API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 25th, 2014
251
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 41.36 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-07-2014 01
  2. Ran by PAUL (administrator) on HAL-9000 on 25-07-2014 19:30:08
  3. Running from C:\Users\PAUL\Desktop\Mailware
  4. Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
  5. Internet Explorer Version 11
  6. Boot Mode: Normal
  7.  
  8. The only official download link for FRST:
  9. Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
  10. Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
  11. Download link from any site other than Bleeping Computer is unpermitted or outdated.
  12. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  13.  
  14. ==================== Processes (Whitelisted) =================
  15.  
  16. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  17.  
  18. (Lenovo.) C:\Windows\System32\ibmpmsvc.exe
  19. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  20. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  21. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  22. (Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
  23. (Microsoft Corporation) C:\Windows\System32\wlanext.exe
  24. (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
  25. (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
  26. (Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
  27. (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
  28. (Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
  29. () C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
  30. (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
  31. (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe
  32. () C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
  33. (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
  34. (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
  35. (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
  36. (Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
  37. (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
  38. (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
  39. (Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
  40. (Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
  41. (Motorola) C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
  42. (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
  43. () C:\Windows\System32\mstcntrs.exe
  44. (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
  45. (Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio64.exe
  46. (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
  47. (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
  48. (CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
  49. (Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
  50. (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
  51. (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
  52. (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
  53. (Lenovo Group Limited) C:\Program Files\Lenovo\ZOOM\TpScrex.exe
  54. (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
  55. (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
  56. () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
  57. (Lenovo.) C:\Windows\System32\TpShocks.exe
  58. (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
  59. (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
  60. (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
  61. (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
  62. (Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
  63. (Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
  64. (Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
  65. (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
  66. (Portrait Displays, Inc) C:\Program Files (x86)\Portrait Displays\HP My Display\dthtml.exe
  67. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  68. (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
  69. (Microsoft Corporation) C:\Windows\System32\rundll32.exe
  70. (Portrait Displays Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\HookManager.exe
  71. (Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
  72. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  73. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  74. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  75. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  76. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  77. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  78. (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
  79. (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
  80. (Microsoft Corporation) C:\Windows\System32\rundll32.exe
  81. (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
  82. (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
  83. (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
  84. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  85. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  86.  
  87.  
  88. ==================== Registry (Whitelisted) ==================
  89.  
  90. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  91.  
  92. HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [438784 2010-12-17] ()
  93. HKLM\...\Run: [TpShocks] => TpShocks.exe
  94. HKLM\...\Run: [AcWin7Hlpr] => C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63832 2013-12-27] (Lenovo)
  95. HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [248320 2009-12-03] (Alps Electric Co., Ltd.)
  96. HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
  97. HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2722080 2013-09-05] ()
  98. HKLM\...\Run: [PSQLLauncher] => C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [86312 2013-03-05] (Authentec Inc.)
  99. HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
  100. HKLM-x32\...\Run: [SoundMAXPnP] => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1314816 2009-05-18] (Analog Devices, Inc.)
  101. HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
  102. HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
  103. HKLM-x32\...\Run: [] => [X]
  104. HKLM-x32\...\Run: [DT HPW] => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [86016 2009-10-06] ()
  105. HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
  106. HKLM-x32\...\Run: [Bonus.SSR.FR11] => C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [933640 2012-01-19] (ABBYY.)
  107. HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor
  108. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
  109. HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-03] (Avira Operations GmbH & Co. KG)
  110. Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
  111. Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.)
  112. HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
  113. HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
  114. HKU\S-1-5-21-880213145-57001013-3768279162-1000\...\Run: [Google Update] => C:\Users\PAUL\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-09] (Google Inc.)
  115. HKU\S-1-5-21-880213145-57001013-3768279162-1000\...\Run: [Speech Recognition] => C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation)
  116. Lsa: [Notification Packages] scecli ACGina C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
  117. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
  118. ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
  119. GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
  120.  
  121. ==================== Internet (Whitelisted) ====================
  122.  
  123. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  124.  
