| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
19.07.2013, 21:44
| #1 |
 |  ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe Hallo! Ich habe heute Mcafee deinstalliert und mir Avira runtergeladen von Chip.de, damit ich ein neues Antivirenprogramm habe, da McAfee abgelaufen ist. Aufeinmal hat mir Avira dann die Meldung gegeben, dass der Zugriff vom Programm "directx" in meinem DOwnload Ordner verweigert wurde, da er "Adware.DomaIG.cc.47" beeinhaltet. Ich bin ein totaler Legastheniker, was Virenbeseitigung angeht und weiß auch nicht, wo ich mir den aufgeschnappt habe. nachdem die Meldung kam habe ich erstmal auf entfernen gedrückt und habe einen Scan durchlaufen lassen. Das kam dabei raus: Exportierte Ereignisse: 19.07.2013 22:32 [System-Scanner] Malware gefunden Die Datei 'C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe' enthielt einen Virus oder unerwünschtes Programm 'ADWARE/DomaIQ.G' [adware]. Durchgeführte Aktion(en): Die Datei wurde ignoriert. 19.07.2013 20:31 [System-Scanner] Malware gefunden Die Datei 'C:\Users\***\Downloads\directx.exe' enthielt einen Virus oder unerwünschtes Programm 'ADWARE/DomaIQ.G' [adware]. Durchgeführte Aktion(en): Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '578115d3.qua' verschoben! 19.07.2013 20:26 [Echtzeit-Scanner] Malware gefunden In der Datei 'C:\Users\***\Downloads\directx.exe' wurde ein Virus oder unerwünschtes Programm 'ADWARE/DomaIQ.cc.47' [adware] gefunden. Ausgeführte Aktion: Zugriff verweigern Hoffe, dass das die richtigen Daten sind, die ihr braucht, bin genauso vorgegangen, wie ihr es beschrieben habt. Ich hoffe auf eine schnelle Antwort und Hilfe von euch! Liebe Grüße und einen schönen Restabend! |
|
20.07.2013, 05:03
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe Hallo,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
20.07.2013, 09:32
| #3 |
| | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe Alles klärchen, alles getan. Hoffe auch, dass das alles richtig ist!
__________________Liebe Grüße! FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-07-2013
Ran by Robin (administrator) on 20-07-2013 10:25:56
Running from C:\Users\Robin\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\WLANExt.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\WINDOWS\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\WINDOWS\SysWOW64\PnkBstrA.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(WebCake LLC) C:\Program Files (x86)\WebCake\WebCakeDesktop.Updater.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(WebCake LLC) C:\Users\Robin\AppData\Roaming\WebCake\WebCakeDesktop.exe
( ) C:\Program Files (x86)\LockKey\LockKey.exe
(Vimicro) C:\Program Files (x86)\USB Camera2\VM332STI.EXE
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Microsoft Corporation) C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Safari.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp [x]
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-20] (Synaptics Incorporated)
HKLM\...\Run: [SynLenovoGestureMgr] - C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [665400 2012-08-20] (Synaptics)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12937872 2012-07-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-10] (Realtek Semiconductor)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-01-17] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-01-17] (Lenovo(beijing) Limited)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKCU\...\Run: [WebCake Desktop] - C:\Users\Robin\AppData\Roaming\WebCake\WebCakeDesktop.exe [47896 2013-06-07] (WebCake LLC)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1672616 2013-07-10] (Valve Corporation)
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_224_Plugin.exe -update plugin [814472 2013-06-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LockKey] - C:\Program Files (x86)\LockKey\LockKey.exe [337776 2011-08-25] ( )
HKLM-x32\...\Run: [332BigDog] - C:\Program Files (x86)\USB Camera2\VM332STI.EXE [548864 2012-03-20] (Vimicro)
HKLM-x32\...\Run: [Dolby Home Theater v4] - "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Smart Update] - C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe -s [1706576 2012-08-02] (Lenovo)
HKLM-x32\...\Run: [YouCam Mirage] - "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe" [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [1558480 2013-07-03] (APN)
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
SearchScopes: HKLM - DefaultScope {C10E8E55-6F72-4731-8521-86BE333790A8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKLM - {C10E8E55-6F72-4731-8521-86BE333790A8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKLM-x32 - DefaultScope {C10E8E55-6F72-4731-8521-86BE333790A8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKLM-x32 - {C10E8E55-6F72-4731-8521-86BE333790A8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKCU - DefaultScope {C10E8E55-6F72-4731-8521-86BE333790A8} URL =
SearchScopes: HKCU - {C10E8E55-6F72-4731-8521-86BE333790A8} URL =
BHO-x32: WebCake - {2A5A2A90-3B30-4E6E-A955-2F232C6EF517} - C:\Program Files (x86)\WebCake\WebCakeIEClient.dll (WebCake LLC)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Handler-x32: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL (Microsoft Corporation)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] C:\Program Files\McAfee\MSK
FF Extension: No Name - C:\Program Files\McAfee\MSK
==================== Services (Whitelisted) =================
S2 0235451374253041mcinstcleanup; C:\WINDOWS\TEMP\023545~1.EXE [833616 2013-01-30] (McAfee, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [811064 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-03] (APN LLC.)
R2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-03-30] (Diskeeper Corporation)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.)
R2 irstrtsv; C:\WINDOWS\SysWOW64\irstrtsv.exe [193576 2012-07-20] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 Lenovo Smart Update Service; C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe [66640 2012-07-18] (Lenovo)
R4 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-07-18] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-06-22] ()
R2 WebCake Desktop Updater; C:\Program Files (x86)\WebCake\WebCakeDesktop.Updater.exe [23552 2013-06-07] (WebCake LLC)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2699568 2012-07-18] (Intel® Corporation)
S4 McShield; "C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe" [x]
S4 mfefire; "C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" [x]
S2 mfevtp; "C:\WINDOWS\system32\mfevtps.exe" [x]
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-06-20] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-06-20] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-02-26] (Avira Operations GmbH & Co. KG)
S2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [83672 2013-05-08] (Avira Operations GmbH & Co. KG)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [121728 2012-08-27] (Motorola Solutions, Inc.)
S3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [857472 2012-08-29] (Motorola Solutions, Inc.)
