40        4254720        ----a-w-        c:\windows\SysWow64\jscript9.dll
2014-03-06 07:42 . 2014-04-13 10:40        296960        ----a-w-        c:\windows\system32\dxtrans.dll
2014-03-06 07:38 . 2014-04-13 10:40        112128        ----a-w-        c:\windows\SysWow64\ieUnatt.exe
2014-03-06 07:36 . 2014-04-13 10:40        592896        ----a-w-        c:\windows\SysWow64\jscript9diag.dll
2014-03-06 07:21 . 2014-04-13 10:40        628736        ----a-w-        c:\windows\system32\msfeeds.dll
2014-03-06 07:13 . 2014-04-13 10:40        32256        ----a-w-        c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-03-06 07:11 . 2014-04-13 10:40        2043904        ----a-w-        c:\windows\system32\inetcpl.cpl
2014-03-06 06:53 . 2014-04-13 10:40        13551104        ----a-w-        c:\windows\system32\ieframe.dll
2014-03-06 06:40 . 2014-04-13 10:40        1967104        ----a-w-        c:\windows\SysWow64\inetcpl.cpl
2014-03-06 06:22 . 2014-04-13 10:40        2260480        ----a-w-        c:\windows\system32\wininet.dll
2014-03-06 05:58 . 2014-04-13 10:40        1400832        ----a-w-        c:\windows\system32\urlmon.dll
2014-03-06 05:50 . 2014-04-13 10:40        846336        ----a-w-        c:\windows\system32\ieapfltr.dll
2014-03-06 05:41 . 2014-04-13 10:40        1789440        ----a-w-        c:\windows\SysWow64\wininet.dll
2014-03-04 09:44 . 2014-04-09 15:25        362496        ----a-w-        c:\windows\system32\wow64win.dll
2014-03-04 09:44 . 2014-04-09 15:25        243712        ----a-w-        c:\windows\system32\wow64.dll
2014-03-04 09:44 . 2014-04-09 15:25        13312        ----a-w-        c:\windows\system32\wow64cpu.dll
2014-03-04 09:44 . 2014-04-09 15:25        16384        ----a-w-        c:\windows\system32\ntvdm64.dll
2014-03-04 09:44 . 2014-04-09 15:25        1163264        ----a-w-        c:\windows\system32\kernel32.dll
2014-03-04 09:17 . 2014-04-09 15:25        14336        ----a-w-        c:\windows\SysWow64\ntvdm64.dll
2014-03-04 09:17 . 2014-04-09 15:25        44032        ----a-w-        c:\windows\apppatch\acwow64.dll
2014-03-04 09:16 . 2014-04-09 15:25        25600        ----a-w-        c:\windows\SysWow64\setup16.exe
2014-03-04 09:16 . 2014-04-09 15:25        5120        ----a-w-        c:\windows\SysWow64\wow32.dll
2014-03-04 08:09 . 2014-04-09 15:25        7680        ----a-w-        c:\windows\SysWow64\instnm.exe
2014-03-04 08:09 . 2014-04-09 15:25        2048        ----a-w-        c:\windows\SysWow64\user.exe
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Eintrge & legitime Standardeintrge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{28A984B0-844D-48EC-AE42-6682BBB4FD33}]
c:\program files (x86)\Grepo\grepo.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        64792        ----a-w-        c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        64792        ----a-w-        c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        64792        ----a-w-        c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        64792        ----a-w-        c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        64792        ----a-w-        c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        64792        ----a-w-        c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        64792        ----a-w-        c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        64792        ----a-w-        c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        64792        ----a-w-        c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-08-07 09:18        120104        ----a-w-        c:\program files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"="c:\users\Dustin2\AppData\Local\Akamai\netsession_win.exe" [2013-06-04 4489472]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-08-21 261888]
"EgisTecLiveUpdate"="c:\program files (x86)\EgisTec Egis Software Update\EgisUpdate.exe" [2009-08-04 199464]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-02 98304]
"VitaKeyPdtWzd"="c:\program files (x86)\Acer Bio Protection\PdtWzd.exe" [2009-08-06 3567104]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-08-27 1194504]
"ArcadeDeluxeAgent"="c:\program files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-10-06 419112]
"MDS_Menu"="c:\program files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2012-03-21 1675160]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.8.141\SSScheduler.exe [2014-1-16 329944]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Meine Dienste.lnk - c:\program files\Telekom\Meine Dienste\StartMeineDienste.exe Autostart [2012-7-5 269944]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux7"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 XAMPP;XAMPP Service;c:\users\Dustin\Desktop\xampp\service.exe;c:\users\Dustin\Desktop\xampp\service.exe [x]
R3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe [x]
R3 Browser7Maintenance;Browser 7 Maintenance Service;c:\program files (x86)\Browser 7 Maintenance Service\maintenanceservice.exe;c:\program files (x86)\Browser 7 Maintenance Service\maintenanceservice.exe [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.141\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.141\McCHSvc.exe [x]
R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys;c:\windows\SYSNATIVE\drivers\mferkdet.sys [x]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [x]
R3 OverwolfUpdaterService;Overwolf Updater Service;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys;c:\windows\SYSNATIVE\DRIVERS\Rts516xIR.sys [x]
R3 TelekomNM6;Telekom Netzmanager Packet Filter Driver;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [x]
R3 TriDefService;TriDef Service;c:\program files (x86)\TriDef 3D\TriDef\Common\TriDefService.exe;c:\program files (x86)\TriDef 3D\TriDef\Common\TriDefService.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys;c:\windows\SYSNATIVE\DRIVERS\mfenlfk.sys [x]
S1 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys;c:\windows\SYSNATIVE\drivers\mfewfpk.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 ATService;AuthenTec Fingerprint Service;c:\program files (x86)\Fingerprint Sensor\AtService.exe;c:\program files (x86)\Fingerprint Sensor\AtService.exe [x]
S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x]
S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe;c:\program files (x86)\Acer\Registration\GregHSRW.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 IGBASVC;EgisTec Service;c:\program files (x86)\Acer Bio Protection\BASVC.exe;c:\program files (x86)\Acer Bio Protection\BASVC.exe [x]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files (x86)\McAfee\SiteAdvisor\McSACore.exe;c:\program files (x86)\McAfee\SiteAdvisor\McSACore.exe [x]
S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [x]
S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [x]
S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [x]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe;c:\windows\SYSNATIVE\mfevtps.exe [x]
S2 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [x]
S2 Netzmanager Service;Netzmanager Infrastruktur Informationssystem Dienst;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe ;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe  [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [x]
S2 pc essentials;pc essentials;c:\program files (x86)\pc essentials\updater.exe;c:\program files (x86)\pc essentials\updater.exe [x]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver;c:\windows\system32\Drivers\ATSwpWDF.sys;c:\windows\SYSNATIVE\Drivers\ATSwpWDF.sys [x]
S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys;c:\windows\SYSNATIVE\drivers\cfwids.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys;c:\windows\SYSNATIVE\drivers\mfefirek.sys [x]
S3 NETw5s64;Intel(R) Wireless WiFi Link Adaptertreiber fr Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETw5s64.sys;c:\windows\SYSNATIVE\DRIVERS\NETw5s64.sys [x]
S3 stdriver;SoundTap Filter Driver v6.05.00;c:\windows\system32\DRIVERS\stdriverx64.sys;c:\windows\SYSNATIVE\DRIVERS\stdriverx64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - mfeavfk01
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt        REG_MULTI_SZ          hpqcxs08 hpqddsvc
.
Inhalt des "geplante Tasks" Ordners
.
2014-05-28 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-06 16:27]
.
2014-05-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-25 11:50]
.
2014-05-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-25 11:50]
.
2014-05-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000Core.job
- c:\users\Dustin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-30 14:50]
.
2014-05-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000UA.job
- c:\users\Dustin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-30 14:50]
.
2014-05-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006Core.job
- c:\users\Dustin2\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-27 11:13]
.
2014-05-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006UA.job
- c:\users\Dustin2\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-27 11:13]
.
2014-04-24 c:\windows\Tasks\Norton Security Scan for Dustin.job
- c:\progra~2\NORTON~2\Engine\351~1.8\Nss.exe [2011-11-06 13:59]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{28A984B0-844D-48EC-AE42-6682BBB4FD33}]
c:\program files (x86)\Grepo\grepo_x64.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        75544        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        75544        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        75544        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        75544        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        75544        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        75544        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        75544        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        75544        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2011-06-13 08:20        75544        ----a-w-        c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-08-07 09:19        137512        ----a-w-        c:\program files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"mwlDaemon"="c:\program files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe" [2009-08-07 349480]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-08-06 8060960]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2009-05-22 295936]
"PLFSetI"="c:\windows\PLFSetI.exe" [2008-07-29 200704]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2009-08-05 828960]
.
------- Zustzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
mSearchAssistant =
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: aeriagames.com
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab
FF - ProfilePath - c:\users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?btnG=Google+Search&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?btnG=Google+Search&q=
.
- - - - Entfernte verwaiste Registrierungseintrge - - - -
.
Toolbar-Locked - (no file)
Toolbar-10 - (no file)
AddRemove-Adobe Acrobat 5.0 - c:\windows\ISUN0407.EXE
AddRemove-Browser7MaintenanceService - c:\program files (x86)\Browser 7 Maintenance Service\uninstall.exe
AddRemove-Covert Operations - c:\windows\IsUn0407.exe
AddRemove-Gizmodock - c:\program files (x86)\Gizmodock\uninst000.exe
AddRemove-Grepo - c:\program files (x86)\Grepo\1100.exe
AddRemove-MixPad - c:\program files (x86)\NCH Software\MixPad\uninst.exe
AddRemove-Pagealicious - c:\program files (x86)\Pagealicious\uninst000.exe
AddRemove-PhotoStage - c:\program files (x86)\NCH Software\PhotoStage\photostage.exe
AddRemove-S4Uninst - c:\windows\IsUn0407.exe
AddRemove-SoundTap - c:\program files (x86)\NCH Software\SoundTap\soundtap.exe
AddRemove-Switch - c:\program files (x86)\NCH Software\Switch\switch.exe
AddRemove-VideoPad - c:\program files (x86)\NCH Software\VideoPad\uninst.exe
AddRemove-WavePad - c:\program files (x86)\NCH Software\WavePad\wavepad.exe
AddRemove-Zulu - c:\program files (x86)\NCH Software\Zulu\uninst.exe
AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}\bm_installer.exe
AddRemove-{8C3727F2-8E37-49E4-820C-03B1677F53B6} - c:\program files (x86)\InstallShield Installation Information\{8C3727F2-8E37-49E4-820C-03B1677F53B6}\setup.exe
AddRemove-{C31556D7-F2B9-4787-B223-F7A035067E89}_is1 - c:\program files (x86)\Dragon's Prophet\unins000.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.13"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
  00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Acer Bio Protection\CompPtcVUI.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\windows\SysWOW64\rundll32.exe
c:\program files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-05-28  17:54:14 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-05-28 15:54
ComboFix2.txt  2014-05-22 17:58
.
Vor Suchlauf: 41 Verzeichnis(se), 386.606.891.008 Bytes frei
Nach Suchlauf: 42 Verzeichnis(se), 386.161.680.384 Bytes frei
.
- - End Of File - - D284C135FD08D0B30924645EFE09211F
--- --- ---
5C616939100B85E558DA92B899A0FC36

[/CODE]

Upload hat so brigends geklappt. (Sah jedenfalls so aus)

AdwCleaner Logfile:
Code:
# AdwCleaner v3.211 - Bericht erstellt am 28/05/2014 um 18:21:41
# Aktualisiert 26/05/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Dustin2 - DUSTINS-PC
# Gestartet von : C:\Users\Dustin2\Desktop\adwcleaner_3.211.exe
# Option : Lschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlssel Gelscht : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASAPI32
Schlssel Gelscht : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASMANCS
Schlssel Gelscht : HKLM\SOFTWARE\Classes\CLSID\{28A984B0-844D-48EC-AE42-6682BBB4FD33}
Schlssel Gelscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{28A984B0-844D-48EC-AE42-6682BBB4FD33}
Schlssel Gelscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{28A984B0-844D-48EC-AE42-6682BBB4FD33}
Schlssel Gelscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{28A984B0-844D-48EC-AE42-6682BBB4FD33}
Schlssel Gelscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{28A984B0-844D-48EC-AE42-6682BBB4FD33}
Schlssel Gelscht : HKCU\Software\AppDataLow\Software
Schlssel Gelscht : HKLM\Software\Classes\Installer\Features\7324911AA745D164DB449BB751477AAD
Schlssel Gelscht : HKLM\Software\Classes\Installer\Features\B0FD4B799947F554FAAB7FF0466D8DA6

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v22.0 (de)

[ Datei : C:\Users\Dustin\AppData\Roaming\Mozilla\Firefox\Profiles\qoq6pkmw.default\prefs.js ]


[ Datei : C:\Users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\prefs.js ]


[ Datei : C:\Users\Uwe\AppData\Roaming\Mozilla\Firefox\Profiles\k01fu59j.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [96615 octets] - [06/03/2014 18:04:07]
AdwCleaner[R1].txt - [2922 octets] - [22/05/2014 20:52:19]
AdwCleaner[R2].txt - [2353 octets] - [28/05/2014 18:19:07]
AdwCleaner[S0].txt - [93684 octets] - [06/03/2014 18:07:22]
AdwCleaner[S1].txt - [2983 octets] - [22/05/2014 21:11:02]
AdwCleaner[S2].txt - [2266 octets] - [28/05/2014 18:21:41]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [2326 octets] ##########
--- --- ---