  125. HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/?hl=de&gl=de
  126. StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
  127. SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
  128. SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
  129. SearchScopes: HKLM-x32 - DefaultScope value is missing.
  130. SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  131. BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
  132. BHO: IePasswordManagerHelper Class -> {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} -> C:\Program Files\Lenovo\Password Manager\tvtpwm_ie_com.dll (Lenovo Group Limited)
  133. BHO: DownloadProtect Extension -> {C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} -> C:\Program Files\{CAC9EFB5-4F70-4EDE-A049-A412D9A1075B}\{87EDDB32-D7FA-4FDB-A735-B25763682037}.bin (Download Protect)
  134. BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
  135. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  136. BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
  137. BHO-x32: IePasswordManagerHelper Class -> {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} -> C:\Program Files (x86)\Lenovo\Password Manager\tvtpwm_ie_com.dll (Lenovo Group Limited)
  138. BHO-x32: DownloadProtect Extension -> {C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} -> C:\Program Files (x86)\{7253BAE9-9C31-4697-89ED-1A8C78DC192E}\{CEDCB182-6F48-496A-B42D-6AE9F0BBD095}.bin (Download Protect)
  139. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  140. BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  141. DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
  142. Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
  143.  
  144. FireFox:
  145. ========
  146. FF Plugin: @microsoft.com/GENUINE - disabled No File
  147. FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  148. FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  149. FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  150. FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  151. FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  152. FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
  153. FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
  154. FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  155. FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  156. FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
  157. FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
  158. FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
  159. FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
  160. FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  161. FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
  162. FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\PAUL\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
  163. FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\PAUL\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
  164. FF HKLM-x32\...\Firefox\Extensions: [{5960B094-9894-4CB6-8555-77E5440285A3}] - C:\Windows\Installer\{0D055583-FA89-496D-8684-C63CC7004BF5}\{5960B094-9894-4CB6-8555-77E5440285A3}.xpi
  165. FF Extension: Download Protect - C:\Windows\Installer\{0D055583-FA89-496D-8684-C63CC7004BF5}\{5960B094-9894-4CB6-8555-77E5440285A3}.xpi [2014-07-25]
  166.  
  167. Chrome:
  168. =======
  169. CHR Extension: (Download Protect) - C:\Users\PAUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjhjoemoechogmnomaebajbikjbicafe [2014-07-25]
  170. CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
  171.  
  172. ==================== Services (Whitelisted) =================
  173.  
  174. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  175.  
  176. R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [111616 2008-07-15] (Andrea Electronics Corporation)
  177. R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-03] (Avira Operations GmbH & Co. KG)
  178. R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-03] (Avira Operations GmbH & Co. KG)
  179. R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1030224 2014-07-17] (Avira Operations GmbH & Co. KG)
  180. R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64624 2014-06-12] (CyberGhost S.R.L)
  181. R2 CLHNServiceForPowerDVD; C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [83240 2011-05-19] ()
  182. R2 CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [70952 2011-05-12] (CyberLink)
  183. R2 CyberLink PowerDVD 11.0 Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe [312616 2011-05-12] (CyberLink)
  184. S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [320560 2013-12-09] (Lenovo.)
  185. R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe [69632 2009-10-06] () [File not signed]
  186. S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
  187. S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [1663880 2014-05-06] ()
  188. R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
  189. R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
  190. R2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528 2013-11-15] (Motorola Mobility LLC)
  191. R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
  192. R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
  193. R2 PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed]
  194. R2 SebrchProtocolHost; C:\Windows\system32\mstcntrs.exe [118784 2013-12-23] () [File not signed]
  195. S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24120 2014-02-21] ()
  196.  
  197. ==================== Drivers (Whitelisted) ====================
  198.  
  199. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  200.  
  201. R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG)
  202. R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-06-06] (Avira Operations GmbH & Co. KG)
  203. R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG)
  204. R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [42040 2014-07-17] (Avira Operations GmbH & Co. KG)
  205. R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
  206. R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-25] (Malwarebytes Corporation)
  207. R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
  208. R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20592 2010-05-14] (Portrait Displays, Inc.)
  209. R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.)
  210. R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-30] (Lenovo Information Product(ShenZhen China) Inc.)
  211. U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
  212. R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [148976 2011-05-20] (CyberLink Corp.)
  213. S3 motccgp; system32\DRIVERS\motccgp.sys [X]
  214. S3 motccgpfl; system32\DRIVERS\motccgpfl.sys [X]
  215. S3 MotDev; system32\DRIVERS\motodrv.sys [X]
  216.  
  217. ==================== NetSvcs (Whitelisted) ===================
  218.  
  219. (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
  220.  
  221.  
  222. ==================== One Month Created Files and Folders ========
  223.  
  224. (If an entry is included in the fixlist, the file\folder will be moved.)
  225.  