R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [23344 2012-03-30] (Diskeeper Corporation)
R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [95024 2012-03-30] (Diskeeper Corporation)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation)
R3 LAD; C:\Windows\System32\drivers\LAD.sys [8704 2012-06-08] (TODO: <Company name>)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4273192 2012-08-19] (Intel Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-20] (Synaptics Incorporated)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
S0 cfwids; system32\drivers\cfwids.sys [x]
S0 mfeapfk; system32\drivers\mfeapfk.sys [x]
R0 mfeavfk; system32\drivers\mfeavfk.sys [x]
U3 mfeavfk01; No ImagePath
S0 mfeelamk; system32\drivers\mfeelamk.sys [x]
S0 mfefirek; system32\drivers\mfefirek.sys [x]
R0 mfehidk; system32\drivers\mfehidk.sys [x]
S0 mferkdet; system32\drivers\mferkdet.sys [x]
R0 mfewfpk; system32\drivers\mfewfpk.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-20 10:25 - 2013-07-20 10:25 - 00000000 ____D C:\FRST
2013-07-20 10:23 - 2013-07-20 10:23 - 01779345 _____ (Farbar) C:\Users\Robin\Desktop\FRST64.exe
2013-07-20 10:20 - 2013-07-20 10:20 - 00000000 ___SH C:\DkHyperbootSync
2013-07-19 22:33 - 2013-07-19 22:33 - 00001806 _____ C:\Users\Robin\Documents\Ereignisse.txt
2013-07-19 19:05 - 2013-07-19 19:05 - 00000000 ____D C:\Users\Robin\AppData\Roaming\Avira
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\Users\Robin\AppData\Roaming\Mozilla
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\ProgramData\APN
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-07-19 19:02 - 2013-06-06 22:41 - 00489392 _____ (Ask Partner Network) C:\Users\Robin\Documents\APNSetup.exe
2013-07-19 19:01 - 2013-07-19 19:09 - 00003822 _____ C:\WINDOWS\SysWOW64\bufferpool.txt
2013-07-19 19:01 - 2013-07-19 19:01 - 00002077 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-19 19:01 - 2013-07-19 19:01 - 00000000 ____D C:\ProgramData\Avira
2013-07-19 19:01 - 2013-07-19 19:01 - 00000000 ____D C:\Program Files (x86)\Avira
2013-07-19 19:01 - 2013-06-20 14:48 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-07-19 19:01 - 2013-06-20 14:48 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-07-19 19:01 - 2013-05-08 13:29 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2013-07-19 19:01 - 2013-02-26 16:56 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2013-07-19 18:55 - 2013-07-19 19:00 - 104943936 _____ C:\Users\Robin\Downloads\avira3737_free_antivirus_de.exe
2013-07-14 02:25 - 2013-07-14 02:25 - 00427328 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-07-10 23:01 - 2013-06-01 11:25 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2013-07-10 23:01 - 2013-06-01 11:21 - 00595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2013-07-10 23:01 - 2013-05-31 01:14 - 04036096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-07-10 23:01 - 2013-04-12 00:30 - 01421312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2013-07-10 23:01 - 2013-04-12 00:22 - 01838080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2013-07-10 23:00 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-07-10 23:00 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-07-10 23:00 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-07-10 23:00 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-07-10 23:00 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-07-10 23:00 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-07-10 23:00 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-07-10 23:00 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-07-10 23:00 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-07-10 23:00 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-07-10 23:00 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-07-10 23:00 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-07-10 23:00 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-07-10 23:00 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-07-10 23:00 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-07-10 23:00 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-07-10 23:00 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-07-10 23:00 - 2013-05-04 08:59 - 02842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2013-07-10 23:00 - 2013-05-04 06:57 - 02620928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2013-07-03 22:47 - 2013-07-03 22:47 - 00000000 ____D C:\Users\Robin\AppData\Roaming\LolClient
2013-07-03 20:57 - 2013-05-16 00:35 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2013-07-02 12:38 - 2013-07-02 12:38 - 00005347 _____ C:\Users\Robin\Downloads\messages-16.zip
2013-07-02 12:14 - 2013-07-02 12:14 - 00000180 _____ C:\Users\Robin\Downloads\244478-RE13 Blasers.txt
2013-06-28 16:01 - 2013-07-19 20:38 - 00000000 ____D C:\Users\Robin\AppData\Roaming\TS3Client
2013-06-28 16:00 - 2013-06-28 16:00 - 00000978 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-06-28 16:00 - 2013-06-28 16:00 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-06-28 15:58 - 2013-06-28 15:59 - 34954912 _____ (TeamSpeak Systems GmbH) C:\Users\Robin\Downloads\TeamSpeak3-Client-win64-3.0.10.1.exe
2013-06-26 15:21 - 2013-06-26 15:21 - 00000000 ____D C:\Users\Robin\AppData\Local\Amazon_Services_LLC
2013-06-23 21:46 - 2013-06-23 21:46 - 00393056 _____ (Softonic ) C:\Users\Robin\Downloads\SoftonicDownloader_fuer_heaven-benchmark.exe
2013-06-22 23:52 - 2013-06-22 23:52 - 00001733 _____ C:\Users\Public\Desktop\League of Legends spielen .lnk
2013-06-22 23:47 - 2013-06-22 23:47 - 00000000 ____D C:\Riot Games
2013-06-22 21:29 - 2013-06-22 23:47 - 00000000 ____D C:\Program Files\League of Legends
2013-06-22 19:58 - 2012-10-24 06:54 - 00396008 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2013-06-22 19:58 - 2012-10-17 06:32 - 01172992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2013-06-22 19:58 - 2012-10-17 06:32 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2013-06-22 19:58 - 2012-10-17 06:32 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2013-06-22 19:58 - 2012-10-17 05:57 - 00929792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2013-06-22 19:58 - 2012-10-17 05:57 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2013-06-22 19:58 - 2012-10-17 05:57 - 00513024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2013-06-22 19:58 - 2012-10-12 08:13 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquota.dll
2013-06-22 19:58 - 2012-10-12 07:39 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dskquota.dll
2013-06-22 19:57 - 2012-10-11 09:47 - 00793200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-06-22 19:57 - 2012-10-11 09:35 - 02380944 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2013-06-22 19:57 - 2012-10-11 09:25 - 00056552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2013-06-22 19:57 - 2012-10-11 09:23 - 00441576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2013-06-22 19:57 - 2012-10-11 09:18 - 00172264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2013-06-22 19:57 - 2012-10-11 09:13 - 00058088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2013-06-22 19:57 - 2012-10-11 09:13 - 00033512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\battc.sys
2013-06-22 19:57 - 2012-10-11 09:08 - 00562392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2013-06-22 19:57 - 2012-10-11 09:02 - 01636672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2013-06-22 19:57 - 2012-10-11 07:56 - 02115952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2013-06-22 19:57 - 2012-10-11 07:46 - 01395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2013-06-22 19:57 - 2012-10-11 07:46 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2013-06-22 19:57 - 2012-10-11 07:46 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Compression.dll
2013-06-22 19:57 - 2012-10-11 07:45 - 01045504 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2013-06-22 19:57 - 2012-10-11 07:45 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2013-06-22 19:57 - 2012-10-11 07:45 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2013-06-22 19:57 - 2012-10-11 07:45 - 00505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2013-06-22 19:57 - 2012-10-11 07:44 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2013-06-22 19:57 - 2012-10-11 07:44 - 00904192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2013-06-22 19:57 - 2012-10-11 07:44 - 00264704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2013-06-22 19:57 - 2012-10-11 07:44 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2013-06-22 19:57 - 2012-10-11 07:43 - 02206208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-06-22 19:57 - 2012-10-11 07:43 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2013-06-22 19:57 - 2012-10-11 07:43 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2013-06-22 19:57 - 2012-10-11 07:43 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2013-06-22 19:57 - 2012-10-11 07:42 - 00612416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-06-22 19:57 - 2012-10-11 07:20 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbscan.sys
2013-06-22 19:57 - 2012-10-11 07:16 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2013-06-22 19:57 - 2012-10-11 07:07 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2013-06-22 19:57 - 2012-10-11 07:07 - 00962560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2013-06-22 19:57 - 2012-10-11 07:07 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2013-06-22 19:57 - 2012-10-11 07:07 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2013-06-22 19:57 - 2012-10-11 07:07 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Compression.dll
2013-06-22 19:57 - 2012-10-11 07:06 - 01841152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-06-22 19:57 - 2012-10-11 07:06 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2013-06-22 19:57 - 2012-10-11 07:06 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2013-06-22 19:57 - 2012-10-11 07:06 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2013-06-22 19:57 - 2012-10-11 07:06 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2013-06-22 19:57 - 2012-10-11 02:45 - 00478424 _____ C:\WINDOWS\SysWOW64\locale.nls
2013-06-22 19:57 - 2012-10-11 02:44 - 00478424 _____ C:\WINDOWS\system32\locale.nls