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02
Ran by Dustin2 (administrator) on DUSTINS-PC on 28-05-2014 18:31:49
Running from C:\Users\Dustin2\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AuthenTec, Inc.) C:\Program Files (x86)\Fingerprint Sensor\AtService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\CompPtcVUI.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\BASVC.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
() C:\Program Files (x86)\pc essentials\updater.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
() C:\Windows\PLFSetI.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Akamai Technologies, Inc.) C:\Users\Dustin2\AppData\Local\Akamai\netsession_win.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Hidfind.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe
(Akamai Technologies, Inc.) C:\Users\Dustin2\AppData\Local\Akamai\netsession_win.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(McAfee, Inc.) C:\Program Files\McAfee.com\Agent\mcagent.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Core\mchost.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-08-07] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-06] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [295936 2009-05-22] (Alps Electric Co., Ltd.)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2008-07-29] ()
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [828960 2009-08-05] (Acer Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-08-21] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [EgisTecLiveUpdate] => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-04] (Egis Technology Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [VitaKeyPdtWzd] => c:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe [3567104 2009-08-06] (Egis Technology Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1194504 2009-08-27] (Dritek System Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [419112 2009-10-06] (CyberLink Corp.)
HKLM-x32\...\Run: [MDS_Menu] => C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [1675160 2012-03-21] (McAfee, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-2972218083-3551369242-1309756512-1006\...\Run: [Akamai NetSession Interface] => C:\Users\Dustin2\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Dustin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Dustin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk
ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (No File)
Startup: C:\Users\Dustin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NH ()
Startup: C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {07E4E221-A889-475B-BD66-105D1FF7AAD3} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wiki-tab_internet_std&q={searchTerms}&br=ie10-toi
SearchScopes: HKCU - {2E6179AB-203B-4FF5-AC4E-86534ED8A805} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie10-toi
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {70E2AB1D-B10F-4174-BE89-034529C41867} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=interactivemesuche-21&index=blended&linkCode=ur2&camp=1638&creative=6742
SearchScopes: HKCU - ŸZ’2pvI*X(Ž2s(Jӵ v˰!—(48иpatm6o^Mp`_iw˜!„†x8€j*;a[†8*~Rxœ8'-)x** URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120902183112.dll (McAfee, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120902183114.dll (McAfee, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll No File
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @bittorrent.com/BitTorrentDNA - C:\Program Files (x86)\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @live.heroesandgenerals.com/npretox - C:\Program Files (x86)\Heroes & Generals\live\npretoxlive.dll (Reto-Moto ApS)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\progra~2\mcafee\msc\npmcsn~1.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Dustin2\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Dustin2\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Dustin2\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: thehappycloud.com/HappyCloudPlugin - C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFp501.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFp522.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFv501.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-18]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-07-04]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-04-15]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2009-08-22]
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: McAfee ScriptScan for Firefox - C:\Program Files (x86)\Common Files\McAfee\SystemCore [2012-09-02]

Chrome:
=======
CHR HomePage: hxxp://www.youtube.com/
CHR StartupUrls: "hxxp://www.youtube.com/"
CHR Extension: (Google Translate) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2014-05-23]
CHR Extension: (Magic Actions for YouTube™) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2014-05-23]
CHR Extension: (SiteAdvisor) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2013-08-10]
CHR Extension: (AdBlock) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-05-23]
CHR Extension: (Chrome to Mobile) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd [2014-05-23]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2014-02-22]
CHR Extension: (Disconnect) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo [2014-05-23]
CHR Extension: (Google Play) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2014-05-23]
CHR Extension: (Turbo for YouTube) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhgnmngkgolhffjjdaipkkjbmbnpefef [2014-05-23]
CHR Extension: (Ghostery) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2014-05-23]
CHR Extension: (Google Wallet) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Currently) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojhmphdkpgbibohbnpbfiefkgieacjmh [2014-05-23]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-05-21]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]
CHR StartMenuInternet: Google Chrome - C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 ATService; C:\Program Files (x86)\Fingerprint Sensor\AtService.exe [1807608 2009-06-30] (AuthenTec, Inc.)
R2 IGBASVC; c:\Program Files (x86)\Acer Bio Protection\BASVC.exe [3449856 2009-08-06] (Egis Technology Inc.)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [140424 2014-04-23] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 McNASvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [502064 2012-08-23] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [199304 2012-05-25] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [210616 2012-05-25] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [162224 2012-05-25] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [311592 2009-08-07] (Egis Technology Inc.)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [99616 2014-03-05] (Overwolf LTD)
R2 pc essentials; C:\Program Files (x86)\pc essentials\updater.exe [1731072 2013-04-18] ()
S3 TriDefService; C:\Program Files (x86)\TriDef 3D\TriDef\Common\TriDefService.exe [1327104 2009-09-15] ()
S3 Browser7Maintenance; "C:\Program Files (x86)\Browser 7 Maintenance Service\maintenanceservice.exe" [X]
S2 XAMPP; C:\Users\Dustin\Desktop\xampp\service.exe [X]

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [65264 2012-02-22] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [160792 2012-02-22] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [229528 2012-02-22] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [487296 2012-02-22] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [647208 2012-02-22] (McAfee, Inc.)
R1 mfenlfk; C:\Windows\System32\DRIVERS\mfenlfk.sys [75936 2012-02-22] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [100912 2012-02-22] (McAfee, Inc.)
R1 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [289664 2012-02-22] (McAfee, Inc.)
R3 stdriver; C:\Windows\System32\DRIVERS\stdriverx64.sys [32536 2013-03-23] ()
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2010-01-21] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27648 2010-01-21] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33280 2010-01-21] (LG Electronics Inc.)
S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-28 18:20 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-28 18:18 - 2014-05-28 18:18 - 01327971 _____ () C:\Users\Dustin2\Downloads\adwcleaner_3.211.exe
2014-05-28 18:18 - 2014-05-28 18:18 - 01327971 _____ () C:\Users\Dustin2\Desktop\adwcleaner_3.211.exe
2014-05-28 17:54 - 2014-05-28 17:54 - 00036107 _____ () C:\ComboFix.txt
2014-05-28 17:11 - 2014-05-28 17:11 - 00001322 _____ () C:\CF-Submit.htm
2014-05-24 18:35 - 2014-05-24 18:35 - 00000222 _____ () C:\Users\Dustin2\Desktop\Starbound.url
2014-05-24 15:32 - 2014-05-24 15:52 - 00064382 _____ () C:\Users\Dustin2\Downloads\SystemLook.txt
2014-05-24 15:32 - 2014-05-24 15:32 - 00165376 _____ () C:\Users\Dustin2\Downloads\SystemLook_x64.exe
2014-05-23 22:33 - 2014-05-23 22:33 - 00000034 _____ () C:\Users\Dustin2\Downloads\winamp-dsl.m3u
2014-05-23 18:47 - 2014-05-26 17:23 - 00065840 _____ () C:\Users\Dustin2\Desktop\Addition.txt
2014-05-23 18:23 - 2014-05-23 17:33 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-05-23 18:22 - 2014-05-23 18:22 - 00000084 _____ () C:\folders.txt
2014-05-23 17:52 - 2014-05-23 18:31 - 00026273 _____ () C:\zoek-results.log
2014-05-23 15:26 - 2014-05-23 18:17 - 00000000 ____D () C:\zoek_backup
2014-05-23 15:26 - 2014-05-23 15:26 - 01285120 _____ () C:\Users\Dustin2\Downloads\zoek.exe
2014-05-23 14:51 - 2014-05-23 14:51 - 00000695 _____ () C:\Users\Dustin2\Desktop\JRT.txt
2014-05-23 14:37 - 2014-04-06 08:36 - 01016261 _____ (Thisisu) C:\Users\Dustin2\Desktop\JRT_NEW.exe
2014-05-22 20:51 - 2014-05-22 20:51 - 01326389 _____ () C:\Users\Dustin2\Downloads\adwcleaner_3.210.exe
2014-05-22 17:58 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-22 17:58 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-22 17:58 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-22 17:48 - 2014-05-28 18:04 - 00000000 ____D () C:\Qoobox
2014-05-22 17:46 - 2014-05-22 19:55 - 00000000 ____D () C:\Windows\erdnt
2014-05-22 17:34 - 2014-05-28 17:03 - 05203612 ____R (Swearware) C:\Users\Dustin2\Desktop\ComboFix.exe
2014-05-22 17:34 - 2014-05-22 17:34 - 05200426 _____ (Swearware) C:\Users\Dustin2\Downloads\ComboFix.exe
2014-05-22 17:00 - 2014-05-22 17:00 - 00000031 _____ () C:\Users\Dustin2\Downloads\tune_in_dsl.m3u
2014-05-15 16:42 - 2014-05-16 17:20 - 00000000 ____D () C:\Users\Dustin2\Documents\RPGVXAce
2014-05-15 15:22 - 2014-05-15 15:22 - 00001188 _____ () C:\Users\Public\Desktop\RPG MAKER VX Ace Lite.lnk
2014-05-15 15:22 - 2014-05-15 15:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RPG MAKER VX Ace Lite
2014-05-15 15:21 - 2014-05-15 15:21 - 00000000 ____D () C:\Users\Dustin2\Desktop\rpg-maker-vx-ace-lite
2014-05-15 15:12 - 2014-05-15 15:13 - 00773686 _____ () C:\Users\Dustin2\Downloads\VXAceWallpaperThing1024withlogo.zip
2014-05-15 15:10 - 2014-05-15 15:11 - 01049372 _____ () C:\Users\Dustin2\Downloads\VXAceWallpaperThing1280withlogo.zip
2014-05-15 15:09 - 2014-05-15 15:20 - 109892162 _____ () C:\Users\Dustin2\Downloads\rpg-maker-vx-ace-lite.zip
2014-05-14 11:33 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-14 11:33 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-14 11:33 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 11:32 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-14 11:32 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-14 11:32 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-14 10:32 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 10:32 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 10:32 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 10:32 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 10:29 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 10:29 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 10:29 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 10:29 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 10:29 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 10:29 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 10:29 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 10:29 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 10:29 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 10:29 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 10:29 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 10:29 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 10:29 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 10:29 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 10:29 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 10:29 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-10 15:05 - 2014-05-10 15:05 - 00015496 _____ () C:\Users\Dustin2\Downloads\NewCommands.jar
2014-05-10 14:49 - 2014-05-10 14:49 - 00006097 _____ () C:\Users\Dustin2\Downloads\kCommand_1.4.jar
2014-05-05 19:31 - 2014-05-10 22:51 - 00000607 _____ () C:\Users\Dustin2\Desktop\Habbo Missis.txt
2014-05-05 19:31 - 2014-05-05 19:31 - 00000000 ____D () C:\Users\Dustin2\Desktop\BIGMacroTool
2014-05-03 23:55 - 2014-05-03 23:55 - 00000000 ____D () C:\Program Files (x86)\BigMacroTool
2014-05-03 23:54 - 2014-05-03 23:54 - 00603961 _____ (TLProd ) C:\Users\Dustin2\Downloads\bigmacrotoolsetup.exe
2014-05-03 23:52 - 2014-05-03 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macro Recorder
2014-05-03 23:52 - 2014-05-03 23:52 - 00000000 ____D () C:\Program Files (x86)\MacroRecorder
2014-05-03 23:51 - 2014-05-03 23:51 - 00720656 _____ (Jitbit Software ) C:\Users\Dustin2\Downloads\MacroRecorderSetup.exe
2014-05-02 19:34 - 2014-05-02 19:34 - 00158576 _____ () C:\Users\Dustin2\Downloads\TukMC[3.2.5].zip
2014-05-02 18:46 - 2014-05-02 18:46 - 00065601 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2-api_2.0.397-experimental (1).zip
2014-05-02 18:45 - 2014-05-02 18:46 - 03699473 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2_2.0.397-experimental.jar
2014-05-02 18:45 - 2014-05-02 18:45 - 00065601 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2-api_2.0.397-experimental.zip
2014-04-30 21:16 - 2014-05-14 15:40 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-04-28 18:44 - 2014-04-28 18:44 - 00001140 _____ () C:\Users\Dustin2\Downloads\windmillschematic.schematic
2014-04-28 18:44 - 2014-04-28 18:44 - 00001128 _____ () C:\Users\Dustin2\Downloads\small_house.schematic
2014-04-28 18:42 - 2014-04-28 18:43 - 08072516 _____ () C:\Users\Dustin2\Downloads\templeofspirits.zip
2014-04-28 18:42 - 2014-04-28 18:42 - 00003166 _____ () C:\Users\Dustin2\Downloads\medievaltowerbyyowsky.schematic
2014-04-28 18:34 - 2014-04-28 18:34 - 00072336 _____ () C:\Users\Dustin2\Downloads\elijastemple.schematic
2014-04-28 18:33 - 2014-04-28 18:33 - 00040538 _____ () C:\Users\Dustin2\Downloads\spawn2745.schematic
2014-04-28 18:29 - 2014-04-28 18:29 - 00002034 _____ () C:\Users\Dustin2\Downloads\largemedievalhouse.schematic
2014-04-28 18:29 - 2014-04-28 18:29 - 00000892 _____ () C:\Users\Dustin2\Downloads\smallmedievalhouse3155.schematic
2014-04-28 18:28 - 2014-04-28 18:28 - 00032780 _____ () C:\Users\Dustin2\Downloads\faction-spawn.schematic
2014-04-28 18:27 - 2014-04-28 18:27 - 00265730 _____ () C:\Users\Dustin2\Downloads\aysgarth-medieval.schematic
2014-04-28 18:27 - 2014-04-28 18:27 - 00188559 _____ () C:\Users\Dustin2\Downloads\airship-shipyard.schematic
2014-04-28 18:21 - 2014-04-28 18:21 - 00691201 _____ () C:\Users\Dustin2\Downloads\Heroes.zip
2014-04-28 18:21 - 2014-04-28 18:21 - 00131877 _____ () C:\Users\Dustin2\Downloads\HeroChat.jar
2014-04-28 18:21 - 2014-04-28 18:21 - 00014885 _____ () C:\Users\Dustin2\Downloads\ArathosRPG.jar
2014-04-28 18:21 - 2014-04-28 18:21 - 00011463 _____ () C:\Users\Dustin2\Downloads\Dynmap-HeroChat-0.30-bin.zip