  226. 2014-07-25 19:02 - 2014-07-25 19:02 - 00000000 ____D () C:\Program Files\{CAC9EFB5-4F70-4EDE-A049-A412D9A1075B}
  227. 2014-07-25 19:02 - 2014-07-25 19:02 - 00000000 ____D () C:\Program Files (x86)\{7253BAE9-9C31-4697-89ED-1A8C78DC192E}
  228. 2014-07-25 18:02 - 2014-07-25 18:02 - 00448512 _____ (OldTimer Tools) C:\Users\PAUL\Downloads\TFC.exe
  229. 2014-07-25 17:33 - 2014-07-25 17:33 - 00002243 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
  230. 2014-07-25 17:33 - 2014-07-25 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
  231. 2014-07-25 17:31 - 2014-07-25 19:00 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  232. 2014-07-25 17:31 - 2014-07-25 18:36 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  233. 2014-07-25 17:31 - 2014-07-25 17:31 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
  234. 2014-07-25 17:31 - 2014-07-25 17:31 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
  235. 2014-07-25 15:34 - 2014-07-25 17:20 - 00000000 ____D () C:\Users\PAUL\Desktop\Sicherung
  236. 2014-07-25 14:51 - 2014-07-25 14:53 - 00048168 _____ () C:\Users\PAUL\Downloads\Addition.txt
  237. 2014-07-25 14:49 - 2014-07-25 19:30 - 00000000 ____D () C:\FRST
  238. 2014-07-25 14:49 - 2014-07-25 14:53 - 00051552 _____ () C:\Users\PAUL\Downloads\FRST.txt
  239. 2014-07-25 11:30 - 2014-07-25 19:26 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  240. 2014-07-25 11:30 - 2014-07-25 11:30 - 00001098 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  241. 2014-07-25 11:30 - 2014-07-25 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  242. 2014-07-25 11:30 - 2014-07-25 11:30 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
  243. 2014-07-25 11:30 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
  244. 2014-07-25 11:30 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
  245. 2014-07-25 11:30 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
  246. 2014-07-25 11:21 - 2014-07-25 11:20 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
  247. 2014-07-25 11:20 - 2014-07-25 11:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  248. 2014-07-25 11:20 - 2014-07-25 11:20 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
  249. 2014-07-25 11:20 - 2014-07-25 11:20 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
  250. 2014-07-25 11:20 - 2014-07-25 11:20 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
  251. 2014-07-25 11:20 - 2014-07-25 11:20 - 00000000 ____D () C:\Program Files (x86)\Java
  252. 2014-07-25 11:12 - 2014-07-25 11:12 - 00000000 ____D () C:\Users\PAUL\Desktop\Perry Rhodan_NEO_Episode_48_Der Glanz des Imperiums
  253. 2014-07-25 11:09 - 2014-07-25 19:30 - 00000000 ____D () C:\Users\PAUL\Desktop\Mailware
  254. 2014-07-24 15:56 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
  255. 2014-07-24 15:54 - 2014-07-24 15:54 - 00000851 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Uninstall 6.lnk
  256. 2014-07-24 15:54 - 2014-07-24 15:54 - 00000839 _____ () C:\Users\Public\Desktop\Total Uninstall 6.lnk
  257. 2014-07-24 15:54 - 2014-07-24 15:54 - 00000000 ____D () C:\ProgramData\Martau
  258. 2014-07-24 15:54 - 2014-07-24 15:54 - 00000000 ____D () C:\Program Files\Total Uninstall 6
  259. 2014-07-24 13:04 - 2014-07-24 13:04 - 00002018 _____ () C:\Users\PAUL\Desktop\Entfernen des Avira EU-Cleaners.lnk
  260. 2014-07-24 13:04 - 2014-07-24 13:04 - 00001962 _____ () C:\Users\PAUL\Desktop\Avira EU-Cleaner.lnk
  261. 2014-07-24 12:49 - 2014-07-24 12:49 - 00001260 _____ () C:\Users\PAUL\Desktop\Revo Uninstaller.lnk
  262. 2014-07-24 12:49 - 2014-07-24 12:49 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
  263. 2014-07-23 08:46 - 2014-07-23 08:46 - 00004623 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
  264. 2014-07-09 13:55 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
  265. 2014-07-09 13:55 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
  266. 2014-07-09 13:55 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
  267. 2014-07-09 13:55 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
  268. 2014-07-09 13:55 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  269. 2014-07-09 13:55 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
  270. 2014-07-09 13:55 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
  271. 2014-07-09 13:55 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