2013-06-22 19:56 - 2012-12-04 06:21 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2013-06-22 19:56 - 2012-11-27 08:39 - 01122768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2013-06-22 19:56 - 2012-11-27 06:49 - 01027152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2013-06-22 19:56 - 2012-11-27 06:20 - 01217536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2013-06-22 19:56 - 2012-11-27 06:20 - 01123840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2013-06-22 19:56 - 2012-11-27 06:20 - 01048064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2013-06-22 19:56 - 2012-11-27 06:20 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2013-06-22 19:56 - 2012-11-27 06:20 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2013-06-22 19:56 - 2012-11-27 06:20 - 00680960 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2013-06-22 19:56 - 2012-11-27 06:20 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2013-06-22 19:56 - 2012-11-27 06:20 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2013-06-22 19:56 - 2012-11-27 06:20 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vds_ps.dll
2013-06-22 19:56 - 2012-11-27 06:19 - 03245568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2013-06-22 19:56 - 2012-11-27 06:19 - 01536512 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2013-06-22 19:56 - 2012-11-27 06:19 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2013-06-22 19:56 - 2012-11-27 06:19 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2013-06-22 19:56 - 2012-11-27 06:19 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2013-06-22 19:56 - 2012-11-27 06:19 - 00244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2013-06-22 19:56 - 2012-11-27 06:18 - 01071104 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2013-06-22 19:56 - 2012-11-27 06:18 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2013-06-22 19:56 - 2012-11-27 06:18 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2013-06-22 19:56 - 2012-11-27 06:17 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2013-06-22 19:56 - 2012-11-20 07:24 - 01164800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-06-22 19:56 - 2012-11-20 07:17 - 01184256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-06-22 19:56 - 2012-11-20 07:02 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKURD.DLL
2013-06-22 19:56 - 2012-11-20 06:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKURD.DLL
2013-06-22 19:56 - 2012-11-08 06:25 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-06-22 19:56 - 2012-11-08 06:25 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2013-06-22 19:56 - 2012-11-08 06:25 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-06-22 19:56 - 2012-11-08 06:22 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-06-22 19:56 - 2012-11-08 06:22 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2013-06-22 19:56 - 2012-11-08 06:22 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-06-22 19:56 - 2012-10-12 10:08 - 00027880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2013-06-22 19:56 - 2012-10-12 08:14 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2013-06-22 19:56 - 2012-10-12 07:50 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2013-06-22 19:56 - 2012-10-11 07:46 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2013-06-22 19:56 - 2012-10-11 07:46 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2013-06-22 19:56 - 2012-10-11 07:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll
2013-06-22 19:56 - 2012-10-11 07:45 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2013-06-22 19:56 - 2012-10-11 07:44 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2013-06-22 19:56 - 2012-10-11 07:44 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2013-06-22 19:56 - 2012-10-11 07:43 - 01280000 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2013-06-22 19:56 - 2012-10-11 07:43 - 00757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2013-06-22 19:56 - 2012-10-11 07:43 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2013-06-22 19:56 - 2012-10-11 07:43 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2013-06-22 19:56 - 2012-10-11 07:43 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2013-06-22 19:56 - 2012-10-11 07:23 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-pdc.dll
2013-06-22 19:56 - 2012-10-11 07:23 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdhebl3.dll
2013-06-22 19:56 - 2012-10-11 07:19 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSDScan.sys
2013-06-22 19:56 - 2012-10-11 07:19 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys
2013-06-22 19:56 - 2012-10-11 07:18 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys
2013-06-22 19:56 - 2012-10-11 07:15 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2013-06-22 19:56 - 2012-10-11 07:07 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2013-06-22 19:56 - 2012-10-11 07:07 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2013-06-22 19:56 - 2012-10-11 07:06 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2013-06-22 19:56 - 2012-10-11 07:06 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2013-06-22 19:56 - 2012-10-11 07:06 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2013-06-22 19:56 - 2012-10-11 07:05 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2013-06-22 19:56 - 2012-10-11 06:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdhebl3.dll
2013-06-22 19:56 - 2012-10-02 09:34 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2013-06-22 19:56 - 2012-10-02 09:34 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2013-06-22 19:56 - 2012-09-27 09:17 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.exe
2013-06-22 19:56 - 2012-09-27 09:17 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndadmin.exe
2013-06-22 19:56 - 2012-09-27 09:15 - 00301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2013-06-22 19:56 - 2012-09-27 08:35 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.exe
2013-06-22 19:56 - 2012-09-27 08:35 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndadmin.exe
2013-06-22 19:56 - 2012-09-27 08:34 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll
2013-06-22 19:56 - 2012-09-11 07:28 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsldr.exe
2013-06-22 19:56 - 2012-09-11 07:27 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2013-06-22 19:56 - 2012-09-11 07:27 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds_ps.dll
2013-06-22 19:55 - 2012-11-06 09:52 - 00277736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2013-06-22 19:55 - 2012-11-06 09:33 - 01566432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2013-06-22 19:55 - 2012-11-06 06:48 - 01150160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2013-06-22 19:55 - 2012-11-06 06:20 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2013-06-22 19:55 - 2012-11-06 06:20 - 00516608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2013-06-22 19:55 - 2012-11-06 06:20 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2013-06-22 19:55 - 2012-11-06 06:20 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2013-06-22 19:55 - 2012-11-06 06:20 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2013-06-22 19:55 - 2012-11-06 06:19 - 08552448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2013-06-22 19:55 - 2012-11-06 06:19 - 01451520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2013-06-22 19:55 - 2012-11-06 06:19 - 01386496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2013-06-22 19:55 - 2012-11-06 06:19 - 00710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2013-06-22 19:55 - 2012-11-06 06:19 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2013-06-22 19:55 - 2012-11-06 06:19 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2013-06-22 19:55 - 2012-11-06 06:19 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2013-06-22 19:55 - 2012-11-06 06:19 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2013-06-22 19:55 - 2012-11-06 06:18 - 11459584 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2013-06-22 19:55 - 2012-11-06 06:18 - 01526784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2013-06-22 19:55 - 2012-11-06 06:18 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2013-06-22 19:55 - 2012-11-06 06:18 - 00976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2013-06-22 19:55 - 2012-11-06 06:18 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2013-06-22 19:55 - 2012-11-06 06:18 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2013-06-22 19:55 - 2012-11-06 06:17 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2013-06-22 19:55 - 2012-11-06 06:17 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll
2013-06-22 19:55 - 2012-11-06 05:53 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2013-06-22 19:55 - 2012-11-06 05:51 - 00665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2013-06-22 19:54 - 2012-11-06 06:20 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2013-06-22 19:54 - 2012-11-06 06:20 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll
2013-06-22 19:54 - 2012-11-06 06:20 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2013-06-22 19:54 - 2012-11-06 06:19 - 00466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll
2013-06-22 19:54 - 2012-11-06 06:19 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll
2013-06-22 19:54 - 2012-11-06 06:19 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2013-06-22 19:54 - 2012-11-06 06:19 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapPeerProxy.dll
2013-06-22 19:54 - 2012-11-06 06:19 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapAuthProxy.dll
2013-06-22 19:54 - 2012-11-06 06:18 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll
2013-06-22 19:54 - 2012-11-06 06:18 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll
2013-06-22 19:54 - 2012-11-06 06:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsilog.dll
2013-06-22 19:54 - 2012-11-06 05:58 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2013-06-22 19:54 - 2012-11-06 05:56 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2013-06-22 19:54 - 2012-11-06 05:55 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2013-06-22 19:54 - 2012-11-06 05:55 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2013-06-22 19:54 - 2012-11-06 05:55 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2013-06-22 19:54 - 2012-11-06 05:55 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2013-06-22 19:54 - 2012-11-06 05:55 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fxppm.sys
2013-06-22 19:53 - 2012-09-20 11:10 - 02367528 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2013-06-22 19:53 - 2012-09-20 10:40 - 00389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2013-06-22 19:53 - 2012-09-20 09:55 - 03265256 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\evbda.sys