==================== One Month Modified Files and Folders =======

2014-05-28 18:33 - 2014-03-09 18:46 - 00031819 _____ () C:\Users\Dustin2\Desktop\FRST.txt
2014-05-28 18:32 - 2013-02-02 11:10 - 00001832 _____ () C:\Users\Public\Desktop\McAfee Internet Security Suite.lnk
2014-05-28 18:32 - 2009-11-04 14:15 - 01655465 _____ () C:\Windows\WindowsUpdate.log
2014-05-28 18:31 - 2014-03-03 17:48 - 00000000 ____D () C:\FRST
2014-05-28 18:27 - 2013-11-06 17:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-28 18:25 - 2011-09-19 08:43 - 00000437 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-05-28 18:24 - 2010-04-25 13:50 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-28 18:23 - 2009-08-22 10:34 - 01449366 _____ () C:\Windows\PFRO.log
2014-05-28 18:23 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-28 18:23 - 2009-07-14 06:51 - 00309942 _____ () C:\Windows\setupact.log
2014-05-28 18:21 - 2014-03-06 18:03 - 00000000 ____D () C:\AdwCleaner
2014-05-28 18:19 - 2012-11-13 19:50 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{B3019771-99BB-46F9-8D8E-A65277738BB5}
2014-05-28 18:18 - 2014-05-28 18:18 - 01327971 _____ () C:\Users\Dustin2\Downloads\adwcleaner_3.211.exe
2014-05-28 18:18 - 2014-05-28 18:18 - 01327971 _____ () C:\Users\Dustin2\Desktop\adwcleaner_3.211.exe
2014-05-28 18:18 - 2009-07-14 06:45 - 00017376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-28 18:18 - 2009-07-14 06:45 - 00017376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-28 18:14 - 2010-04-25 13:50 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-28 18:13 - 2012-07-27 13:13 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006UA.job
2014-05-28 18:07 - 2013-08-14 20:22 - 00000000 ____D () C:\Users\Dustin2\AppData\Local\TSVNCache
2014-05-28 18:04 - 2014-05-22 17:48 - 00000000 ____D () C:\Qoobox
2014-05-28 18:02 - 2012-03-30 16:51 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000UA.job
2014-05-28 17:54 - 2014-05-28 17:54 - 00036107 _____ () C:\ComboFix.txt
2014-05-28 17:43 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-05-28 17:11 - 2014-05-28 17:11 - 00001322 _____ () C:\CF-Submit.htm
2014-05-28 17:03 - 2014-05-22 17:34 - 05203612 ____R (Swearware) C:\Users\Dustin2\Desktop\ComboFix.exe
2014-05-27 18:55 - 2012-08-03 16:13 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-27 15:12 - 2012-07-27 13:13 - 00001076 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006Core.job
2014-05-27 15:02 - 2012-03-30 16:51 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000Core.job
2014-05-26 17:23 - 2014-05-23 18:47 - 00065840 _____ () C:\Users\Dustin2\Desktop\Addition.txt
2014-05-26 17:16 - 2014-03-09 18:46 - 02066944 _____ (Farbar) C:\Users\Dustin2\Desktop\FRST64.exe
2014-05-25 13:56 - 2013-08-17 12:47 - 00000000 ____D () C:\Users\Uwe\AppData\Local\TSVNCache
2014-05-25 13:44 - 2012-10-09 13:08 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{DDA221F5-94E0-4BB6-BDA5-D7912CCC2ACC}
2014-05-24 22:19 - 2012-07-27 13:20 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\Skype
2014-05-24 19:55 - 2009-11-04 14:30 - 00128883 _____ () C:\Windows\DirectX.log
2014-05-24 18:35 - 2014-05-24 18:35 - 00000222 _____ () C:\Users\Dustin2\Desktop\Starbound.url
2014-05-24 15:52 - 2014-05-24 15:32 - 00064382 _____ () C:\Users\Dustin2\Downloads\SystemLook.txt
2014-05-24 15:32 - 2014-05-24 15:32 - 00165376 _____ () C:\Users\Dustin2\Downloads\SystemLook_x64.exe
2014-05-23 22:33 - 2014-05-23 22:33 - 00000034 _____ () C:\Users\Dustin2\Downloads\winamp-dsl.m3u
2014-05-23 18:31 - 2014-05-23 17:52 - 00026273 _____ () C:\zoek-results.log
2014-05-23 18:22 - 2014-05-23 18:22 - 00000084 _____ () C:\folders.txt
2014-05-23 18:17 - 2014-05-23 15:26 - 00000000 ____D () C:\zoek_backup
2014-05-23 17:33 - 2014-05-23 18:23 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-05-23 15:26 - 2014-05-23 15:26 - 01285120 _____ () C:\Users\Dustin2\Downloads\zoek.exe
2014-05-23 14:51 - 2014-05-23 14:51 - 00000695 _____ () C:\Users\Dustin2\Desktop\JRT.txt
2014-05-22 20:51 - 2014-05-22 20:51 - 01326389 _____ () C:\Users\Dustin2\Downloads\adwcleaner_3.210.exe
2014-05-22 20:17 - 2012-07-27 13:16 - 00002376 _____ () C:\Users\Dustin2\Desktop\Google Chrome.lnk
2014-05-22 19:55 - 2014-05-22 17:46 - 00000000 ____D () C:\Windows\erdnt
2014-05-22 19:42 - 2009-07-14 04:34 - 99352576 _____ () C:\Windows\system32\config\software.bak
2014-05-22 19:42 - 2009-07-14 04:34 - 25427968 _____ () C:\Windows\system32\config\system.bak
2014-05-22 19:42 - 2009-07-14 04:34 - 02097152 _____ () C:\Windows\system32\config\default.bak
2014-05-22 19:42 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\security.bak
2014-05-22 19:42 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak
2014-05-22 19:24 - 2012-07-27 13:00 - 00000000 ____D () C:\Users\Dustin2
2014-05-22 19:23 - 2009-11-04 14:16 - 00000000 ____D () C:\Program Files (x86)\Acer Bio Protection
2014-05-22 17:34 - 2014-05-22 17:34 - 05200426 _____ (Swearware) C:\Users\Dustin2\Downloads\ComboFix.exe
2014-05-22 17:00 - 2014-05-22 17:00 - 00000031 _____ () C:\Users\Dustin2\Downloads\tune_in_dsl.m3u
2014-05-22 14:09 - 2009-08-22 07:29 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-05-20 11:17 - 2012-09-09 15:37 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\.minecraft
2014-05-16 17:20 - 2014-05-15 16:42 - 00000000 ____D () C:\Users\Dustin2\Documents\RPGVXAce
2014-05-15 15:22 - 2014-05-15 15:22 - 00001188 _____ () C:\Users\Public\Desktop\RPG MAKER VX Ace Lite.lnk
2014-05-15 15:22 - 2014-05-15 15:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RPG MAKER VX Ace Lite
2014-05-15 15:22 - 2013-08-06 16:49 - 00000000 ____D () C:\Program Files (x86)\Enterbrain
2014-05-15 15:21 - 2014-05-15 15:21 - 00000000 ____D () C:\Users\Dustin2\Desktop\rpg-maker-vx-ace-lite
2014-05-15 15:20 - 2014-05-15 15:09 - 109892162 _____ () C:\Users\Dustin2\Downloads\rpg-maker-vx-ace-lite.zip
2014-05-15 15:13 - 2014-05-15 15:12 - 00773686 _____ () C:\Users\Dustin2\Downloads\VXAceWallpaperThing1024withlogo.zip
2014-05-15 15:11 - 2014-05-15 15:10 - 01049372 _____ () C:\Users\Dustin2\Downloads\VXAceWallpaperThing1280withlogo.zip
2014-05-15 00:47 - 2012-06-10 16:49 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-15 00:47 - 2012-06-10 16:49 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-14 18:27 - 2013-11-06 17:57 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 18:27 - 2012-07-06 04:24 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 18:27 - 2011-06-16 16:54 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 16:23 - 2012-12-05 18:21 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\FTB-Launcher
2014-05-14 15:53 - 2012-07-27 13:00 - 00000000 ___RD () C:\Users\Dustin2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-14 15:53 - 2012-07-27 13:00 - 00000000 ___RD () C:\Users\Dustin2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-14 15:40 - 2014-04-30 21:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-14 11:31 - 2009-08-22 10:35 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-14 11:29 - 2013-07-13 14:47 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-14 11:23 - 2010-05-02 22:09 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 10:18 - 2013-12-08 14:32 - 00000000 ____D () C:\Program Files (x86)\Deutsche Telekom AG
2014-05-10 22:51 - 2014-05-05 19:31 - 00000607 _____ () C:\Users\Dustin2\Desktop\Habbo Missis.txt
2014-05-10 15:13 - 2012-08-24 19:24 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\TS3Client
2014-05-10 15:07 - 2012-07-27 13:13 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006UA
2014-05-10 15:07 - 2012-07-27 13:13 - 00003706 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006Core
2014-05-10 15:05 - 2014-05-10 15:05 - 00015496 _____ () C:\Users\Dustin2\Downloads\NewCommands.jar
2014-05-10 14:49 - 2014-05-10 14:49 - 00006097 _____ () C:\Users\Dustin2\Downloads\kCommand_1.4.jar
2014-05-09 08:14 - 2014-05-14 10:32 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 10:32 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-06 17:09 - 2010-04-25 13:50 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-06 17:09 - 2010-04-25 13:50 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-06 06:40 - 2014-05-14 11:33 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-14 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-14 11:32 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-14 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-14 11:33 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-14 11:33 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-05 19:31 - 2014-05-05 19:31 - 00000000 ____D () C:\Users\Dustin2\Desktop\BIGMacroTool
2014-05-05 16:02 - 2012-12-05 18:03 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\ftblauncher
2014-05-03 23:55 - 2014-05-03 23:55 - 00000000 ____D () C:\Program Files (x86)\BigMacroTool
2014-05-03 23:54 - 2014-05-03 23:54 - 00603961 _____ (TLProd ) C:\Users\Dustin2\Downloads\bigmacrotoolsetup.exe
2014-05-03 23:52 - 2014-05-03 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macro Recorder
2014-05-03 23:52 - 2014-05-03 23:52 - 00000000 ____D () C:\Program Files (x86)\MacroRecorder
2014-05-03 23:51 - 2014-05-03 23:51 - 00720656 _____ (Jitbit Software ) C:\Users\Dustin2\Downloads\MacroRecorderSetup.exe
2014-05-02 19:34 - 2014-05-02 19:34 - 00158576 _____ () C:\Users\Dustin2\Downloads\TukMC[3.2.5].zip
2014-05-02 18:46 - 2014-05-02 18:46 - 00065601 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2-api_2.0.397-experimental (1).zip
2014-05-02 18:46 - 2014-05-02 18:45 - 03699473 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2_2.0.397-experimental.jar
2014-05-02 18:45 - 2014-05-02 18:45 - 00065601 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2-api_2.0.397-experimental.zip
2014-04-28 18:44 - 2014-04-28 18:44 - 00001140 _____ () C:\Users\Dustin2\Downloads\windmillschematic.schematic
2014-04-28 18:44 - 2014-04-28 18:44 - 00001128 _____ () C:\Users\Dustin2\Downloads\small_house.schematic
2014-04-28 18:43 - 2014-04-28 18:42 - 08072516 _____ () C:\Users\Dustin2\Downloads\templeofspirits.zip
2014-04-28 18:42 - 2014-04-28 18:42 - 00003166 _____ () C:\Users\Dustin2\Downloads\medievaltowerbyyowsky.schematic
2014-04-28 18:34 - 2014-04-28 18:34 - 00072336 _____ () C:\Users\Dustin2\Downloads\elijastemple.schematic
2014-04-28 18:33 - 2014-04-28 18:33 - 00040538 _____ () C:\Users\Dustin2\Downloads\spawn2745.schematic
2014-04-28 18:29 - 2014-04-28 18:29 - 00002034 _____ () C:\Users\Dustin2\Downloads\largemedievalhouse.schematic
2014-04-28 18:29 - 2014-04-28 18:29 - 00000892 _____ () C:\Users\Dustin2\Downloads\smallmedievalhouse3155.schematic
2014-04-28 18:28 - 2014-04-28 18:28 - 00032780 _____ () C:\Users\Dustin2\Downloads\faction-spawn.schematic
2014-04-28 18:27 - 2014-04-28 18:27 - 00265730 _____ () C:\Users\Dustin2\Downloads\aysgarth-medieval.schematic
2014-04-28 18:27 - 2014-04-28 18:27 - 00188559 _____ () C:\Users\Dustin2\Downloads\airship-shipyard.schematic
2014-04-28 18:21 - 2014-04-28 18:21 - 00691201 _____ () C:\Users\Dustin2\Downloads\Heroes.zip
2014-04-28 18:21 - 2014-04-28 18:21 - 00131877 _____ () C:\Users\Dustin2\Downloads\HeroChat.jar
2014-04-28 18:21 - 2014-04-28 18:21 - 00014885 _____ () C:\Users\Dustin2\Downloads\ArathosRPG.jar
2014-04-28 18:21 - 2014-04-28 18:21 - 00011463 _____ () C:\Users\Dustin2\Downloads\Dynmap-HeroChat-0.30-bin.zip

Some content of TEMP:
====================
C:\Users\Dustin2\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-22 21:14