  272. 2014-07-09 13:54 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  273. 2014-07-09 13:54 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  274. 2014-07-09 13:54 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  275. 2014-07-09 13:54 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  276. 2014-07-09 13:54 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  277. 2014-07-09 13:54 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  278. 2014-07-09 13:54 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  279. 2014-07-09 13:54 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  280. 2014-07-09 13:54 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  281. 2014-07-09 13:54 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  282. 2014-07-09 13:54 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  283. 2014-07-09 13:54 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  284. 2014-07-09 13:54 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  285. 2014-07-09 13:54 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  286. 2014-07-09 13:54 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  287. 2014-07-09 13:54 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  288. 2014-07-09 13:54 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  289. 2014-07-09 13:54 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  290. 2014-07-09 13:54 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  291. 2014-07-09 13:54 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  292. 2014-07-09 13:54 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  293. 2014-07-09 13:54 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  294. 2014-07-09 13:54 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  295. 2014-07-09 13:54 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  296. 2014-07-09 13:54 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  297. 2014-07-09 13:54 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  298. 2014-07-09 13:54 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  299. 2014-07-09 13:54 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
  300. 2014-07-09 13:54 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
  301. 2014-07-09 13:54 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  302. 2014-07-09 13:54 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  303. 2014-07-09 13:54 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  304. 2014-07-09 13:54 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  305. 2014-07-09 13:54 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
  306. 2014-07-09 13:54 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  307. 2014-07-09 13:54 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  308. 2014-07-09 13:54 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  309. 2014-07-09 13:54 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  310. 2014-07-09 13:54 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  311. 2014-07-09 13:54 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  312. 2014-07-09 13:54 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
  313. 2014-07-09 13:54 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
  314. 2014-07-09 13:54 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  315. 2014-07-09 13:54 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  316. 2014-07-09 13:54 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  317. 2014-07-09 13:54 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  318. 2014-07-09 13:54 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  319. 2014-07-09 13:54 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  320. 2014-07-09 13:54 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
  321. 2014-07-09 13:54 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  322. 2014-07-09 13:54 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  323. 2014-07-09 13:54 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  324. 2014-07-09 13:54 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  325. 2014-07-09 13:54 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  326. 2014-07-09 13:54 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  327. 2014-07-09 13:54 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  328. 2014-07-09 13:54 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  329. 2014-07-09 13:54 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
  330. 2014-07-09 13:54 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
  331. 2014-07-09 13:54 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
  332. 2014-07-09 13:54 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
  333. 2014-07-09 13:54 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
  334. 2014-07-09 13:54 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
  335. 2014-07-09 13:54 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  336. 2014-07-09 13:54 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
  337. 2014-07-09 13:54 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
  338. 2014-07-09 13:54 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
  339. 2014-07-09 13:54 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
  340. 2014-07-09 13:54 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
  341. 2014-07-09 13:54 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
  342. 2014-07-09 13:51 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  343. 2014-07-09 13:51 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
  344. 2014-07-09 13:51 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  345.  
  346. ==================== One Month Modified Files and Folders =======
  347.  
  348. (If an entry is included in the fixlist, the file\folder will be moved.)
  349.  