2013-06-22 19:53 - 2012-09-20 09:55 - 00533224 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\bxvbda.sys
2013-06-22 19:53 - 2012-09-20 08:33 - 03964416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe
2013-06-22 19:53 - 2012-09-20 08:33 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2013-06-22 19:53 - 2012-09-20 08:33 - 01513984 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2013-06-22 19:53 - 2012-09-20 08:33 - 01304064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-06-22 19:53 - 2012-09-20 08:33 - 00757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2013-06-22 19:53 - 2012-09-20 08:32 - 01739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\RacEngn.dll
2013-06-22 19:53 - 2012-09-20 08:32 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2013-06-22 19:53 - 2012-09-20 08:32 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\system32\provcore.dll
2013-06-22 19:53 - 2012-09-20 08:30 - 03847168 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2013-06-22 19:53 - 2012-09-20 08:30 - 02219008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2013-06-22 19:53 - 2012-09-20 07:54 - 01196032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2013-06-22 19:53 - 2012-09-20 07:53 - 03296256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2013-06-22 19:53 - 2012-09-20 07:53 - 02033664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2013-06-22 19:52 - 2012-09-20 11:08 - 00027280 _____ (Microsoft Corporation) C:\WINDOWS\system32\avrt.dll
2013-06-22 19:52 - 2012-09-20 10:31 - 00425192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2013-06-22 19:52 - 2012-09-20 10:04 - 00100072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2013-06-22 19:52 - 2012-09-20 09:55 - 00120040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2013-06-22 19:52 - 2012-09-20 09:03 - 00465128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2013-06-22 19:52 - 2012-09-20 08:48 - 00062488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2013-06-22 19:52 - 2012-09-20 08:47 - 00307192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 01342464 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00866304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSATAPI.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00110592 _____ C:\WINDOWS\system32\OEMLicense.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2013-06-22 19:52 - 2012-09-20 08:32 - 01400832 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfos.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfctrs.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfdisk.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimeng.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00755200 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00437760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL
2013-06-22 19:52 - 2012-09-20 08:31 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcss.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 02016256 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 01743872 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2013-06-22 19:52 - 2012-09-20 08:30 - 00634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\aelupsvc.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 00180736 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdsrv.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2013-06-22 19:52 - 2012-09-20 08:13 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll
2013-06-22 19:52 - 2012-09-20 08:13 - 00023656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avrt.dll
2013-06-22 19:52 - 2012-09-20 08:09 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ws2ifsl.sys
2013-06-22 19:52 - 2012-09-20 08:08 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2013-06-22 19:52 - 2012-09-20 08:07 - 00210304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2013-06-22 19:52 - 2012-09-20 07:55 - 00995328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2013-06-22 19:52 - 2012-09-20 07:55 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSATAPI.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe
2013-06-22 19:52 - 2012-09-20 07:55 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00083968 _____ C:\WINDOWS\SysWOW64\OEMLicense.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2013-06-22 19:52 - 2012-09-20 07:55 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2013-06-22 19:52 - 2012-09-20 07:55 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\svchost.exe
2013-06-22 19:52 - 2012-09-20 07:55 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2013-06-22 19:52 - 2012-09-20 07:54 - 01369600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RacEngn.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 01137152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00709632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provcore.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfctrs.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfos.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfdisk.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimeng.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 02007040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 01701376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2013-06-22 19:52 - 2012-09-20 07:53 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPHLPAPI.DLL
2013-06-22 19:52 - 2012-09-20 07:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll
2013-06-22 19:52 - 2012-09-20 06:13 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2013-06-22 19:52 - 2012-09-20 06:10 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2013-06-22 17:23 - 2013-07-05 20:03 - 00000000 ____D C:\Users\Robin\AppData\Local\PMB Files
2013-06-22 17:23 - 2013-07-05 20:03 - 00000000 ____D C:\ProgramData\PMB Files
2013-06-22 17:22 - 2013-06-22 17:22 - 03461416 _____ C:\Users\Robin\Downloads\LeagueofLegends-1.exe
2013-06-22 15:47 - 2013-07-03 22:45 - 00291128 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2013-06-22 15:47 - 2013-07-03 22:45 - 00291128 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2013-06-22 15:47 - 2013-07-03 22:43 - 00291128 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2013-06-22 15:47 - 2013-06-22 15:47 - 00076888 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\Documents\Arktos
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\AppData\Local\PunkBuster
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\AppData\Local\CrashRpt
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\AppData\Local\Arktos
2013-06-22 12:48 - 2013-06-22 12:48 - 00000222 _____ C:\Users\Robin\Desktop\Infestation Survivor Stories.url
2013-06-22 12:48 - 2013-06-22 12:48 - 00000000 ____D C:\Users\Robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-06-22 12:26 - 2013-07-19 20:33 - 00000000 ____D C:\Program Files (x86)\Steam
2013-06-22 12:26 - 2013-06-22 12:26 - 00000928 _____ C:\Users\Public\Desktop\Steam.lnk
2013-06-22 12:25 - 2013-06-22 12:25 - 08531968 _____ C:\Users\Robin\Downloads\SteamInstall_German.msi
2013-06-22 12:09 - 2013-06-22 12:09 - 00003548 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2013-06-22 02:17 - 2013-06-22 12:09 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-06-22 02:12 - 2013-07-10 23:08 - 78185248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== One Month Modified Files and Folders =======
2013-07-20 10:25 - 2013-07-20 10:25 - 00000000 ____D C:\FRST
2013-07-20 10:23 - 2013-07-20 10:23 - 01779345 _____ (Farbar) C:\Users\Robin\Desktop\FRST64.exe
2013-07-20 10:21 - 2013-01-17 15:48 - 00753134 _____ C:\WINDOWS\system32\perfh007.dat
2013-07-20 10:21 - 2013-01-17 15:48 - 00155826 _____ C:\WINDOWS\system32\perfc007.dat
2013-07-20 10:21 - 2013-01-17 07:46 - 01081024 _____ C:\WINDOWS\WindowsUpdate.log
2013-07-20 10:21 - 2012-07-26 09:28 - 01745416 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-07-20 10:20 - 2013-07-20 10:20 - 00000000 ___SH C:\DkHyperbootSync
2013-07-20 10:20 - 2013-06-19 14:34 - 00000000 ____D C:\Users\Robin\AppData\Roaming\WebCake
2013-07-20 10:20 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-07-20 10:20 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-07-19 22:35 - 2013-06-19 10:15 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-07-19 22:33 - 2013-07-19 22:33 - 00001806 _____ C:\Users\Robin\Documents\Ereignisse.txt
2013-07-19 20:38 - 2013-06-28 16:01 - 00000000 ____D C:\Users\Robin\AppData\Roaming\TS3Client
2013-07-19 20:33 - 2013-06-22 12:26 - 00000000 ____D C:\Program Files (x86)\Steam
2013-07-19 19:28 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-07-19 19:09 - 2013-07-19 19:01 - 00003822 _____ C:\WINDOWS\SysWOW64\bufferpool.txt
2013-07-19 19:05 - 2013-07-19 19:05 - 00000000 ____D C:\Users\Robin\AppData\Roaming\Avira
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\Users\Robin\AppData\Roaming\Mozilla
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\ProgramData\APN
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-07-19 19:01 - 2013-07-19 19:01 - 00002077 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-19 19:01 - 2013-07-19 19:01 - 00000000 ____D C:\ProgramData\Avira
2013-07-19 19:01 - 2013-07-19 19:01 - 00000000 ____D C:\Program Files (x86)\Avira
2013-07-19 19:00 - 2013-07-19 18:55 - 104943936 _____ C:\Users\Robin\Downloads\avira3737_free_antivirus_de.exe
2013-07-19 18:59 - 2012-07-26 10:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2013-07-19 18:57 - 2013-01-17 07:34 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-07-19 18:43 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-07-19 18:43 - 2012-07-26 07:26 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2013-07-14 02:25 - 2013-07-14 02:25 - 00427328 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-07-13 22:48 - 2012-07-26 07:26 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2013-07-12 20:39 - 2012-07-26 09:52 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-10 23:08 - 2013-06-22 02:12 - 78185248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-07-08 00:18 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\NDF
2013-07-07 12:04 - 2013-06-18 14:31 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2531656798-1920166471-395699410-1002
2013-07-06 02:45 - 2012-07-26 07:37 - 00000000 ____D C:\WINDOWS\servicing
2013-07-05 20:03 - 2013-06-22 17:23 - 00000000 ____D C:\Users\Robin\AppData\Local\PMB Files