==================== End Of Log ============================
--- --- ---

--- --- ---

Cupa 28.05.2014 17:39
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-05-2014 02
Ran by Dustin2 at 2014-05-28 18:36:04
Running from C:\Users\Dustin2\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: McAfee  Anti-Virus und Anti-Spyware (Enabled - Up to date) {86355677-4064-3EA7-ABB3-1B136EB04637}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee  Anti-Virus und Anti-Spyware (Enabled - Up to date) {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee  Firewall (Enabled) {BE0ED752-0A0B-3FFF-80EC-B2269063014C}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Access 97rt PAN EURO G (HKLM-x32\...\Access 97rt PAN EURO G) (Version:  - )
Ace of Spades (HKLM-x32\...\{6037B8AD-7D5B-4D50-9BCA-A586C44EEF34}) (Version: 0.75.015 - Ben Aksoy)
Acer Arcade Deluxe (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 3.0.7020 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 3.0.7020 - CyberLink Corp.) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.22 - NewTech Infosystems)
Acer Bio Protection (HKLM-x32\...\InstallShield_{565A39D6-4FB0-4F35-A2AC-0DC66ACC3520}) (Version: 6.1.48 - Egis Technology Inc.)
Acer Crystal Eye Webcam (HKLM-x32\...\{7760D94E-B1B5-40A0-9AA0-ABF942108755}) (Version: 5.2.7.1 - Suyin Optronics Corp)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 4.05.3002 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3003 - Acer Incorporated)
Acer GameZone Console (HKLM-x32\...\{8ed9688e-4f79-4308-91ca-f1c37ca142b4}_is1) (Version: 5.1.0.2 - Oberon Media, Inc.)
Acer GridVista (HKLM-x32\...\GridVista) (Version: 3.01.0730 - Acer Inc.)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.02.3004 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0903 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.01.3014 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat 4.0, 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.04) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.04 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.5.146 - Adobe Systems, Inc.)
Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)
Alice Greenfingers (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}) (Version:  - Oberon Media)
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.105.2015.1103 - Alps Electric)
Amazonia (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11273477}) (Version:  - Oberon Media)
Angry Birds (HKLM-x32\...\{07A6B206-3F11-4D92-92A1-90E116ADD660}) (Version: 2.0.2 - Rovio)
Angry Birds Space (HKLM-x32\...\{45FFEC16-0615-47E2-8B70-CBAFD31D820C}) (Version: 1.3.0 - Rovio)
ANNO 1404 - Knigsedition (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 3.10.0000 - Ubisoft)
ANNO 1503 (HKLM-x32\...\{EBBB1DEF-8878-4CB8-BC0D-1196B30E7527}) (Version: 1.05 - )
ANNO 1503 GOLD (HKLM-x32\...\{DB833EF9-A198-49BE-970A-BD46F30BFBB4}) (Version: 1.05.00 - )
ANNO 1602 (HKLM-x32\...\{84F7CAD9-2316-4701-B5CA-E90FD60029E9}) (Version:  - )
ANNO 1602 Knigs-Edition (HKLM-x32\...\{077A7810-A937-4465-AD08-ACED9807995F}) (Version: 1.00 - )
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI AVIVO64 Codecs (Version: 10.7.0.40702 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{D10D9994-4337-8067-F5D7-9F8FEC1E4A00}) (Version: 3.0.732.0 - ATI Technologies, Inc.)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
AuthenTec Fingerprint Software (HKLM-x32\...\{6CE5CC07-BCE8-4F4E-8287-101B59900A73}) (Version: 8.5.0.306 - AuthenTec, Inc.)
B109n-z (x32 Version: 130.0.396.000 - Hewlett-Packard) Hidden
Backup Manager Basic (x32 Version: 2.0.0.22 - NewTech Infosystems) Hidden
Battlefield 2(TM) (HKLM-x32\...\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}) (Version:  - )
Bauernhof (HKLM-x32\...\Bauernhof) (Version:  - )
BigMacroTool 1.5 (HKLM-x32\...\{620CAD2D-0757-43A9-AA5F-C8D48A1E4D85}_is1) (Version:  - TLProd)
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Blue Byte Game Channel (HKLM-x32\...\Blue Byte Game Channel) (Version:  - UbiSoft)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borland C++Builder 6 (HKLM-x32\...\{2864C41B-EF2D-4640-95A2-526276524519}) (Version: 6.0 - Borland Software Corporation)
Broadcom Gigabit NetLink Controller (HKLM\...\{96F70DF8-160F-4F9C-9B9E-2A9B439B4EB9}) (Version: 12.26.02 - Broadcom Corporation)
Browser 7 der Telekom (HKLM-x32\...\Browser 7 der Telekom 28.0.28 (x86 de)) (Version: 28.0.28 - Deutsche Telekom AG)
Browser 7 Maintenance Service (HKLM-x32\...\Browser7MaintenanceService) (Version: 28.0.28 - Deutsche Telekom AG)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2009.0702.1239.20840 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Czech (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Danish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Dutch (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help English (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Finnish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help French (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help German (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Greek (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Italian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Japanese (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Korean (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Polish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Russian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Spanish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Swedish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Thai (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
CCC Help Turkish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden
ccc-core-static (x32 Version: 2009.0702.1239.20840 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2009.0702.1239.20840 - ATI) Hidden
Cheat Engine 6.2 (HKLM-x32\...\Cheat Engine 6.2_is1) (Version:  - Dark Byte)
Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}) (Version:  - Oberon Media)
Compatibility Pack fr 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CortonAndHomePage (HKLM-x32\...\CortonAndHomePage) (Version:  - CortonAndHomePage)
Covert Operations (HKLM-x32\...\Covert Operations) (Version:  - )
CyberLink Audio Pack (5.1ch) for TriDefMediaPlayer 1.0 (HKLM-x32\...\CyberLink Audio Pack for TriDefMediaPlayer_is1) (Version: 1.0 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dachser Global Player (HKLM-x32\...\Dachser Global Player) (Version:  - )
Dairy Dash (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}) (Version:  - Oberon Media)
DarkWave Studio 3.5.7 (HKLM-x32\...\DarkWave Studio) (Version: 3.5.7 - ExperimentalScene)
Der Herr der Ringe Online (HKCU\...\LOTROde) (Version:  - )
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
Dev-C++ 5 beta 9 release (4.9.9.2) (HKLM-x32\...\Dev-C++) (Version:  - )
DeviceDiscovery (x32 Version: 130.0.372.000 - Hewlett-Packard) Hidden
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
DIE SIEDLER - Das Erbe der Knige - Gold Edition (HKLM-x32\...\{E08DE897-B6AF-4DFF-9E90-131E80C876B4}) (Version: 1.00.0000 - Blue Byte)
Die Siedler IV (HKLM-x32\...\S4Uninst) (Version:  - )
Die Sims 2 (HKLM-x32\...\{6E7DD182-9FC6-4651-0095-2E666CC6AF35}) (Version:  - )
Die Sims 2 Haustiere (HKLM-x32\...\{4817189D-1785-4627-A33C-39FD90919300}) (Version:  - )
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)
Dragon's Prophet (HKLM-x32\...\{C31556D7-F2B9-4787-B223-F7A035067E89}_is1) (Version: 1.0.1050 - Infernum Productions AG)
Dream Day First Home (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}) (Version:  - Oberon Media)
eBay Worldwide (HKLM-x32\...\{AAF89271-2594-468D-B578-96B2E30C41C4}) (Version: 2.1.0703 - OEM)
EE-ZDE (HKLM-x32\...\{B49C924C-A651-4378-94F6-5D9BF44A959F}) (Version:  - )
Empire Earth (HKLM-x32\...\{2447500B-22D7-47BD-9B13-1A927F43A267}) (Version:  - )
eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
Euro Truck Simulator 1.00 (HKLM-x32\...\Euro Truck Simulator) (Version: 1.00 - )
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
Ezvid (HKLM-x32\...\{F96D619D-99D6-4C9C-A393-0CD22DE1CA66}_is1) (Version: 0.8.8.2 - Ezvid, inc.)
Farm Frenzy 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11531173}) (Version:  - Oberon Media)
FileZilla Client 3.8.0 (HKCU\...\FileZilla Client) (Version: 3.8.0 - Tim Kosse)
Fingerprint Solution (x32 Version: 6.1.48.0 - Egis Technology Inc.) Hidden
Flatcast Producer Plugin 5.2.2.471 (HKLM-x32\...\Flatcast_is1) (Version:  - 1 mal 1 Software GmbH)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free AVI Video Converter version 5.0.22.128 (HKLM-x32\...\Free AVI Video Converter_is1) (Version: 5.0.22.128 - DVDVideoSoft Ltd.)
Free MP4 Video Converter version 5.0.22.128 (HKLM-x32\...\Free MP4 Video Converter_is1) (Version: 5.0.22.128 - DVDVideoSoft Ltd.)
Free Screen To Video V 2.0 (HKLM-x32\...\Free Screen To Video_is1) (Version: 2.0.0.0 - Koyote Soft)
Free YouTube Download version 3.2.16.1030 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.16.1030 - DVDVideoSoft Ltd.)
Game Dev Tycoon (HKLM-x32\...\Steam App 239820) (Version:  - Greenheart Games)
GameRanger (HKCU\...\GameRanger) (Version:  - GameRanger Technologies)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Garry)
GitHub (HKCU\...\5f7eb300e2ea4ebf) (Version: 1.2.3.0 - GitHub, Inc.)
Gizmodock (HKLM-x32\...\Gizmodock) (Version:  - Gizmodock)
Google Chrome (HKCU\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Grand Fantasia (HKLM-x32\...\Grand Fantasia) (Version:  - )
Granny In Paradise (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110551697}) (Version:  - Oberon Media)
Green Line 2 Sprachtrainer (HKLM-x32\...\{16281EBA-AA00-44D2-BC8B-06F3C3380DA1}) (Version: 1.00.000 - Klett)
Grepo (HKLM-x32\...\Grepo) (Version:  - Grepo)
Happy Cloud Client (HKCU\...\HappyCloud) (Version: 3.41 - Happy Cloud, Inc.)
Heroes & Generals (HKLM-x32\...\Heroes & Generals) (Version: 1.0.4.6 - Reto-Moto)
Heroes of Hellas (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380}) (Version:  - Oberon Media)
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Wireless B109n-z All-In-One Driver Software 13.0 Rel .6 (HKLM\...\{722B4A13-F24D-43AE-8813-5DB82C0B23C2}) (Version:  - HP)
HP Print Projects 1.0 (HKLM\...\HP Print Projects) (Version: 1.0 - HP)
HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
hpPrintProjects (x32 Version: 130.0.303.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
hpWLPGInstaller (x32 Version: 130.0.303.000 - Hewlett-Packard) Hidden
HyperCam 2 (HKLM-x32\...\HyperCam 2) (Version: 2.25.01 - Hyperionics Technology LLC)
iCloud (HKLM\...\{EAFB2AD8-D92B-464C-8D97-B9CB94703C4A}) (Version: 3.0.2.163 - Apple Inc.)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3001 - Acer Incorporated)
Intel Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
iTunes (HKLM\...\{A04DCB25-7040-4935-A30D-8E0A893ABF2D}) (Version: 11.1.2.32 - Apple Inc.)
Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java SE Development Kit 7 Update 9 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0170090}) (Version: 1.7.0.90 - Oracle)
Java(TM) 6 Update 30 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216025FF}) (Version: 6.0.300 - Oracle)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
L&H TTS3000 Deutsch (HKLM-x32\...\LHTTSGED) (Version:  - )
Lagarith lossless video codec (Remove Only) (HKLM-x32\...\LAGARITH) (Version:  - )
Launch Manager (HKLM-x32\...\LManager) (Version: 3.0.04 - Acer Inc.)
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
LEGO Star Wars: Die Komplette Saga (HKLM-x32\...\InstallShield_{D596980D-17BE-4425-B8F0-5640719AADE9}) (Version: 1.00.0000 - LucasArts)
LEGO Star Wars: The Complete Saga (x32 Version: 1.00.0000 - LucasArts) Hidden
LG Internet Kit (HKLM-x32\...\LG Internet Kit) (Version: 4.2.1 - LG Electronics)
LG USB Modem Drivers (HKLM-x32\...\{3E8DE1A6-B365-4FF6-B917-2892A34990E8}) (Version: 4.9.7 - LG Electronics)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.1.0.210 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.1.0.210 - LogMeIn, Inc.) Hidden
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.1.94 - LSI Corporation)
Macro Recorder 5.7.4 (HKLM-x32\...\Macro Recorder_is1) (Version: 5.7.4 - Jitbit Software)
MAGIX Content und Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (HKLM-x32\...\MAGIX_{B332E15B-243F-4F40-8530-1524F84230A0}) (Version: 4.3.2.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (Version: 4.3.2.0 - MAGIX AG) Hidden
MAGIX Music Maker 2013 Trial Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
McAfee Internet Security Suite (HKLM-x32\...\MSC) (Version: 11.0.678 - McAfee, Inc.)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)
Meine Dienste Software (HKLM\...\Meine Dienste Software) (Version: 2.0.5.0 - Telekom)
Merriam Websters Spell Jam (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112662477}) (Version:  - Oberon Media)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Age of Empires (HKLM-x32\...\Age of Empires) (Version:  - )
Microsoft Age of Empires Expansion (HKLM-x32\...\Age of Empires Expansion 1.0) (Version:  - )
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Crimson Skies Trial (HKLM-x32\...\Crimson Skies Trial 1.0) (Version:  - )
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Language Pack 2007 - German/Deutsch (HKLM-x32\...\OMUI.de-de) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office O MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office SharePoint Designer MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office X MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft Texturepack Editor (HKLM-x32\...\Minecraft Texturepack Editor) (Version:  - )
MixPad Audiodatei-Mixer (HKLM-x32\...\MixPad) (Version:  - NCH Software)
Mozilla Firefox 22.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 22.0 (x86 de)) (Version: 22.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 22.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MWS Reader 4 (HKLM-x32\...\MWS Reader 4_is1) (Version: 4.8 - Micro WAL Software, directINNOVATION UG (haftungsbeschrnkt))
MyWinLocker (HKLM-x32\...\{68301905-2DEA-41CE-A4D4-E8B443B099BA}) (Version: 3.1.72.0 - Egis Technology Inc.)
NavyField2 (HKLM-x32\...\NavyField2 EU) (Version:  - )
Network64 (Version: 130.0.374.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
Netzmanager (HKLM-x32\...\Netzmanager) (Version: 1.071 - Deutsche Telekom AG)
Netzmanager (Version: 1.071 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
No-IP DUC (HKLM-x32\...\NoIPDUC) (Version: 3.0.4 - Vitalwerks Internet Solutions LLC)
Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.0.36 - Symantec)
Norton Security Scan (HKLM-x32\...\NSS) (Version: 3.5.1.8 - Symantec Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 5.9.3 - )
NTI Backup Now 5 (HKLM-x32\...\InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}) (Version: 5.1.2.627 - NewTech Infosystems)
NTI Backup Now Standard (x32 Version: 5.1.2.627 - NewTech Infosystems) Hidden
NTI Media Maker 8 (HKLM-x32\...\InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}) (Version: 8.0.12.6619 - NewTech Infosystems)
NTI Media Maker 8 (x32 Version: 8.0.12.6619 - NewTech Infosystems) Hidden
OLYMPUS ib (HKLM-x32\...\InstallShield_{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}) (Version: 1.1.1404 - OLYMPUS IMAGING CORP.)
OLYMPUS ib (x32 Version: 1.1.1404 - OLYMPUS IMAGING CORP.) Hidden
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.1.10.2728 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\{FB83467F-D8EB-43E6-8B3D-860B045C1C52}) (Version: 0.51.325 - Overwolf)
Pagealicious (HKLM-x32\...\Pagealicious) (Version:  - Pagealicious) <==== ATTENTION
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.)
PC Beschleunigen (HKLM\...\PK-PCSU_is1) (Version: 1.3.10.20086 - PC Beschleunigen)
Pflanzen gegen Zombies (HKLM-x32\...\BFG-Pflanzen gegen Zombies) (Version:  - )
Photo Notifier and Animation Creator (HKLM-x32\...\Photo Notifier and Animation Creator) (Version: 1.0.0.1009 - IncrediMail Ltd.)
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009 - Ihr Firmenname) Hidden
PhotoStage Diashow-Ersteller (HKLM-x32\...\PhotoStage) (Version:  - NCH Software)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.8 - Google, Inc.)
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version:  - PokerStars.net)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
PS_AIO_06_B109n-z_SW_Min (x32 Version: 130.0.396.000 - Hewlett-Packard) Hidden
Quick Memory Editor 5.5 (HKLM-x32\...\Quick Memory Editor_is1) (Version:  - softcows.com)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 3.6 - Razer USA Ltd)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5911 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30093 - Realtek Semiconductor Corp.)
Red Ace Squadron (HKLM-x32\...\{BB930C8A-DDAA-4BAC-B02B-F27440479B2D}) (Version:  - )
Reef Club Casino (HKLM-x32\...\Reef Club Casino) (Version:  - )
Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version:  - )
Roll (HKLM-x32\...\RollerCoaster Tycoon Setup) (Version:  - )
RPG MAKER VX Ace Lite (HKLM-x32\...\RPGVXAceLite_E_is1) (Version: 1.01b - Enterbrain)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Schmidt Interaktivspa Doppelkopf (HKLM-x32\...\{BA947C14-9B71-484D-B66C-055E2E6CA7B1}) (Version:  - )
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
SimCity (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 1.0.0.0 - Electronic Arts)
simplitec simplicheck (HKLM-x32\...\{183D780B-28F9-41BA-A2CB-605F324A5781}) (Version: 1.3.10.0 - simplitec GmbH)
Sir Henry's Anno 1602 InselEditor (HKLM-x32\...\Sir Henry's Anno 1602 InselEditor) (Version:  - )
SketchUp 2014 (HKLM-x32\...\{D71C0CA7-A245-4CB7-A958-7DB3377602AE}) (Version: 14.0.4900 - Trimble Navigation Limited)
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.)
Skype 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
SL-6640 Black Widow Flightstick (HKLM-x32\...\InstallShield_{10D4F38B-5436-4673-B861-F301929B373B}) (Version: 3.1 - Joellenbeck GmbH)
SL-6640 Black Widow Flightstick (x32 Version: 3.1 - Joellenbeck GmbH) Hidden
SmartWebPrinting (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
SoundTap Audiostream-Rekorder (HKLM-x32\...\SoundTap) (Version:  - NCH Software)
Sprachtrainer Fonts (HKLM-x32\...\{FBCF2ED3-AFB5-475E-BF9A-30BEAD366FBC}) (Version: 1.00.01 - Ernst Klett Verlag GmbH)
SQLiteManager (HKLM-x32\...\{C4BA538B-FEF1-4769-A4A3-AE3A9FEAC336}) (Version: 4.2.8 - SQLabs)
Star Defender 4 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-114803710}) (Version:  - Oberon Media)
Star Wars Battlefront II (HKLM-x32\...\{3D374523-CFDE-461A-827E-2A102E2AB365}) (Version: 1.0 - LucasArts)
Star Wars Empire at War (HKLM-x32\...\{99AE7207-8612-4DBA-A8F8-BAE5C633390D}) (Version: 1.0 - LucasArts)
Starbound (HKLM-x32\...\Steam App 211820) (Version:  - )
Status (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Stronghold (HKLM-x32\...\{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}) (Version:  - )
Stronghold 2 (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.00 - Firefly Studios)
Stronghold Crusader Extreme (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: 1.20.0000 - Firefly Studios)
Stronghold Legends (HKLM-x32\...\{66A405D2-BA14-4594-BF36-B3B544F0754E}) (Version: 1.20.0000 - Firefly Studios)
Subversion (HKLM-x32\...\{234AE151-D441-4504-A439-0FE428F8F989}) (Version: 1.8.0.1 - CollabNet)
Switch Audiodatei-Konverter (HKLM-x32\...\Switch) (Version:  - NCH Software)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TEdit 3 (HKLM-x32\...\{B161A5C0-F7C2-4F9B-BA93-051D7C26E624}) (Version: 3.5.14060.0 - BinaryConstruct)
TEdit 3 (HKLM-x32\...\{B81207ED-C990-4AB1-B5D5-A191EA253C0D}) (Version: 3.5.14064.0 - BinaryConstruct)
TEdit 3 (HKLM-x32\...\{EDEAA16E-C6A6-439F-AD8D-B2B68B64176F}) (Version: 3.4.13298.0 - BinaryConstruct)
TEdit 3 (HKLM-x32\...\{F015942F-C1BD-4297-A8A4-C0B8D42B39C5}) (Version: 3.4.13358.0 - BinaryConstruct)
Telekom Fotoservice (HKLM-x32\...\Telekom Fotoservice) (Version:  - )
TempoPerfect Metronome Software (HKLM-x32\...\TempoPerfect) (Version:  - NCH Software)
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version:  - Edmund McMillen and Florian Himsl)
Thirsty Punk (HKLM-x32\...\{11DFFB78-5C06-476A-9EAA-747106633545}) (Version: 1.00.0000 - )
Tiny Media Player v1.0 (HKLM-x32\...\Tiny Media Player_is1) (Version: 1.0.0.0 - )
Titan Quest (HKLM-x32\...\{412B69AF-C352-4F6F-A318-B92B3CB9ACC6}) (Version: 1.00.0000 - Iron Lore)
TomTom HOME 2.7.6.2056 (HKLM-x32\...\TomTom HOME) (Version: 2.7.6.2056 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
T-Online 6.0 (HKLM-x32\...\{B1275E23-717A-4D52-997A-1AD1E24BC7F3}) (Version:  - )
T-Online WLAN-Access Finder (HKLM-x32\...\{295C31E5-3F91-498E-9623-DA24D2FA2B6A}) (Version:  - )
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TopStyle Lite (Version 3.0) (HKLM-x32\...\TopStyle Lite (Version 3.0)) (Version: 3.1.0 - Bradbury Software, LLC)
TortoiseSVN 1.8.1.24570 (64 bit) (HKLM\...\{ECA99F0F-4FCE-40F6-B086-B9A0F7F5563F}) (Version: 1.8.24570 - TortoiseSVN)
Torus Trooper (HKLM-x32\...\{AEB04055-F5B1-47A1-ACEE-F53C23339936}) (Version: 1.00.0000 - Ihr Firmenname)
TrayApp (x32 Version: 130.0.376.000 - Hewlett-Packard) Hidden
TriDef 3D (OEM-A) 1.4.10 (HKLM-x32\...\experience-oem-a-bundle) (Version: 1.4.10gm - )
TriDef 3D Ignition 2.3.3 (HKLM-x32\...\ignition-pkg) (Version: 2.3.3gm - )
TriDef 3D Media Player 6.4.21 (HKLM-x32\...\media-player-pkg) (Version: 6.4.21gm - )
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AB365889-0395-4FAD-B702-CA5985D53D42}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{199DF7B6-169C-448C-B511-1054101BE9C9}) (Version:  - Microsoft)
Update for Microsoft Office OneNote 2007 Help (KB963670) (HKLM-x32\...\{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2744EF05-38E1-4D5D-B333-E021EDAEA245}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{397B1D4F-ED7B-4ACA-A637-43B670843876}) (Version:  - Microsoft)
Update for Microsoft Office Script Editor Help (KB963671) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}) (Version:  - Microsoft)
Update for Microsoft Office Word 2007 (KB974631) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{052CA271-6C3E-4B8F-9EEE-CEA84BC901DC}) (Version:  - Microsoft)
Update for Microsoft Office Word 2007 (KB974631) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CA2F3DF8-C8AE-4933-92F1-FE482442F6E6}) (Version:  - Microsoft)
Update for Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{80E762AA-C921-4839-9D7D-DB62A72C0726}) (Version:  - Microsoft)
Update fr Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update fr Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update fr Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update fr Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VideoPad Videobearbeitungs-Software (HKLM-x32\...\VideoPad) (Version:  - NCH Software)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WavePad Audiobearbeitungs-Software (HKLM-x32\...\WavePad) (Version:  - NCH Software)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.00.3005 - Acer Incorporated)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
WinRAR 4.01 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
YGOPro DevPro Version 1.9.8 r9 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.8 r9 - YGOPro DevPro Online)
Zulu DJ-Software (HKLM-x32\...\Zulu) (Version:  - NCH Software)