  350. 2014-07-25 19:30 - 2014-07-25 14:49 - 00000000 ____D () C:\FRST
  351. 2014-07-25 19:30 - 2014-07-25 11:09 - 00000000 ____D () C:\Users\PAUL\Desktop\Mailware
  352. 2014-07-25 19:26 - 2014-07-25 11:30 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  353. 2014-07-25 19:10 - 2014-03-26 18:14 - 00023546 _____ () C:\Windows\setupact.log
  354. 2014-07-25 19:07 - 2009-07-14 06:45 - 00025904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  355. 2014-07-25 19:07 - 2009-07-14 06:45 - 00025904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  356. 2014-07-25 19:02 - 2014-07-25 19:02 - 00000000 ____D () C:\Program Files\{CAC9EFB5-4F70-4EDE-A049-A412D9A1075B}
  357. 2014-07-25 19:02 - 2014-07-25 19:02 - 00000000 ____D () C:\Program Files (x86)\{7253BAE9-9C31-4697-89ED-1A8C78DC192E}
  358. 2014-07-25 19:02 - 2014-03-27 11:40 - 00000728 __RSH () C:\ProgramData\ntuser.pol
  359. 2014-07-25 19:02 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
  360. 2014-07-25 19:00 - 2014-07-25 17:31 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  361. 2014-07-25 19:00 - 2013-11-10 14:23 - 00000000 ____D () C:\Temp
  362. 2014-07-25 19:00 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
  363. 2014-07-25 18:59 - 2013-11-09 21:31 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-880213145-57001013-3768279162-1000UA.job
  364. 2014-07-25 18:59 - 2013-11-09 21:04 - 01974723 _____ () C:\Windows\WindowsUpdate.log
  365. 2014-07-25 18:42 - 2014-01-26 19:02 - 00000000 ____D () C:\Program Files (x86)\PDF Architect
  366. 2014-07-25 18:36 - 2014-07-25 17:31 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  367. 2014-07-25 18:02 - 2014-07-25 18:02 - 00448512 _____ (OldTimer Tools) C:\Users\PAUL\Downloads\TFC.exe
  368. 2014-07-25 17:36 - 2014-03-26 18:14 - 00008654 _____ () C:\Windows\PFRO.log
  369. 2014-07-25 17:35 - 2013-11-09 21:42 - 00000000 ____D () C:\Users\PAUL\AppData\Roaming\vlc
  370. 2014-07-25 17:33 - 2014-07-25 17:33 - 00002243 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
  371. 2014-07-25 17:33 - 2014-07-25 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
  372. 2014-07-25 17:33 - 2014-03-23 13:57 - 00000000 ____D () C:\Program Files (x86)\Google
  373. 2014-07-25 17:31 - 2014-07-25 17:31 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
  374. 2014-07-25 17:31 - 2014-07-25 17:31 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
  375. 2014-07-25 17:20 - 2014-07-25 15:34 - 00000000 ____D () C:\Users\PAUL\Desktop\Sicherung
  376. 2014-07-25 16:50 - 2013-11-10 05:57 - 00702852 _____ () C:\Windows\system32\perfh007.dat
  377. 2014-07-25 16:50 - 2013-11-10 05:57 - 00150460 _____ () C:\Windows\system32\perfc007.dat
  378. 2014-07-25 16:50 - 2009-07-14 07:13 - 01627884 _____ () C:\Windows\system32\PerfStringBackup.INI
  379. 2014-07-25 16:13 - 2013-11-09 22:00 - 00000000 ____D () C:\Users\PAUL\Desktop\Ausdrucke
  380. 2014-07-25 15:03 - 2014-03-23 15:32 - 00000000 ____D () C:\Users\PAUL\AppData\Roaming\Mp3tag
  381. 2014-07-25 14:53 - 2014-07-25 14:51 - 00048168 _____ () C:\Users\PAUL\Downloads\Addition.txt
  382. 2014-07-25 14:53 - 2014-07-25 14:49 - 00051552 _____ () C:\Users\PAUL\Downloads\FRST.txt
  383. 2014-07-25 13:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Vss
  384. 2014-07-25 11:30 - 2014-07-25 11:30 - 00001098 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  385. 2014-07-25 11:30 - 2014-07-25 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  386. 2014-07-25 11:30 - 2014-07-25 11:30 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
  387. 2014-07-25 11:23 - 2013-11-10 16:46 - 00000000 ____D () C:\Program Files (x86)\JDownloader
  388. 2014-07-25 11:21 - 2014-07-25 11:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  389. 2014-07-25 11:21 - 2013-11-10 21:18 - 00000000 ____D () C:\ProgramData\Oracle
  390. 2014-07-25 11:20 - 2014-07-25 11:21 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
  391. 2014-07-25 11:20 - 2014-07-25 11:20 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
  392. 2014-07-25 11:20 - 2014-07-25 11:20 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
  393. 2014-07-25 11:20 - 2014-07-25 11:20 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
  394. 2014-07-25 11:20 - 2014-07-25 11:20 - 00000000 ____D () C:\Program Files (x86)\Java
  395. 2014-07-25 11:12 - 2014-07-25 11:12 - 00000000 ____D () C:\Users\PAUL\Desktop\Perry Rhodan_NEO_Episode_48_Der Glanz des Imperiums