2013-07-05 20:03 - 2013-06-22 17:23 - 00000000 ____D C:\ProgramData\PMB Files
2013-07-03 22:47 - 2013-07-03 22:47 - 00000000 ____D C:\Users\Robin\AppData\Roaming\LolClient
2013-07-03 22:45 - 2013-06-22 15:47 - 00291128 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2013-07-03 22:45 - 2013-06-22 15:47 - 00291128 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2013-07-03 22:43 - 2013-06-22 15:47 - 00291128 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2013-07-03 22:36 - 2013-06-19 14:36 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2013-07-02 21:59 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache
2013-07-02 20:08 - 2012-08-01 17:51 - 00004760 _____ C:\WINDOWS\PFRO.log
2013-07-02 12:38 - 2013-07-02 12:38 - 00005347 _____ C:\Users\Robin\Downloads\messages-16.zip
2013-07-02 12:14 - 2013-07-02 12:14 - 00000180 _____ C:\Users\Robin\Downloads\244478-RE13 Blasers.txt
2013-06-28 16:00 - 2013-06-28 16:00 - 00000978 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-06-28 16:00 - 2013-06-28 16:00 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-06-28 15:59 - 2013-06-28 15:58 - 34954912 _____ (TeamSpeak Systems GmbH) C:\Users\Robin\Downloads\TeamSpeak3-Client-win64-3.0.10.1.exe
2013-06-28 00:04 - 2012-07-26 10:14 - 00693112 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-06-28 00:04 - 2012-07-26 10:14 - 00078200 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-26 15:21 - 2013-06-26 15:21 - 00000000 ____D C:\Users\Robin\AppData\Local\Amazon_Services_LLC
2013-06-23 22:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-06-23 22:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2013-06-23 21:46 - 2013-06-23 21:46 - 00393056 _____ (Softonic ) C:\Users\Robin\Downloads\SoftonicDownloader_fuer_heaven-benchmark.exe
2013-06-22 23:52 - 2013-06-22 23:52 - 00001733 _____ C:\Users\Public\Desktop\League of Legends spielen .lnk
2013-06-22 23:47 - 2013-06-22 23:47 - 00000000 ____D C:\Riot Games
2013-06-22 23:47 - 2013-06-22 21:29 - 00000000 ____D C:\Program Files\League of Legends
2013-06-22 23:47 - 2013-01-17 07:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-22 17:22 - 2013-06-22 17:22 - 03461416 _____ C:\Users\Robin\Downloads\LeagueofLegends-1.exe
2013-06-22 17:22 - 2013-06-19 11:30 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2013-06-22 15:47 - 2013-06-22 15:47 - 00076888 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\Documents\Arktos
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\AppData\Local\PunkBuster
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\AppData\Local\CrashRpt
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\AppData\Local\Arktos
2013-06-22 15:46 - 2013-06-19 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2013-06-22 12:48 - 2013-06-22 12:48 - 00000222 _____ C:\Users\Robin\Desktop\Infestation Survivor Stories.url
2013-06-22 12:48 - 2013-06-22 12:48 - 00000000 ____D C:\Users\Robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-06-22 12:26 - 2013-06-22 12:26 - 00000928 _____ C:\Users\Public\Desktop\Steam.lnk
2013-06-22 12:26 - 2013-06-18 14:23 - 00000000 ____D C:\Users\Robin
2013-06-22 12:25 - 2013-06-22 12:25 - 08531968 _____ C:\Users\Robin\Downloads\SteamInstall_German.msi
2013-06-22 12:13 - 2013-06-18 14:24 - 00006864 _____ C:\Users\Robin\AppData\Roaming\AbsoluteReminder.xml
2013-06-22 12:09 - 2013-06-22 12:09 - 00003548 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2013-06-22 12:09 - 2013-06-22 02:17 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-06-22 12:09 - 2013-06-18 14:23 - 00000000 ____D C:\Users\Robin\AppData\Local\Packages
2013-06-22 12:09 - 2012-08-01 17:53 - 00000000 ____D C:\ProgramData\PRICache
2013-06-22 02:18 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-06-20 14:48 - 2013-07-19 19:01 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-06-20 14:48 - 2013-07-19 19:01 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-13 22:55
==================== End Of Log ============================
--- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-07-2013
Ran by Robin at 2013-07-20 10:26:23
Running from C:\Users\Robin\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Absolute Reminder (x32 Version: 2.1.0.9)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Amazon Browser App (x32 Version: 1.0.0.0)
Apple Software Update (x32 Version: 2.1.3.127)
Avira Free Antivirus (x32 Version: 13.0.0.3737)
Avira SearchFree Toolbar plus Web Protection (x32 Version: 12.2.1.477)
Benutzerhandbuch (x32 Version: 1.0.0.9)
Dolby Home Theater v4 (x32 Version: 7.2.8000.16)
dows-Treiberpaket - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1) (Version: 06/15/2012 8.1.0.1)
Energy Management (x32 Version: 8.0.2.4)
ExpressCache (Version: 1.0.86)
Infestation: Survivor Stories (x32)
Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10)
Intel PROSet Wireless
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2817)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.5.0.0344)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 2.6.1209.0268)
Intel(R) Rapid Start Technology (x32 Version: 2.1.0.1002)
Intel(R) Rapid Storage Technology (x32 Version: 11.5.0.1207)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel® PROSet/Wireless WiFi-Software (Version: 15.05.2000.1462)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
League of Legends (x32 Version: 1.3)
Lenovo EasyCamera (x32 Version: 1.12.824.1)
Lenovo MediaShow6 (x32 Version: 6.0.4326)
Lenovo OneKey Recovery (Version: 8.0.0.0710)
Lenovo OneKey Recovery (x32 Version: 8.0.0.0710)
Lenovo PowerDVD10 (x32 Version: 10.0.4331.52)
Lenovo Smart Update (x32 Version: 1.6.77)
Lenovo YouCam (x32 Version: 4.1.3127)
LenovoDrv_x64 (Version: 1.0.00)
LockKey (x32 Version: 1.38.1.2)
Microsoft Office (x32 Version: 14.0.6120.5004)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
NVIDIA GeForce Experience 1.5 (Version: 1.5)
NVIDIA Grafiktreiber 306.97 (Version: 306.97)
NVIDIA Install Application (Version: 2.1002.124.810)
NVIDIA Optimus 4.11.9 (Version: 4.11.9)
NVIDIA PhysX (x32 Version: 9.12.0613)
NVIDIA PhysX-Systemsoftware 9.12.0613 (Version: 9.12.0613)
NVIDIA Systemsteuerung 306.97 (Version: 306.97)
NVIDIA Update 4.11.9 (Version: 4.11.9)
NVIDIA Update Components (Version: 4.11.9)
Pando Media Booster (x32 Version: 2.6.0.9)
Power2Go (x32 Version: 5.6.0.9109)
PunkBuster Services (x32 Version: 0.993)
Realtek Ethernet Controller Driver (x32 Version: 8.3.730.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6695)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.8400.39030)
Safari (x32 Version: 5.34.57.2)
Shared C Run-time for x64 (Version: 10.0.0)
Steam (x32 Version: 1.0.0.0)
SugarSync Manager (x32 Version: 1.9.61.90905)
Synaptics Pointing Device Driver (Version: 16.2.10.7)
TeamSpeak 3 Client (Version: 3.0.10)
UserGuide (x32 Version: 1.0.0.9)
WebCake 3.00 (Version: 3.00)
Windows Driver Package - Lenovo Corporation (LAD) System (06/08/2012 1.0.0.3) (Version: 06/08/2012 1.0.0.3)
Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (Version: 06/19/2012 10.13.29.733)
==================== Restore Points =========================
19-07-2013 17:28:17 Windows Update
==================== Hosts content: ==========================
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {087737FC-F41E-4D64-925F-61028EE5A98B} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect
Task: {095D42DE-699A-4316-91A8-EE959C07FD5B} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27] (CyberLink)
Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation)
Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical
Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance
Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {28840A0D-3CE4-4689-8BC4-175A83263DB2} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe [2012-08-15] (Microsoft Corporation)
Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh
Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks
Task: {2FBB994E-1890-470F-8C67-B4F6F850B384} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup
Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update
Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator
Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask
Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance
Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage
Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2012-07-26] (Microsoft Corporation)
Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon
Task: {4BF727ED-61BC-4136-8758-DD10FD8E43E3} - System32\Tasks\WPD\SqmUpload_S-1-5-21-2531656798-1920166471-395699410-1002 => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance
Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required
Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation)
Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation)
Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319
Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update
Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance
Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance
Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode)
Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses
Task: {92AD3A96-894D-4B5F-B0F5-9ECD6FB55D2F} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => C:\WINDOWS\system32\sc.exe [2012-07-26] (Microsoft Corporation)
Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime
Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64
Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic
Task: {9C4D1E99-6B67-4B82-9DCD-7BB4D69389CD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask
Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh
Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask
Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask
Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan
Task: {B7211CD4-8302-431B-871D-15E27A862EC9} - System32\Tasks\OFFICE2010ACT => C:\ProgramData\Microsoft\Windows\OFFICEICON.vbs [2012-03-08] ()
Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific
Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan
Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork
Task: {D647C1E2-D1DF-41BD-885F-7E06859E7CEC} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-19] (Adobe Systems Incorporated)
Task: {D770B186-F3F4-4C69-ADCB-ED149737462F} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2531656798-1920166471-395699410-1002
Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical
Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery
Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM
Task: {F0FD1F17-064F-4A65-A14F-89A6928ADD26} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall
Task: {F31A6BEA-E563-4D69-A953-E9E5F5CA8D03} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Faulty Device Manager Devices =============
Name: Intel(R) Centrino(R) Wireless Bluetooth(R) 4.0 + High Speed Adapter
Description: Intel(R) Centrino(R) Wireless Bluetooth(R) 4.0 + High Speed Adapter
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Intel Corporation
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (07/19/2013 07:09:13 PM) (Source: Application Hang) (User: )
Description: Programm avcenter.exe, Version 13.6.0.1550 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: b60
Startzeit: 01ce84a28d708856
Endzeit: 14
Anwendungspfad: C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
Berichts-ID: ebaae8f5-f095-11e2-be82-2089843461f3
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (07/16/2013 09:13:58 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
Error: (07/12/2013 08:27:17 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
Error: (07/08/2013 05:45:37 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WebKit2WebProcess.exe, Version: 7534.57.2.4, Zeitstempel: 0x4f97642d
Name des fehlerhaften Moduls: verifier.dll, Version: 6.2.9200.16384, Zeitstempel: 0x5010ae19
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000c121
ID des fehlerhaften Prozesses: 0x11f0
Startzeit der fehlerhaften Anwendung: 0xWebKit2WebProcess.exe0
Pfad der fehlerhaften Anwendung: WebKit2WebProcess.exe1
Pfad des fehlerhaften Moduls: WebKit2WebProcess.exe2
Berichtskennung: WebKit2WebProcess.exe3
Vollständiger Name des fehlerhaften Pakets: WebKit2WebProcess.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: WebKit2WebProcess.exe5
Error: (07/08/2013 05:18:14 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WebKit2WebProcess.exe, Version: 7534.57.2.4, Zeitstempel: 0x4f97642d
Name des fehlerhaften Moduls: WebKit.dll, Version: 7534.57.2.4, Zeitstempel: 0x4f976417
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000c7f63
ID des fehlerhaften Prozesses: 0x6fc
Startzeit der fehlerhaften Anwendung: 0xWebKit2WebProcess.exe0
Pfad der fehlerhaften Anwendung: WebKit2WebProcess.exe1
Pfad des fehlerhaften Moduls: WebKit2WebProcess.exe2
Berichtskennung: WebKit2WebProcess.exe3
Vollständiger Name des fehlerhaften Pakets: WebKit2WebProcess.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: WebKit2WebProcess.exe5
Error: (07/08/2013 05:18:07 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SynTPEnh.exe, Version: 16.2.10.7, Zeitstempel: 0x50327655
Name des fehlerhaften Moduls: SynTPEnh.exe, Version: 16.2.10.7, Zeitstempel: 0x50327655
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000009d6f4
ID des fehlerhaften Prozesses: 0x1444
Startzeit der fehlerhaften Anwendung: 0xSynTPEnh.exe0
Pfad der fehlerhaften Anwendung: SynTPEnh.exe1
Pfad des fehlerhaften Moduls: SynTPEnh.exe2
Berichtskennung: SynTPEnh.exe3
Vollständiger Name des fehlerhaften Pakets: SynTPEnh.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SynTPEnh.exe5
Error: (07/07/2013 10:59:13 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Error: (07/07/2013 08:31:52 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
Error: (07/07/2013 08:24:43 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SynTPEnh.exe, Version: 16.2.10.7, Zeitstempel: 0x50327655
Name des fehlerhaften Moduls: SynTPEnh.exe, Version: 16.2.10.7, Zeitstempel: 0x50327655
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000009d6f4
ID des fehlerhaften Prozesses: 0x274
Startzeit der fehlerhaften Anwendung: 0xSynTPEnh.exe0
Pfad der fehlerhaften Anwendung: SynTPEnh.exe1
Pfad des fehlerhaften Moduls: SynTPEnh.exe2
Berichtskennung: SynTPEnh.exe3
Vollständiger Name des fehlerhaften Pakets: SynTPEnh.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SynTPEnh.exe5
Error: (07/07/2013 01:11:27 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Safari.exe, Version: 5.34.57.2, Zeitstempel: 0x4f982b5e
Name des fehlerhaften Moduls: CoreFoundation.dll, Version: 1.630.16.0, Zeitstempel: 0x4f9734ce
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00048e52
ID des fehlerhaften Prozesses: 0x16f4
Startzeit der fehlerhaften Anwendung: 0xSafari.exe0
Pfad der fehlerhaften Anwendung: Safari.exe1
Pfad des fehlerhaften Moduls: Safari.exe2
Berichtskennung: Safari.exe3
Vollständiger Name des fehlerhaften Pakets: Safari.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Safari.exe5
System errors:
=============
Error: (07/19/2013 10:31:24 PM) (Source: bowser) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "ROBINUB" auf Transport "NetBT_Tcpip_{AC841A8F-3C02-4F38-8253-2BEC8EE95B69}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.
Error: (07/19/2013 08:24:24 PM) (Source: bowser) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "ROBINUB" auf Transport "NetBT_Tcpip_{AC841A8F-3C02-4F38-8253-2BEC8EE95B69}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.
Error: (07/19/2013 07:33:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (07/19/2013 07:33:28 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Error: (07/19/2013 07:09:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%1
Error: (07/19/2013 07:08:30 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%1
Error: (07/19/2013 07:07:30 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%1
Error: (07/19/2013 07:07:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%1
Error: (07/19/2013 07:05:59 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%1
Error: (07/19/2013 07:05:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%1
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2013-07-19 20:35:58.663
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-07-19 19:06:23.286
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-07-19 18:46:05.947
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-07-16 08:55:05.048
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-07-14 20:20:34.784
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-07-06 19:58:22.084
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-07-02 18:29:05.654
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-30 18:46:52.157
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-28 16:02:44.756
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-28 16:01:41.882
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Percentage of memory in use: 37%
Total physical RAM: 8066.02 MB
Available physical RAM: 5010.02 MB
Total Pagefile: 9282.02 MB
Available Pagefile: 6032.89 MB
Total Virtual: 8192 MB
Available Virtual: 8191.77 MB
==================== Drives ================================
Drive c: (Windows8_OS) (Fixed) (Total:884.18 GB) (Free:824.78 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.6 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 22 GB) (Disk ID: E2B5C4E2)
Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 932 GB) (Disk ID: E2B5C4EF)
Partition: GPT Partition Type
==================== End Of Log ============================
|
|
20.07.2013, 20:38
| #4 |
| | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe Habe mit dem ersten Logfile einen Fehler begangen und ein Programm, welches ich noch drauf hatte, vergessen zu löschen. In dem neuen Logfile ist alles gelöscht, damit die Hilfe nicht eingestellt wird! Ich bitte um Verzeihung und schonmal im vorraus Vielen Danke für euer Engagement! Der erste Logfilepost kann dann bitte gelöscht werden. Lg FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-07-2013
Ran by Robin (administrator) on 20-07-2013 21:34:40
Running from C:\Users\Robin\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\WINDOWS\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\WINDOWS\SysWOW64\PnkBstrA.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(WebCake LLC) C:\Program Files (x86)\WebCake\WebCakeDesktop.Updater.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Safari.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(WebCake LLC) C:\Users\Robin\AppData\Roaming\WebCake\WebCakeDesktop.exe
( ) C:\Program Files (x86)\LockKey\LockKey.exe
(Vimicro) C:\Program Files (x86)\USB Camera2\VM332STI.EXE
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp [x]
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-20] (Synaptics Incorporated)
HKLM\...\Run: [SynLenovoGestureMgr] - C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [665400 2012-08-20] (Synaptics)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12937872 2012-07-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-10] (Realtek Semiconductor)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-01-17] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-01-17] (Lenovo(beijing) Limited)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKCU\...\Run: [WebCake Desktop] - C:\Users\Robin\AppData\Roaming\WebCake\WebCakeDesktop.exe [47896 2013-06-07] (WebCake LLC)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1672616 2013-07-10] (Valve Corporation)
HKLM-x32\...\Run: [LockKey] - C:\Program Files (x86)\LockKey\LockKey.exe [337776 2011-08-25] ( )
HKLM-x32\...\Run: [332BigDog] - C:\Program Files (x86)\USB Camera2\VM332STI.EXE [548864 2012-03-20] (Vimicro)
HKLM-x32\...\Run: [Dolby Home Theater v4] - "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Smart Update] - C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe -s [1706576 2012-08-02] (Lenovo)
HKLM-x32\...\Run: [YouCam Mirage] - "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe" [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [1558480 2013-07-03] (APN)
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
SearchScopes: HKLM - DefaultScope {C10E8E55-6F72-4731-8521-86BE333790A8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKLM - {C10E8E55-6F72-4731-8521-86BE333790A8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKLM-x32 - DefaultScope {C10E8E55-6F72-4731-8521-86BE333790A8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKLM-x32 - {C10E8E55-6F72-4731-8521-86BE333790A8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKCU - DefaultScope {C10E8E55-6F72-4731-8521-86BE333790A8} URL =
SearchScopes: HKCU - {C10E8E55-6F72-4731-8521-86BE333790A8} URL =
BHO-x32: WebCake - {2A5A2A90-3B30-4E6E-A955-2F232C6EF517} - C:\Program Files (x86)\WebCake\WebCakeIEClient.dll (WebCake LLC)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] C:\Program Files\McAfee\MSK
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [811064 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-03] (APN LLC.)