==================== Restore Points  =========================

23-04-2014 14:26:20 Installed Java 7 Update 55
30-04-2014 19:10:24 Windows Update
02-05-2014 20:51:36 Windows Update
14-05-2014 09:16:33 Windows Update
22-05-2014 15:59:13 ComboFix created restore point
23-05-2014 15:52:18 zoek.exe restore point
24-05-2014 17:52:32 DirectX wurde installiert
28-05-2014 15:06:26 ComboFix created restore point

==================== Hosts content: ==========================

2009-07-14 04:34 - 2014-05-28 17:42 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {07EE24B1-5C8C-4D23-AFDE-DF38C402164F} - System32\Tasks\{F41867D0-906D-47F3-9505-7D4A4C5295B4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {08ED0173-7023-4ECE-B904-9F4BF9C9BD15} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {0EEBBE99-C529-4B15-AD3E-6A6670ACC7A8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006Core => C:\Users\Dustin2\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-27] (Google Inc.)
Task: {170BD267-5E3C-44DC-97EA-CE5527D9C7C4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-25] (Google Inc.)
Task: {1C0D0C07-9A30-4E36-9DC6-13937CCA1B57} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000UA => C:\Users\Dustin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-30] (Google Inc.)
Task: {23BC9A63-F735-4E6C-A010-AD669726BD1E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {28F38A2A-17F8-41F4-985B-3EE38E446F28} - System32\Tasks\{E1B1C975-FB3D-4BD7-A326-77A88CEB6252} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {2EAF805E-1793-431B-A79B-BE8A74BC0E4C} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe [2013-05-07] ()
Task: {3154DB27-569A-49FE-9351-C27A412898BE} - System32\Tasks\{91369C71-A5B5-4B7A-9C84-3F550E43D1F4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {39A7D493-7EC7-499D-9BFF-6C0706FE7FE9} - System32\Tasks\{4BC2CDCB-DFC3-4776-B2C5-D884E3846FA4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {482BC811-BBFA-436A-A608-3EC6BB0EC1E2} - System32\Tasks\{619D66F0-BDFA-4102-86C6-B3771BD17950} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {55813747-4151-45A6-BF9D-3B38A85AA89E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {64C957D3-B0C5-4E39-9D64-B09A8C470F12} - System32\Tasks\{8AE5858A-D627-4EEC-850C-7EF95FCC4F35} => Chrome.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/abandoninstall?page=tsProgressBar
Task: {651A3C3F-1DA5-4B3B-9E99-313F6B0D0691} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2972218083-3551369242-1309756512-1006
Task: {67A527CA-D1D9-43A4-9DAB-23A8FA47BA26} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2009-07-09] (Acer)
Task: {67E811AB-A056-48F3-9127-B33B21C161F8} - System32\Tasks\{A9E31417-2142-4F9A-BB85-1B6D6B2C0DE2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {708F4270-0C36-4543-8804-6EAC46214BE3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-25] (Google Inc.)
Task: {73A6CF2B-7BF5-4A55-B2FB-EE45F6A64B04} - System32\Tasks\{D535A955-DC6F-4D2A-8001-AA62A4B42718} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {7E75CFEE-9B68-4136-8CCA-9CB910ACDD31} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000Core => C:\Users\Dustin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-30] (Google Inc.)
Task: {7E9BFD60-05E8-44CA-9032-B0F403C6679B} - System32\Tasks\{F5D96F90-CCE0-4A37-8779-F6D750790D81} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {8BF882A3-1078-4F6A-8703-D0E77ACC571A} - System32\Tasks\{CBEE636B-6390-41FD-B7C1-2A29B523F030} => C:\Program Files (x86)\MAESTIA\Maestia.exe
Task: {975C2F73-A19E-4570-A161-7916C54AAFD9} - System32\Tasks\{B53B4F90-035C-40A9-8D24-EDB78FE441D3} => C:\Program Files (x86)\MAESTIA\Maestia.exe
Task: {A76477DC-EFBF-4CAC-A5D6-D9E734A09BB8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006UA => C:\Users\Dustin2\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-27] (Google Inc.)
Task: {AD72E41E-DBC3-4135-A6A0-8EBC77E49062} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {DDC7CB5D-3F94-408D-86F5-2597208AF063} - System32\Tasks\{1921F2C4-E2C3-4A78-A8D1-2CD38AE039AF} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {DEE0E07F-633F-42D1-8303-E18BD89B0963} - System32\Tasks\{EAFB9936-9EC5-4723-8A2B-163FADD36ECE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {DFCB70E5-82DF-488F-A26D-B7DB16DC115A} - System32\Tasks\{C20B8553-DDFC-459A-8062-4C0729B2B688} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {E0FD416F-4B08-412D-BE65-91F0EB8576C8} - System32\Tasks\{41FD7B73-1435-48BB-A42A-4B1D03C2FF7A} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: {E104C726-04CF-4CA9-BA85-BE429D107195} - System32\Tasks\{3E112CA3-F4C0-4677-B300-CC06D5A818EC} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {E435CE5A-7424-4D7B-9AF6-651C169D2049} - System32\Tasks\{4AF42F1C-379B-4311-81D9-9F6A5A82B81D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {ECFEB674-8834-41F0-8EA1-3FD06219E6E5} - System32\Tasks\{7DEAE150-C539-4E10-BC04-2046364152A1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsInstall&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {ED4F7DF8-5970-476D-A533-8D5FC35F7464} - System32\Tasks\{24C2E171-0F75-46BC-814E-B1D8C946B448} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {ED87B43F-B4DB-44D7-B128-0E43B5943246} - System32\Tasks\{973A8573-3253-46A9-B038-D0309DBD7210} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.124/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled
Task: {FEC8B849-9820-4215-94A4-EAEE8B6921ED} - System32\Tasks\Norton Security Scan for Dustin => C:\Program Files (x86)\Norton Security Scan\Engine\3.5.1.8\Nss.exe [2011-08-05] (Symantec Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000Core.job => C:\Users\Dustin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000UA.job => C:\Users\Dustin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006Core.job => C:\Users\Dustin2\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006UA.job => C:\Users\Dustin2\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Norton Security Scan for Dustin.job => C:\PROGRA~2\NORTON~2\Engine\351~1.8\Nss.exe