  396. 2014-07-24 19:59 - 2013-11-09 21:31 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-880213145-57001013-3768279162-1000Core.job
  397. 2014-07-24 19:48 - 2014-04-11 20:57 - 00000000 ____D () C:\Windows\RegisteredPackages
  398. 2014-07-24 16:03 - 2013-12-23 21:40 - 00000000 ____D () C:\AdwCleaner
  399. 2014-07-24 15:58 - 2013-11-09 21:09 - 00000000 ____D () C:\Users\PAUL
  400. 2014-07-24 15:54 - 2014-07-24 15:54 - 00000851 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Uninstall 6.lnk
  401. 2014-07-24 15:54 - 2014-07-24 15:54 - 00000839 _____ () C:\Users\Public\Desktop\Total Uninstall 6.lnk
  402. 2014-07-24 15:54 - 2014-07-24 15:54 - 00000000 ____D () C:\ProgramData\Martau
  403. 2014-07-24 15:54 - 2014-07-24 15:54 - 00000000 ____D () C:\Program Files\Total Uninstall 6
  404. 2014-07-24 13:04 - 2014-07-24 13:04 - 00002018 _____ () C:\Users\PAUL\Desktop\Entfernen des Avira EU-Cleaners.lnk
  405. 2014-07-24 13:04 - 2014-07-24 13:04 - 00001962 _____ () C:\Users\PAUL\Desktop\Avira EU-Cleaner.lnk
  406. 2014-07-24 12:49 - 2014-07-24 12:49 - 00001260 _____ () C:\Users\PAUL\Desktop\Revo Uninstaller.lnk
  407. 2014-07-24 12:49 - 2014-07-24 12:49 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
  408. 2014-07-23 08:46 - 2014-07-23 08:46 - 00004623 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
  409. 2014-07-23 08:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Web
  410. 2014-07-21 05:43 - 2012-10-10 20:41 - 00003704 _____ () C:\Windows\Q535870.log
  411. 2014-07-17 13:10 - 2013-11-09 21:17 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
  412. 2014-07-17 08:02 - 2014-02-12 19:16 - 00000000 ____D () C:\Users\PAUL\AppData\Roaming\Malwarebytes
  413. 2014-07-17 08:02 - 2014-02-12 19:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
  414. 2014-07-11 19:48 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
  415. 2014-07-09 17:35 - 2009-07-14 06:45 - 05712968 _____ () C:\Windows\system32\FNTCACHE.DAT
  416. 2014-07-09 17:31 - 2014-04-25 18:13 - 00000000 ___SD () C:\Windows\system32\CompatTel
  417. 2014-07-09 17:31 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal
  418. 2014-07-09 17:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
  419. 2014-07-09 17:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
  420. 2014-07-09 13:56 - 2013-11-10 01:37 - 00000000 ____D () C:\Windows\system32\MRT
  421. 2014-07-09 13:53 - 2013-11-10 01:37 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
  422. 2014-07-03 20:17 - 2013-11-09 21:17 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
  423. 2014-07-03 20:10 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
  424. 2014-06-30 04:09 - 2014-07-09 13:55 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
  425. 2014-06-30 04:04 - 2014-07-09 13:55 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
  426. 2014-06-25 22:05 - 2013-12-08 16:14 - 00000072 _____ () C:\Users\Public\LMDebug.log
  427.  
  428. Some content of TEMP:
  429. ====================
  430. C:\Users\PAUL\AppData\Local\Temp\avgnt.exe
  431. C:\Users\PAUL\AppData\Local\Temp\ICReinstall_COMPUTER_BILD-Download-Manager_fuer_mp3tagv258setup.exe
  432. C:\Users\PAUL\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
  433. C:\Users\PAUL\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
  434. C:\Users\PAUL\AppData\Local\Temp\QuickStores_Unlocker.exe
  435.  
  436.  
  437. ==================== Bamital & volsnap Check =================
  438.  
  439. (There is no automatic fix for files that do not pass verification.)
  440.  
  441. C:\Windows\System32\winlogon.exe => File is digitally signed
  442. C:\Windows\System32\wininit.exe => File is digitally signed
  443. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  444. C:\Windows\explorer.exe => File is digitally signed
  445. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  446. C:\Windows\System32\svchost.exe => File is digitally signed
  447. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  448. C:\Windows\System32\services.exe => File is digitally signed
  449. C:\Windows\System32\User32.dll => File is digitally signed
  450. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  451. C:\Windows\System32\userinit.exe => File is digitally signed
  452. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  453. C:\Windows\System32\rpcss.dll => File is digitally signed
  454. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  455.  
  456.  
  457. LastRegBack: 2014-07-22 13:28
  458.  
  459. ==================== End Of Log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!