R2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-03-30] (Diskeeper Corporation)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.)
R2 irstrtsv; C:\WINDOWS\SysWOW64\irstrtsv.exe [193576 2012-07-20] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 Lenovo Smart Update Service; C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe [66640 2012-07-18] (Lenovo)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-07-18] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-06-22] ()
R2 WebCake Desktop Updater; C:\Program Files (x86)\WebCake\WebCakeDesktop.Updater.exe [23552 2013-06-07] (WebCake LLC)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2699568 2012-07-18] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-02-26] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [83672 2013-05-08] (Avira Operations GmbH & Co. KG)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [121728 2012-08-27] (Motorola Solutions, Inc.)
S3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [857472 2012-08-29] (Motorola Solutions, Inc.)
R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [23344 2012-03-30] (Diskeeper Corporation)
R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [95024 2012-03-30] (Diskeeper Corporation)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation)
R3 LAD; C:\Windows\System32\drivers\LAD.sys [8704 2012-06-08] (TODO: <Company name>)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4273192 2012-08-19] (Intel Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-20] (Synaptics Incorporated)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-20 10:25 - 2013-07-20 10:25 - 00000000 ____D C:\FRST
2013-07-20 10:23 - 2013-07-20 10:23 - 01779345 _____ (Farbar) C:\Users\Robin\Desktop\FRST64.exe
2013-07-19 22:33 - 2013-07-19 22:33 - 00001806 _____ C:\Users\Robin\Documents\Ereignisse.txt
2013-07-19 19:06 - 2013-06-17 00:41 - 00997632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2013-07-19 19:06 - 2013-06-01 13:34 - 02391280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2013-07-19 19:06 - 2013-06-01 13:33 - 02233600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-07-19 19:06 - 2013-06-01 13:29 - 00213248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2013-07-19 19:06 - 2013-06-01 13:26 - 06987008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2013-07-19 19:06 - 2013-06-01 13:26 - 00327936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2013-07-19 19:06 - 2013-06-01 12:24 - 02106176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2013-07-19 19:06 - 2013-06-01 11:25 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2013-07-19 19:06 - 2013-06-01 11:24 - 01453568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2013-07-19 19:06 - 2013-06-01 11:24 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll
2013-07-19 19:06 - 2013-06-01 11:23 - 01842176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-07-19 19:06 - 2013-06-01 11:23 - 00680960 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2013-07-19 19:06 - 2013-06-01 11:22 - 00523264 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2013-07-19 19:06 - 2013-06-01 11:22 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2013-07-19 19:06 - 2013-06-01 11:21 - 00729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2013-07-19 19:06 - 2013-06-01 11:21 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2013-07-19 19:06 - 2013-06-01 11:20 - 02219520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-07-19 19:06 - 2013-06-01 11:20 - 01527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2013-07-19 19:06 - 2013-06-01 11:20 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2013-07-19 19:06 - 2013-06-01 11:20 - 00583168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2013-07-19 19:06 - 2013-06-01 11:19 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2013-07-19 19:06 - 2013-05-25 00:09 - 01403296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2013-07-19 19:06 - 2013-05-25 00:09 - 01271584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2013-07-19 19:06 - 2013-05-25 00:09 - 01217352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2013-07-19 19:06 - 2013-05-25 00:09 - 01093904 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2013-07-19 19:06 - 2013-05-20 02:08 - 00386642 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-07-19 19:05 - 2013-07-19 19:05 - 00000000 ____D C:\Users\Robin\AppData\Roaming\Avira
2013-07-19 19:05 - 2013-06-01 13:54 - 00194816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2013-07-19 19:05 - 2013-06-01 13:54 - 00125184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2013-07-19 19:05 - 2013-06-01 13:29 - 00337152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-07-19 19:05 - 2013-06-01 11:25 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2013-07-19 19:05 - 2013-06-01 11:24 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2013-07-19 19:05 - 2013-06-01 11:22 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2013-07-19 19:05 - 2013-06-01 11:22 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeParserTask.exe
2013-07-19 19:05 - 2013-06-01 11:19 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2013-07-19 19:05 - 2013-06-01 05:08 - 00037632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthAvrcpTg.sys
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\Users\Robin\AppData\Roaming\Mozilla
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\ProgramData\APN
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-07-19 19:01 - 2013-07-20 11:59 - 00004368 _____ C:\WINDOWS\SysWOW64\bufferpool.txt
2013-07-19 19:01 - 2013-07-19 19:01 - 00002077 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-19 19:01 - 2013-07-19 19:01 - 00000000 ____D C:\ProgramData\Avira
2013-07-19 19:01 - 2013-07-19 19:01 - 00000000 ____D C:\Program Files (x86)\Avira
2013-07-19 19:01 - 2013-06-20 14:48 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-07-19 19:01 - 2013-06-20 14:48 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-07-19 19:01 - 2013-05-08 13:29 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2013-07-19 19:01 - 2013-02-26 16:56 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2013-07-19 18:55 - 2013-07-19 19:00 - 104943936 _____ C:\Users\Robin\Downloads\avira3737_free_antivirus_de.exe
2013-07-14 02:25 - 2013-07-14 02:25 - 00427328 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-07-10 23:01 - 2013-06-01 11:25 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2013-07-10 23:01 - 2013-06-01 11:21 - 00595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2013-07-10 23:01 - 2013-05-31 01:14 - 04036096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-07-10 23:01 - 2013-04-12 00:30 - 01421312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2013-07-10 23:01 - 2013-04-12 00:22 - 01838080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2013-07-10 23:00 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-07-10 23:00 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-07-10 23:00 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-07-10 23:00 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-07-10 23:00 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2013-07-10 23:00 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2013-07-10 23:00 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-07-10 23:00 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-07-10 23:00 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-07-10 23:00 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-07-10 23:00 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-07-10 23:00 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-07-10 23:00 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-07-10 23:00 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-07-10 23:00 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-07-10 23:00 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2013-07-10 23:00 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-07-10 23:00 - 2013-05-04 08:59 - 02842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2013-07-10 23:00 - 2013-05-04 06:57 - 02620928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2013-07-03 22:47 - 2013-07-03 22:47 - 00000000 ____D C:\Users\Robin\AppData\Roaming\LolClient
2013-07-03 20:57 - 2013-05-16 00:35 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2013-07-02 12:38 - 2013-07-02 12:38 - 00005347 _____ C:\Users\Robin\Downloads\messages-16.zip
2013-07-02 12:14 - 2013-07-02 12:14 - 00000180 _____ C:\Users\Robin\Downloads\244478-RE13 Blasers.txt
2013-06-28 16:01 - 2013-07-19 20:38 - 00000000 ____D C:\Users\Robin\AppData\Roaming\TS3Client
2013-06-28 16:00 - 2013-06-28 16:00 - 00000978 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-06-28 16:00 - 2013-06-28 16:00 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-06-28 15:58 - 2013-06-28 15:59 - 34954912 _____ (TeamSpeak Systems GmbH) C:\Users\Robin\Downloads\TeamSpeak3-Client-win64-3.0.10.1.exe
2013-06-26 15:21 - 2013-06-26 15:21 - 00000000 ____D C:\Users\Robin\AppData\Local\Amazon_Services_LLC
2013-06-23 21:46 - 2013-06-23 21:46 - 00393056 _____ (Softonic ) C:\Users\Robin\Downloads\SoftonicDownloader_fuer_heaven-benchmark.exe
2013-06-22 23:52 - 2013-06-22 23:52 - 00001733 _____ C:\Users\Public\Desktop\League of Legends spielen .lnk
2013-06-22 23:47 - 2013-06-22 23:47 - 00000000 ____D C:\Riot Games
2013-06-22 21:29 - 2013-06-22 23:47 - 00000000 ____D C:\Program Files\League of Legends
2013-06-22 19:58 - 2012-10-24 06:54 - 00396008 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2013-06-22 19:58 - 2012-10-17 06:32 - 01172992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2013-06-22 19:58 - 2012-10-17 06:32 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2013-06-22 19:58 - 2012-10-17 06:32 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2013-06-22 19:58 - 2012-10-17 05:57 - 00929792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2013-06-22 19:58 - 2012-10-17 05:57 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2013-06-22 19:58 - 2012-10-17 05:57 - 00513024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2013-06-22 19:58 - 2012-10-12 08:13 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquota.dll