==================== Loaded Modules (whitelisted) =============

2013-04-18 12:10 - 2013-04-18 12:10 - 01731072 _____ () C:\Program Files (x86)\pc essentials\updater.exe
2013-07-22 20:41 - 2013-07-22 20:41 - 00075504 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll
2013-07-22 20:41 - 2013-07-22 20:41 - 00088304 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2009-11-04 14:16 - 2008-07-29 20:29 - 00200704 _____ () C:\Windows\PLFSetI.exe
2009-07-29 14:10 - 2009-07-29 14:10 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2009-11-04 14:15 - 2009-11-04 14:15 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-02-03 02:33 - 2009-02-03 02:33 - 00460199 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2008-09-29 02:55 - 2008-09-29 02:55 - 01076224 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2014-03-28 11:35 - 2014-03-28 11:35 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2013-07-22 19:49 - 2013-07-22 19:49 - 00065264 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub32.dll
2014-05-22 20:17 - 2014-05-14 01:40 - 00716616 _____ () C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
2014-05-22 20:17 - 2014-05-14 01:40 - 00126280 _____ () C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\35.0.1916.114\libegl.dll
2014-05-22 20:17 - 2014-05-14 01:40 - 04217672 _____ () C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-05-22 20:17 - 2014-05-14 01:40 - 00414536 _____ () C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-05-22 20:17 - 2014-05-14 01:40 - 01732424 _____ () C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll
2014-05-23 20:58 - 2014-04-30 02:08 - 01135104 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-05-23 20:58 - 2014-04-30 02:08 - 00471552 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-05-23 20:58 - 2014-04-30 02:08 - 00404992 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-01-09 18:20 - 2014-04-30 02:08 - 00340992 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2013-03-25 14:23 - 2014-05-17 03:36 - 00756224 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-05-24 15:35 - 2014-04-29 02:37 - 02198720 _____ () C:\Program Files (x86)\Steam\video.dll
2014-05-23 20:58 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2012-08-03 16:18 - 2014-05-21 19:39 - 01145536 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-01-28 18:04 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2012-08-03 16:18 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2012-08-03 16:18 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2012-08-03 16:18 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^simplicheck.lnk => C:\Windows\pss\simplicheck.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Dustin2^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Meine Dienste.lnk => C:\Windows\pss\Meine Dienste.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Dustin2^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Netzmanager.lnk => C:\Windows\pss\Netzmanager.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: KPeerNexonEU => C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
MSCONFIG\startupreg: PlayMovie => "C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent

==================== Faulty Device Manager Devices =============

Name: Photosmart Wireless B109n-z
Description: Photosmart Wireless B109n-z
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Photosmart Wireless B109n-z
Description: Photosmart Wireless B109n-z
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/28/2014 06:29:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: kernel.exe, Version: 2.22.0.18, Zeitstempel: 0x4eb9846e
Name des fehlerhaften Moduls: ToADial.dll, Version: 6.13.0.0, Zeitstempel: 0x45d0545f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00005000
ID des fehlerhaften Prozesses: 0x24f4
Startzeit der fehlerhaften Anwendung: 0xkernel.exe0
Pfad der fehlerhaften Anwendung: kernel.exe1
Pfad des fehlerhaften Moduls: kernel.exe2
Berichtskennung: kernel.exe3

Error: (05/28/2014 05:14:39 PM) (Source: McLogEvent) (EventID: 5051) (User: NT-AUTORITT)
Description: A thread in process C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe took longer than 90000 ms to complete a request.

The process will be terminated.
Thread id : 3548 (0xddc)

Thread address : 0x000000007702132A

Thread message :

 Build VSCORE.14.4.0.387 / 5400.1158
 Object being scanned = \Device\HarddiskVolume3\Windows\Inf\mdmcxpv6.inf
 by C:\Windows\PEV.exe
 4(0)(0)
 4(0)(0)
 7200(0)(0)
 7595(0)(0)
 7005(0)(0)
 7004(0)(0)
 5006(0)(0)
 5004(0)(0)

Error: (05/25/2014 00:52:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: updater.exe, Version: 0.0.0.0, Zeitstempel: 0x516fb867
Name des fehlerhaften Moduls: netprofm.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4a5bda75
Ausnahmecode: 0xc0000005
Fehleroffset: 0x6acc2505
ID des fehlerhaften Prozesses: 0x954
Startzeit der fehlerhaften Anwendung: 0xupdater.exe0
Pfad der fehlerhaften Anwendung: updater.exe1
Pfad des fehlerhaften Moduls: updater.exe2
Berichtskennung: updater.exe3

Error: (05/23/2014 06:58:22 PM) (Source: Steam Client Service) (EventID: 1) (User: )
Description: Error: Failed to poke open firewall


System errors:
=============
Error: (05/28/2014 06:25:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (05/28/2014 06:25:22 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 25.116.3.128192.168.137.0255.255.255.0

Error: (05/28/2014 06:25:21 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (05/28/2014 06:23:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "XAMPP Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (05/28/2014 06:13:24 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (05/28/2014 06:07:49 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 25.116.3.128192.168.137.0255.255.255.0

Error: (05/28/2014 06:07:13 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (05/28/2014 06:06:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "XAMPP Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (05/28/2014 05:50:49 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (05/28/2014 05:46:14 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "McAfee VirusScan Announcer" wurde nicht richtig gestartet.


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-05-28 17:36:43.188
  Description: Windows konnte die Abbildintegritt der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht berprfen, weil der Dateihash nicht im System gefunden wurde. Mglicherweise wurde durch eine krzlich durchgefhrte Hardware- oder Softwarenderung eine falsch signierte oder beschdigte Datei oder eine Datei, bei der es sich um schdliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-28 17:36:42.985
  Description: Windows konnte die Abbildintegritt der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht berprfen, weil der Dateihash nicht im System gefunden wurde. Mglicherweise wurde durch eine krzlich durchgefhrte Hardware- oder Softwarenderung eine falsch signierte oder beschdigte Datei oder eine Datei, bei der es sich um schdliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-28 17:36:42.783
  Description: Windows konnte die Abbildintegritt der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht berprfen, weil der Dateihash nicht im System gefunden wurde. Mglicherweise wurde durch eine krzlich durchgefhrte Hardware- oder Softwarenderung eine falsch signierte oder beschdigte Datei oder eine Datei, bei der es sich um schdliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-28 17:36:42.595
  Description: Windows konnte die Abbildintegritt der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht berprfen, weil der Dateihash nicht im System gefunden wurde. Mglicherweise wurde durch eine krzlich durchgefhrte Hardware- oder Softwarenderung eine falsch signierte oder beschdigte Datei oder eine Datei, bei der es sich um schdliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-28 17:11:24.995
  Description: Windows konnte die Abbildintegritt der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht berprfen, weil der Dateihash nicht im System gefunden wurde. Mglicherweise wurde durch eine krzlich durchgefhrte Hardware- oder Softwarenderung eine falsch signierte oder beschdigte Datei oder eine Datei, bei der es sich um schdliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-28 17:11:24.792
  Description: Windows konnte die Abbildintegritt der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht berprfen, weil der Dateihash nicht im System gefunden wurde. Mglicherweise wurde durch eine krzlich durchgefhrte Hardware- oder Softwarenderung eine falsch signierte oder beschdigte Datei oder eine Datei, bei der es sich um schdliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-28 17:11:24.589
  Description: Windows konnte die Abbildintegritt der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht berprfen, weil der Dateihash nicht im System gefunden wurde. Mglicherweise wurde durch eine krzlich durchgefhrte Hardware- oder Softwarenderung eine falsch signierte oder beschdigte Datei oder eine Datei, bei der es sich um schdliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-28 17:11:24.386
  Description: Windows konnte die Abbildintegritt der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht berprfen, weil der Dateihash nicht im System gefunden wurde. Mglicherweise wurde durch eine krzlich durchgefhrte Hardware- oder Softwarenderung eine falsch signierte oder beschdigte Datei oder eine Datei, bei der es sich um schdliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-22 19:23:01.497
  Description: Windows konnte die Abbildintegritt der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht berprfen, weil der Dateihash nicht im System gefunden wurde. Mglicherweise wurde durch eine krzlich durchgefhrte Hardware- oder Softwarenderung eine falsch signierte oder beschdigte Datei oder eine Datei, bei der es sich um schdliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-05-22 19:23:01.295
  Description: Windows konnte die Abbildintegritt der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht berprfen, weil der Dateihash nicht im System gefunden wurde. Mglicherweise wurde durch eine krzlich durchgefhrte Hardware- oder Softwarenderung eine falsch signierte oder beschdigte Datei oder eine Datei, bei der es sich um schdliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 51%
Total physical RAM: 4090.93 MB
Available physical RAM: 1972.74 MB
Total Pagefile: 8180.03 MB
Available Pagefile: 5277.59 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:583.38 GB) (Free:359.71 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 596 GB) (Disk ID: 9BBB9BBB)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=583 GB) - (Type=07 NTFS)

==================== End Of Log ============================
Und ja, ich benutze ein Google Konto.

M-K-D-B 28.05.2014 20:01
Servus,


kommt die Erweiterung Grepo wieder?


Ich knnte mir vorstellen, dass es sich wieder installiert, sobald du dich wieder im Google Konto einloggst, daher empfehle ich dir jetzt folgendes:


Revo Uninstaller - Download - Filepony
damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.google.com/chrome/answer/3296214?hl=de





Gib mir Bescheid, wenn das erledigt ist, dann geht es weiter. :)

Cupa 28.05.2014 20:07
Ok ich schau mal ob sich morgen wieder die Erweiterung runterld.

M-K-D-B 29.05.2014 10:17
Ok, dann gib mir bitte Bescheid. :)

Cupa 29.05.2014 17:40
Okay hab alles gemacht. Die Auswirkungen werden sich warcheinlich erst morgen (30.) zeigen.

M-K-D-B 30.05.2014 14:55
Nochmal FRST bitte:
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition und drcke auf Scan.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nchsten Antwort.

Cupa 30.05.2014 18:53
Okay die Erweiterung ist NICHT gekommen. Logs kommen gleich.


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02
Ran by Dustin2 (administrator) on DUSTINS-PC on 30-05-2014 19:50:13
Running from C:\Users\Dustin2\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AuthenTec, Inc.) C:\Program Files (x86)\Fingerprint Sensor\AtService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\CompPtcVUI.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\BASVC.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
() C:\Program Files (x86)\pc essentials\updater.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
() C:\Windows\PLFSetI.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Akamai Technologies, Inc.) C:\Users\Dustin2\AppData\Local\Akamai\netsession_win.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Hidfind.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(McAfee, Inc.) C:\Program Files\McAfee.com\Agent\mcagent.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Akamai Technologies, Inc.) C:\Users\Dustin2\AppData\Local\Akamai\netsession_win.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-08-07] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-06] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [295936 2009-05-22] (Alps Electric Co., Ltd.)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2008-07-29] ()
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [828960 2009-08-05] (Acer Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-08-21] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [EgisTecLiveUpdate] => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-04] (Egis Technology Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [VitaKeyPdtWzd] => c:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe [3567104 2009-08-06] (Egis Technology Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1194504 2009-08-27] (Dritek System Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [419112 2009-10-06] (CyberLink Corp.)
HKLM-x32\...\Run: [MDS_Menu] => C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [1675160 2012-03-21] (McAfee, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-2972218083-3551369242-1309756512-1006\...\Run: [Akamai NetSession Interface] => C:\Users\Dustin2\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Dustin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Dustin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk
ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (No File)
Startup: C:\Users\Dustin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NH ()
Startup: C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Meine Dienste.lnk
ShortcutTarget: Meine Dienste.lnk -> C:\Program Files\Telekom\Meine Dienste\StartMeineDienste.exe (Deutsche Telekom AG)
Startup: C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {07E4E221-A889-475B-BD66-105D1FF7AAD3} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wiki-tab_internet_std&q={searchTerms}&br=ie10-toi
SearchScopes: HKCU - {2E6179AB-203B-4FF5-AC4E-86534ED8A805} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie10-toi
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {70E2AB1D-B10F-4174-BE89-034529C41867} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=interactivemesuche-21&index=blended&linkCode=ur2&camp=1638&creative=6742
SearchScopes: HKCU - ŸZ’2pvI*X(Ž2s(Jӵ v˰!—(48иpatm6o^Mp`_iw˜!„†x8€j*;a[†8*~Rxœ8'-)x** URL =
BHO: grepo - {28A984B0-844D-48EC-AE42-6682BBB4FD33} - C:\Program Files (x86)\Grepo\grepo_x64.dll (grepo)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120902183112.dll (McAfee, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: grepo - {28A984B0-844D-48EC-AE42-6682BBB4FD33} - C:\Program Files (x86)\Grepo\grepo.dll (grepo)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120902183114.dll (McAfee, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll No File
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @bittorrent.com/BitTorrentDNA - C:\Program Files (x86)\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @live.heroesandgenerals.com/npretox - C:\Program Files (x86)\Heroes & Generals\live\npretoxlive.dll (Reto-Moto ApS)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\progra~2\mcafee\msc\npmcsn~1.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Dustin2\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Dustin2\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Dustin2\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: thehappycloud.com/HappyCloudPlugin - C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFp501.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFp522.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFv501.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: grepo - C:\Users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\grepo@extension [2014-05-29]
FF Extension: Adblock Plus - C:\Users\Dustin2\AppData\Roaming\Mozilla\Firefox\Profiles\mjq9hrep.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-18]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-07-04]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-04-15]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2009-08-22]
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: McAfee ScriptScan for Firefox - C:\Program Files (x86)\Common Files\McAfee\SystemCore [2012-09-02]

Chrome:
=======
CHR HomePage: hxxp://www.youtube.com/
CHR StartupUrls: "hxxp://www.youtube.com/"
CHR Extension: (Google Translate) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2014-05-23]
CHR Extension: (Magic Actions for YouTube™) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2014-05-23]
CHR Extension: (SiteAdvisor) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2013-08-10]
CHR Extension: (AdBlock) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-05-23]
CHR Extension: (Chrome to Mobile) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd [2014-05-23]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2014-02-22]
CHR Extension: (Disconnect) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo [2014-05-23]
CHR Extension: (Google Play) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2014-05-23]
CHR Extension: (Turbo for YouTube) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhgnmngkgolhffjjdaipkkjbmbnpefef [2014-05-23]
CHR Extension: (Ghostery) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2014-05-23]
CHR Extension: (Google Wallet) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Currently) - C:\Users\Dustin2\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojhmphdkpgbibohbnpbfiefkgieacjmh [2014-05-23]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-05-21]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]
CHR StartMenuInternet: Google Chrome - C:\Users\Dustin2\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 ATService; C:\Program Files (x86)\Fingerprint Sensor\AtService.exe [1807608 2009-06-30] (AuthenTec, Inc.)
R2 IGBASVC; c:\Program Files (x86)\Acer Bio Protection\BASVC.exe [3449856 2009-08-06] (Egis Technology Inc.)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [140424 2014-04-23] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 McNASvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [502064 2012-08-23] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [199304 2012-05-25] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [210616 2012-05-25] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [162224 2012-05-25] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [311592 2009-08-07] (Egis Technology Inc.)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [99616 2014-03-05] (Overwolf LTD)
R2 pc essentials; C:\Program Files (x86)\pc essentials\updater.exe [1731072 2013-04-18] ()
S3 TriDefService; C:\Program Files (x86)\TriDef 3D\TriDef\Common\TriDefService.exe [1327104 2009-09-15] ()
S3 Browser7Maintenance; "C:\Program Files (x86)\Browser 7 Maintenance Service\maintenanceservice.exe" [X]
S2 XAMPP; C:\Users\Dustin\Desktop\xampp\service.exe [X]

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [65264 2012-02-22] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [160792 2012-02-22] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [229528 2012-02-22] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [487296 2012-02-22] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [647208 2012-02-22] (McAfee, Inc.)
R1 mfenlfk; C:\Windows\System32\DRIVERS\mfenlfk.sys [75936 2012-02-22] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [100912 2012-02-22] (McAfee, Inc.)
R1 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [289664 2012-02-22] (McAfee, Inc.)
R3 stdriver; C:\Windows\System32\DRIVERS\stdriverx64.sys [32536 2013-03-23] ()
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2010-01-21] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27648 2010-01-21] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33280 2010-01-21] (LG Electronics Inc.)
S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-30 13:31 - 2014-05-30 13:32 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\starcheat
2014-05-30 13:31 - 2014-05-30 13:31 - 00000000 ____D () C:\Users\Dustin2\Desktop\starcheat-0.15
2014-05-30 13:28 - 2014-05-30 13:30 - 22537944 _____ () C:\Users\Dustin2\Downloads\starcheat-0.15.zip
2014-05-29 20:22 - 2014-05-29 20:22 - 00000000 ____D () C:\Users\Dustin2\Desktop\Starbound EasyCharacterDelete v2.4.2.3 by Xxshark888xX
2014-05-29 20:17 - 2014-05-29 20:17 - 00078464 _____ () C:\Users\Dustin2\Downloads\Starbound EasyCharacterDelete v2.4.2.3 by Xxshark888xX.rar
2014-05-29 20:17 - 2014-05-29 20:17 - 00033996 _____ () C:\Users\Dustin2\Downloads\bulldozer.zip
2014-05-29 20:17 - 2014-05-29 20:17 - 00008295 _____ () C:\Users\Dustin2\Downloads\MiningLaser.zip
2014-05-29 20:17 - 2014-05-29 20:17 - 00006030 _____ () C:\Users\Dustin2\Downloads\MoarOrePack1.3.zip
2014-05-29 19:43 - 2014-05-29 19:43 - 00089148 _____ () C:\Users\Dustin2\Downloads\HoleDrillv0.9.2.zip
2014-05-29 19:42 - 2014-05-29 19:43 - 08276947 _____ () C:\Users\Dustin2\Downloads\Q_MM_Full_v1.10.zip
2014-05-29 19:42 - 2014-05-29 19:42 - 02292626 _____ () C:\Users\Dustin2\Downloads\ArcaneAddOns_1_9_02_EK.zip
2014-05-29 19:37 - 2014-05-29 19:37 - 01982716 _____ () C:\Users\Dustin2\Downloads\Industrialization v0.8.2 BETA.zip
2014-05-29 15:14 - 2014-05-29 15:14 - 00029865 _____ () C:\Users\Dustin2\Downloads\Planetside Teleporters v2.11.zip
2014-05-29 14:28 - 2014-05-29 14:28 - 03823481 _____ () C:\Users\Dustin2\Downloads\Dungeoneer Dungeons v0.7.6.zip
2014-05-29 14:28 - 2014-05-29 14:28 - 00657081 _____ () C:\Users\Dustin2\Downloads\Electric Home Defense 1.8.1.zip
2014-05-29 14:28 - 2014-05-29 14:28 - 00016820 _____ () C:\Users\Dustin2\Downloads\jte_farming1.03ek20140228.zip
2014-05-29 14:27 - 2014-05-29 14:27 - 04513761 _____ () C:\Users\Dustin2\Downloads\madtulip_Rev_608.zip
2014-05-29 14:27 - 2014-05-29 14:27 - 01687155 _____ () C:\Users\Dustin2\Downloads\CreativeMode1-2-2.zip
2014-05-28 19:24 - 2014-05-29 14:05 - 00000000 ____D () C:\Program Files (x86)\Grepo
2014-05-28 19:02 - 2014-05-28 19:02 - 00026466 _____ () C:\Users\Dustin2\Downloads\FCSModV1.1.EK.zip
2014-05-28 18:20 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-28 18:18 - 2014-05-28 18:18 - 01327971 _____ () C:\Users\Dustin2\Downloads\adwcleaner_3.211.exe
2014-05-28 18:18 - 2014-05-28 18:18 - 01327971 _____ () C:\Users\Dustin2\Desktop\adwcleaner_3.211.exe
2014-05-28 17:54 - 2014-05-28 17:54 - 00036107 _____ () C:\ComboFix.txt
2014-05-28 17:11 - 2014-05-28 17:11 - 00001322 _____ () C:\CF-Submit.htm
2014-05-24 18:35 - 2014-05-24 18:35 - 00000222 _____ () C:\Users\Dustin2\Desktop\Starbound.url
2014-05-24 15:32 - 2014-05-24 15:52 - 00064382 _____ () C:\Users\Dustin2\Downloads\SystemLook.txt
2014-05-24 15:32 - 2014-05-24 15:32 - 00165376 _____ () C:\Users\Dustin2\Downloads\SystemLook_x64.exe
2014-05-23 22:33 - 2014-05-23 22:33 - 00000034 _____ () C:\Users\Dustin2\Downloads\winamp-dsl.m3u
2014-05-23 18:47 - 2014-05-28 18:37 - 00071409 _____ () C:\Users\Dustin2\Desktop\Addition.txt
2014-05-23 18:23 - 2014-05-23 17:33 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-05-23 18:22 - 2014-05-23 18:22 - 00000084 _____ () C:\folders.txt
2014-05-23 17:52 - 2014-05-23 18:31 - 00026273 _____ () C:\zoek-results.log
2014-05-23 15:26 - 2014-05-23 18:17 - 00000000 ____D () C:\zoek_backup
2014-05-23 15:26 - 2014-05-23 15:26 - 01285120 _____ () C:\Users\Dustin2\Downloads\zoek.exe
2014-05-23 14:51 - 2014-05-23 14:51 - 00000695 _____ () C:\Users\Dustin2\Desktop\JRT.txt
2014-05-23 14:37 - 2014-04-06 08:36 - 01016261 _____ (Thisisu) C:\Users\Dustin2\Desktop\JRT_NEW.exe
2014-05-22 20:51 - 2014-05-22 20:51 - 01326389 _____ () C:\Users\Dustin2\Downloads\adwcleaner_3.210.exe
2014-05-22 17:58 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-22 17:58 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-22 17:58 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-22 17:58 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-22 17:48 - 2014-05-28 18:04 - 00000000 ____D () C:\Qoobox
2014-05-22 17:46 - 2014-05-22 19:55 - 00000000 ____D () C:\Windows\erdnt
2014-05-22 17:34 - 2014-05-28 17:03 - 05203612 ____R (Swearware) C:\Users\Dustin2\Desktop\ComboFix.exe
2014-05-22 17:34 - 2014-05-22 17:34 - 05200426 _____ (Swearware) C:\Users\Dustin2\Downloads\ComboFix.exe
2014-05-22 17:00 - 2014-05-22 17:00 - 00000031 _____ () C:\Users\Dustin2\Downloads\tune_in_dsl.m3u
2014-05-15 16:42 - 2014-05-16 17:20 - 00000000 ____D () C:\Users\Dustin2\Documents\RPGVXAce
2014-05-15 15:22 - 2014-05-15 15:22 - 00001188 _____ () C:\Users\Public\Desktop\RPG MAKER VX Ace Lite.lnk
2014-05-15 15:22 - 2014-05-15 15:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RPG MAKER VX Ace Lite
2014-05-15 15:21 - 2014-05-15 15:21 - 00000000 ____D () C:\Users\Dustin2\Desktop\rpg-maker-vx-ace-lite
2014-05-15 15:12 - 2014-05-15 15:13 - 00773686 _____ () C:\Users\Dustin2\Downloads\VXAceWallpaperThing1024withlogo.zip
2014-05-15 15:10 - 2014-05-15 15:11 - 01049372 _____ () C:\Users\Dustin2\Downloads\VXAceWallpaperThing1280withlogo.zip
2014-05-15 15:09 - 2014-05-15 15:20 - 109892162 _____ () C:\Users\Dustin2\Downloads\rpg-maker-vx-ace-lite.zip
2014-05-14 11:33 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-14 11:33 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-14 11:33 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 11:32 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-14 11:32 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-14 11:32 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-14 10:32 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 10:32 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 10:32 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 10:32 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 10:29 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 10:29 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 10:29 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 10:29 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 10:29 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 10:29 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 10:29 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 10:29 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 10:29 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 10:29 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 10:29 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 10:29 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 10:29 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 10:29 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 10:29 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 10:29 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 10:29 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 10:29 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 10:29 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-10 15:05 - 2014-05-10 15:05 - 00015496 _____ () C:\Users\Dustin2\Downloads\NewCommands.jar
2014-05-10 14:49 - 2014-05-10 14:49 - 00006097 _____ () C:\Users\Dustin2\Downloads\kCommand_1.4.jar
2014-05-05 19:31 - 2014-05-10 22:51 - 00000607 _____ () C:\Users\Dustin2\Desktop\Habbo Missis.txt
2014-05-05 19:31 - 2014-05-05 19:31 - 00000000 ____D () C:\Users\Dustin2\Desktop\BIGMacroTool
2014-05-03 23:55 - 2014-05-03 23:55 - 00000000 ____D () C:\Program Files (x86)\BigMacroTool
2014-05-03 23:54 - 2014-05-03 23:54 - 00603961 _____ (TLProd ) C:\Users\Dustin2\Downloads\bigmacrotoolsetup.exe
2014-05-03 23:52 - 2014-05-03 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macro Recorder
2014-05-03 23:52 - 2014-05-03 23:52 - 00000000 ____D () C:\Program Files (x86)\MacroRecorder
2014-05-03 23:51 - 2014-05-03 23:51 - 00720656 _____ (Jitbit Software ) C:\Users\Dustin2\Downloads\MacroRecorderSetup.exe
2014-05-02 19:34 - 2014-05-02 19:34 - 00158576 _____ () C:\Users\Dustin2\Downloads\TukMC[3.2.5].zip
2014-05-02 18:46 - 2014-05-02 18:46 - 00065601 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2-api_2.0.397-experimental (1).zip
2014-05-02 18:45 - 2014-05-02 18:46 - 03699473 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2_2.0.397-experimental.jar
2014-05-02 18:45 - 2014-05-02 18:45 - 00065601 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2-api_2.0.397-experimental.zip
2014-04-30 21:16 - 2014-05-14 15:40 - 00000000 ___SD () C:\Windows\system32\CompatTel

==================== One Month Modified Files and Folders =======

2014-05-30 19:50 - 2014-03-09 18:46 - 00032631 _____ () C:\Users\Dustin2\Desktop\FRST.txt
2014-05-30 19:50 - 2014-03-03 17:48 - 00000000 ____D () C:\FRST
2014-05-30 19:46 - 2012-08-03 16:13 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-30 19:26 - 2013-11-06 17:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-30 19:20 - 2009-07-14 06:51 - 00310166 _____ () C:\Windows\setupact.log
2014-05-30 19:14 - 2010-04-25 13:50 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-30 19:12 - 2012-07-27 13:13 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006UA.job
2014-05-30 19:03 - 2009-11-04 14:15 - 01961899 _____ () C:\Windows\WindowsUpdate.log
2014-05-30 19:02 - 2012-03-30 16:51 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000UA.job
2014-05-30 18:04 - 2009-07-14 06:45 - 00017376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-30 18:04 - 2009-07-14 06:45 - 00017376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-30 18:01 - 2013-02-02 11:10 - 00001832 _____ () C:\Users\Public\Desktop\McAfee Internet Security Suite.lnk
2014-05-30 17:55 - 2013-08-14 20:22 - 00000000 ____D () C:\Users\Dustin2\AppData\Local\TSVNCache
2014-05-30 17:54 - 2011-09-19 08:43 - 00000437 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-05-30 17:54 - 2010-04-25 13:50 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-30 17:53 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-30 15:12 - 2012-07-27 13:13 - 00001076 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006Core.job
2014-05-30 15:02 - 2012-03-30 16:51 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1000Core.job
2014-05-30 13:32 - 2014-05-30 13:31 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\starcheat
2014-05-30 13:31 - 2014-05-30 13:31 - 00000000 ____D () C:\Users\Dustin2\Desktop\starcheat-0.15
2014-05-30 13:30 - 2014-05-30 13:28 - 22537944 _____ () C:\Users\Dustin2\Downloads\starcheat-0.15.zip
2014-05-29 20:42 - 2012-11-13 19:50 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{B3019771-99BB-46F9-8D8E-A65277738BB5}
2014-05-29 20:22 - 2014-05-29 20:22 - 00000000 ____D () C:\Users\Dustin2\Desktop\Starbound EasyCharacterDelete v2.4.2.3 by Xxshark888xX
2014-05-29 20:21 - 2013-03-24 15:38 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\FileZilla
2014-05-29 20:17 - 2014-05-29 20:17 - 00078464 _____ () C:\Users\Dustin2\Downloads\Starbound EasyCharacterDelete v2.4.2.3 by Xxshark888xX.rar
2014-05-29 20:17 - 2014-05-29 20:17 - 00033996 _____ () C:\Users\Dustin2\Downloads\bulldozer.zip
2014-05-29 20:17 - 2014-05-29 20:17 - 00008295 _____ () C:\Users\Dustin2\Downloads\MiningLaser.zip
2014-05-29 20:17 - 2014-05-29 20:17 - 00006030 _____ () C:\Users\Dustin2\Downloads\MoarOrePack1.3.zip
2014-05-29 19:43 - 2014-05-29 19:43 - 00089148 _____ () C:\Users\Dustin2\Downloads\HoleDrillv0.9.2.zip
2014-05-29 19:43 - 2014-05-29 19:42 - 08276947 _____ () C:\Users\Dustin2\Downloads\Q_MM_Full_v1.10.zip
2014-05-29 19:42 - 2014-05-29 19:42 - 02292626 _____ () C:\Users\Dustin2\Downloads\ArcaneAddOns_1_9_02_EK.zip
2014-05-29 19:37 - 2014-05-29 19:37 - 01982716 _____ () C:\Users\Dustin2\Downloads\Industrialization v0.8.2 BETA.zip
2014-05-29 15:14 - 2014-05-29 15:14 - 00029865 _____ () C:\Users\Dustin2\Downloads\Planetside Teleporters v2.11.zip
2014-05-29 14:28 - 2014-05-29 14:28 - 03823481 _____ () C:\Users\Dustin2\Downloads\Dungeoneer Dungeons v0.7.6.zip
2014-05-29 14:28 - 2014-05-29 14:28 - 00657081 _____ () C:\Users\Dustin2\Downloads\Electric Home Defense 1.8.1.zip
2014-05-29 14:28 - 2014-05-29 14:28 - 00016820 _____ () C:\Users\Dustin2\Downloads\jte_farming1.03ek20140228.zip
2014-05-29 14:27 - 2014-05-29 14:27 - 04513761 _____ () C:\Users\Dustin2\Downloads\madtulip_Rev_608.zip
2014-05-29 14:27 - 2014-05-29 14:27 - 01687155 _____ () C:\Users\Dustin2\Downloads\CreativeMode1-2-2.zip
2014-05-29 14:05 - 2014-05-28 19:24 - 00000000 ____D () C:\Program Files (x86)\Grepo
2014-05-28 19:02 - 2014-05-28 19:02 - 00026466 _____ () C:\Users\Dustin2\Downloads\FCSModV1.1.EK.zip
2014-05-28 18:37 - 2014-05-23 18:47 - 00071409 _____ () C:\Users\Dustin2\Desktop\Addition.txt
2014-05-28 18:23 - 2009-08-22 10:34 - 01449366 _____ () C:\Windows\PFRO.log
2014-05-28 18:21 - 2014-03-06 18:03 - 00000000 ____D () C:\AdwCleaner
2014-05-28 18:18 - 2014-05-28 18:18 - 01327971 _____ () C:\Users\Dustin2\Downloads\adwcleaner_3.211.exe
2014-05-28 18:18 - 2014-05-28 18:18 - 01327971 _____ () C:\Users\Dustin2\Desktop\adwcleaner_3.211.exe
2014-05-28 18:04 - 2014-05-22 17:48 - 00000000 ____D () C:\Qoobox
2014-05-28 17:54 - 2014-05-28 17:54 - 00036107 _____ () C:\ComboFix.txt
2014-05-28 17:43 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-05-28 17:11 - 2014-05-28 17:11 - 00001322 _____ () C:\CF-Submit.htm
2014-05-28 17:03 - 2014-05-22 17:34 - 05203612 ____R (Swearware) C:\Users\Dustin2\Desktop\ComboFix.exe
2014-05-26 17:16 - 2014-03-09 18:46 - 02066944 _____ (Farbar) C:\Users\Dustin2\Desktop\FRST64.exe
2014-05-25 13:56 - 2013-08-17 12:47 - 00000000 ____D () C:\Users\Uwe\AppData\Local\TSVNCache
2014-05-25 13:44 - 2012-10-09 13:08 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{DDA221F5-94E0-4BB6-BDA5-D7912CCC2ACC}
2014-05-24 22:19 - 2012-07-27 13:20 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\Skype
2014-05-24 19:55 - 2009-11-04 14:30 - 00128883 _____ () C:\Windows\DirectX.log
2014-05-24 18:35 - 2014-05-24 18:35 - 00000222 _____ () C:\Users\Dustin2\Desktop\Starbound.url
2014-05-24 15:52 - 2014-05-24 15:32 - 00064382 _____ () C:\Users\Dustin2\Downloads\SystemLook.txt
2014-05-24 15:32 - 2014-05-24 15:32 - 00165376 _____ () C:\Users\Dustin2\Downloads\SystemLook_x64.exe
2014-05-23 22:33 - 2014-05-23 22:33 - 00000034 _____ () C:\Users\Dustin2\Downloads\winamp-dsl.m3u
2014-05-23 18:31 - 2014-05-23 17:52 - 00026273 _____ () C:\zoek-results.log
2014-05-23 18:22 - 2014-05-23 18:22 - 00000084 _____ () C:\folders.txt
2014-05-23 18:17 - 2014-05-23 15:26 - 00000000 ____D () C:\zoek_backup
2014-05-23 17:33 - 2014-05-23 18:23 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-05-23 15:26 - 2014-05-23 15:26 - 01285120 _____ () C:\Users\Dustin2\Downloads\zoek.exe
2014-05-23 14:51 - 2014-05-23 14:51 - 00000695 _____ () C:\Users\Dustin2\Desktop\JRT.txt
2014-05-22 20:51 - 2014-05-22 20:51 - 01326389 _____ () C:\Users\Dustin2\Downloads\adwcleaner_3.210.exe
2014-05-22 20:17 - 2012-07-27 13:16 - 00002376 _____ () C:\Users\Dustin2\Desktop\Google Chrome.lnk
2014-05-22 19:55 - 2014-05-22 17:46 - 00000000 ____D () C:\Windows\erdnt
2014-05-22 19:42 - 2009-07-14 04:34 - 99352576 _____ () C:\Windows\system32\config\software.bak
2014-05-22 19:42 - 2009-07-14 04:34 - 25427968 _____ () C:\Windows\system32\config\system.bak
2014-05-22 19:42 - 2009-07-14 04:34 - 02097152 _____ () C:\Windows\system32\config\default.bak
2014-05-22 19:42 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\security.bak
2014-05-22 19:42 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak
2014-05-22 19:24 - 2012-07-27 13:00 - 00000000 ____D () C:\Users\Dustin2
2014-05-22 19:23 - 2009-11-04 14:16 - 00000000 ____D () C:\Program Files (x86)\Acer Bio Protection
2014-05-22 17:34 - 2014-05-22 17:34 - 05200426 _____ (Swearware) C:\Users\Dustin2\Downloads\ComboFix.exe
2014-05-22 17:00 - 2014-05-22 17:00 - 00000031 _____ () C:\Users\Dustin2\Downloads\tune_in_dsl.m3u
2014-05-22 14:09 - 2009-08-22 07:29 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-05-20 11:17 - 2012-09-09 15:37 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\.minecraft
2014-05-16 17:20 - 2014-05-15 16:42 - 00000000 ____D () C:\Users\Dustin2\Documents\RPGVXAce
2014-05-15 15:22 - 2014-05-15 15:22 - 00001188 _____ () C:\Users\Public\Desktop\RPG MAKER VX Ace Lite.lnk
2014-05-15 15:22 - 2014-05-15 15:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RPG MAKER VX Ace Lite
2014-05-15 15:22 - 2013-08-06 16:49 - 00000000 ____D () C:\Program Files (x86)\Enterbrain
2014-05-15 15:21 - 2014-05-15 15:21 - 00000000 ____D () C:\Users\Dustin2\Desktop\rpg-maker-vx-ace-lite
2014-05-15 15:20 - 2014-05-15 15:09 - 109892162 _____ () C:\Users\Dustin2\Downloads\rpg-maker-vx-ace-lite.zip
2014-05-15 15:13 - 2014-05-15 15:12 - 00773686 _____ () C:\Users\Dustin2\Downloads\VXAceWallpaperThing1024withlogo.zip
2014-05-15 15:11 - 2014-05-15 15:10 - 01049372 _____ () C:\Users\Dustin2\Downloads\VXAceWallpaperThing1280withlogo.zip
2014-05-15 00:47 - 2012-06-10 16:49 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-15 00:47 - 2012-06-10 16:49 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-14 18:27 - 2013-11-06 17:57 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 18:27 - 2012-07-06 04:24 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 18:27 - 2011-06-16 16:54 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 16:23 - 2012-12-05 18:21 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\FTB-Launcher
2014-05-14 15:53 - 2012-07-27 13:00 - 00000000 ___RD () C:\Users\Dustin2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-14 15:53 - 2012-07-27 13:00 - 00000000 ___RD () C:\Users\Dustin2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-14 15:40 - 2014-04-30 21:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-14 11:31 - 2009-08-22 10:35 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-14 11:29 - 2013-07-13 14:47 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-14 11:23 - 2010-05-02 22:09 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 10:18 - 2013-12-08 14:32 - 00000000 ____D () C:\Program Files (x86)\Deutsche Telekom AG
2014-05-10 22:51 - 2014-05-05 19:31 - 00000607 _____ () C:\Users\Dustin2\Desktop\Habbo Missis.txt
2014-05-10 15:13 - 2012-08-24 19:24 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\TS3Client
2014-05-10 15:07 - 2012-07-27 13:13 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006UA
2014-05-10 15:07 - 2012-07-27 13:13 - 00003706 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2972218083-3551369242-1309756512-1006Core
2014-05-10 15:05 - 2014-05-10 15:05 - 00015496 _____ () C:\Users\Dustin2\Downloads\NewCommands.jar
2014-05-10 14:49 - 2014-05-10 14:49 - 00006097 _____ () C:\Users\Dustin2\Downloads\kCommand_1.4.jar
2014-05-09 08:14 - 2014-05-14 10:32 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 10:32 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-06 17:09 - 2010-04-25 13:50 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-06 17:09 - 2010-04-25 13:50 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-06 06:40 - 2014-05-14 11:33 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-14 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-14 11:32 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-14 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-14 11:33 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-14 11:33 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-05 19:31 - 2014-05-05 19:31 - 00000000 ____D () C:\Users\Dustin2\Desktop\BIGMacroTool
2014-05-05 16:02 - 2012-12-05 18:03 - 00000000 ____D () C:\Users\Dustin2\AppData\Roaming\ftblauncher
2014-05-03 23:55 - 2014-05-03 23:55 - 00000000 ____D () C:\Program Files (x86)\BigMacroTool
2014-05-03 23:54 - 2014-05-03 23:54 - 00603961 _____ (TLProd ) C:\Users\Dustin2\Downloads\bigmacrotoolsetup.exe
2014-05-03 23:52 - 2014-05-03 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macro Recorder
2014-05-03 23:52 - 2014-05-03 23:52 - 00000000 ____D () C:\Program Files (x86)\MacroRecorder
2014-05-03 23:51 - 2014-05-03 23:51 - 00720656 _____ (Jitbit Software ) C:\Users\Dustin2\Downloads\MacroRecorderSetup.exe
2014-05-02 19:34 - 2014-05-02 19:34 - 00158576 _____ () C:\Users\Dustin2\Downloads\TukMC[3.2.5].zip
2014-05-02 18:46 - 2014-05-02 18:46 - 00065601 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2-api_2.0.397-experimental (1).zip
2014-05-02 18:46 - 2014-05-02 18:45 - 03699473 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2_2.0.397-experimental.jar
2014-05-02 18:45 - 2014-05-02 18:45 - 00065601 _____ () C:\Users\Dustin2\Downloads\industrialcraft-2-api_2.0.397-experimental.zip

Some content of TEMP:
====================
C:\Users\Dustin2\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-22 21:14

==================== End Of Log ============================
--- --- ---

--- --- ---


Alle Zeitangaben in WEZ +1. Es ist jetzt 00:03 Uhr.
Seite 2 von 4 1 2 34
100 Beitrge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131