2013-06-22 19:58 - 2012-10-12 07:39 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dskquota.dll
2013-06-22 19:57 - 2012-10-11 09:47 - 00793200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-06-22 19:57 - 2012-10-11 09:25 - 00056552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2013-06-22 19:57 - 2012-10-11 09:23 - 00441576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2013-06-22 19:57 - 2012-10-11 09:18 - 00172264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2013-06-22 19:57 - 2012-10-11 09:13 - 00058088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2013-06-22 19:57 - 2012-10-11 09:13 - 00033512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\battc.sys
2013-06-22 19:57 - 2012-10-11 09:08 - 00562392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2013-06-22 19:57 - 2012-10-11 09:02 - 01636672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2013-06-22 19:57 - 2012-10-11 07:46 - 01395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2013-06-22 19:57 - 2012-10-11 07:46 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2013-06-22 19:57 - 2012-10-11 07:46 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Compression.dll
2013-06-22 19:57 - 2012-10-11 07:45 - 01045504 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2013-06-22 19:57 - 2012-10-11 07:45 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2013-06-22 19:57 - 2012-10-11 07:45 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2013-06-22 19:57 - 2012-10-11 07:45 - 00505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2013-06-22 19:57 - 2012-10-11 07:44 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2013-06-22 19:57 - 2012-10-11 07:44 - 00904192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2013-06-22 19:57 - 2012-10-11 07:44 - 00264704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2013-06-22 19:57 - 2012-10-11 07:44 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2013-06-22 19:57 - 2012-10-11 07:43 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2013-06-22 19:57 - 2012-10-11 07:43 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2013-06-22 19:57 - 2012-10-11 07:43 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2013-06-22 19:57 - 2012-10-11 07:42 - 00612416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-06-22 19:57 - 2012-10-11 07:20 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbscan.sys
2013-06-22 19:57 - 2012-10-11 07:16 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2013-06-22 19:57 - 2012-10-11 07:07 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2013-06-22 19:57 - 2012-10-11 07:07 - 00962560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2013-06-22 19:57 - 2012-10-11 07:07 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2013-06-22 19:57 - 2012-10-11 07:07 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2013-06-22 19:57 - 2012-10-11 07:07 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Compression.dll
2013-06-22 19:57 - 2012-10-11 07:06 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2013-06-22 19:57 - 2012-10-11 07:06 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2013-06-22 19:57 - 2012-10-11 07:06 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2013-06-22 19:57 - 2012-10-11 07:06 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2013-06-22 19:57 - 2012-10-11 02:45 - 00478424 _____ C:\WINDOWS\SysWOW64\locale.nls
2013-06-22 19:57 - 2012-10-11 02:44 - 00478424 _____ C:\WINDOWS\system32\locale.nls
2013-06-22 19:56 - 2012-12-04 06:21 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2013-06-22 19:56 - 2012-11-27 08:39 - 01122768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2013-06-22 19:56 - 2012-11-27 06:49 - 01027152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2013-06-22 19:56 - 2012-11-27 06:20 - 01217536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2013-06-22 19:56 - 2012-11-27 06:20 - 01123840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2013-06-22 19:56 - 2012-11-27 06:20 - 01048064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2013-06-22 19:56 - 2012-11-27 06:20 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2013-06-22 19:56 - 2012-11-27 06:20 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2013-06-22 19:56 - 2012-11-27 06:20 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2013-06-22 19:56 - 2012-11-27 06:20 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2013-06-22 19:56 - 2012-11-27 06:20 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vds_ps.dll
2013-06-22 19:56 - 2012-11-27 06:19 - 03245568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2013-06-22 19:56 - 2012-11-27 06:19 - 01536512 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2013-06-22 19:56 - 2012-11-27 06:19 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2013-06-22 19:56 - 2012-11-27 06:19 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2013-06-22 19:56 - 2012-11-27 06:19 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2013-06-22 19:56 - 2012-11-27 06:19 - 00244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2013-06-22 19:56 - 2012-11-27 06:18 - 01071104 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2013-06-22 19:56 - 2012-11-27 06:18 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2013-06-22 19:56 - 2012-11-27 06:18 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2013-06-22 19:56 - 2012-11-27 06:17 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2013-06-22 19:56 - 2012-11-20 07:24 - 01164800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-06-22 19:56 - 2012-11-20 07:17 - 01184256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-06-22 19:56 - 2012-11-20 07:02 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKURD.DLL
2013-06-22 19:56 - 2012-11-20 06:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKURD.DLL
2013-06-22 19:56 - 2012-11-08 06:25 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-06-22 19:56 - 2012-11-08 06:25 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2013-06-22 19:56 - 2012-11-08 06:25 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-06-22 19:56 - 2012-11-08 06:22 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-06-22 19:56 - 2012-11-08 06:22 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2013-06-22 19:56 - 2012-11-08 06:22 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-06-22 19:56 - 2012-10-12 10:08 - 00027880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2013-06-22 19:56 - 2012-10-12 08:14 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2013-06-22 19:56 - 2012-10-12 07:50 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2013-06-22 19:56 - 2012-10-11 07:46 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2013-06-22 19:56 - 2012-10-11 07:46 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2013-06-22 19:56 - 2012-10-11 07:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll
2013-06-22 19:56 - 2012-10-11 07:45 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2013-06-22 19:56 - 2012-10-11 07:44 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2013-06-22 19:56 - 2012-10-11 07:44 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2013-06-22 19:56 - 2012-10-11 07:43 - 01280000 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2013-06-22 19:56 - 2012-10-11 07:43 - 00757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2013-06-22 19:56 - 2012-10-11 07:43 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2013-06-22 19:56 - 2012-10-11 07:43 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2013-06-22 19:56 - 2012-10-11 07:43 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2013-06-22 19:56 - 2012-10-11 07:23 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-pdc.dll
2013-06-22 19:56 - 2012-10-11 07:23 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdhebl3.dll
2013-06-22 19:56 - 2012-10-11 07:19 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSDScan.sys
2013-06-22 19:56 - 2012-10-11 07:19 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys
2013-06-22 19:56 - 2012-10-11 07:18 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys
2013-06-22 19:56 - 2012-10-11 07:15 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2013-06-22 19:56 - 2012-10-11 07:07 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2013-06-22 19:56 - 2012-10-11 07:07 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2013-06-22 19:56 - 2012-10-11 07:06 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2013-06-22 19:56 - 2012-10-11 07:06 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2013-06-22 19:56 - 2012-10-11 07:06 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2013-06-22 19:56 - 2012-10-11 07:05 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2013-06-22 19:56 - 2012-10-11 06:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdhebl3.dll
2013-06-22 19:56 - 2012-10-02 09:34 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2013-06-22 19:56 - 2012-09-27 09:17 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.exe
2013-06-22 19:56 - 2012-09-27 09:17 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndadmin.exe
2013-06-22 19:56 - 2012-09-27 09:15 - 00301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2013-06-22 19:56 - 2012-09-27 08:35 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.exe
2013-06-22 19:56 - 2012-09-27 08:35 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndadmin.exe
2013-06-22 19:56 - 2012-09-27 08:34 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll
2013-06-22 19:56 - 2012-09-11 07:28 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsldr.exe
2013-06-22 19:56 - 2012-09-11 07:27 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds_ps.dll
2013-06-22 19:55 - 2012-11-06 09:52 - 00277736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2013-06-22 19:55 - 2012-11-06 09:33 - 01566432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2013-06-22 19:55 - 2012-11-06 06:48 - 01150160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2013-06-22 19:55 - 2012-11-06 06:20 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2013-06-22 19:55 - 2012-11-06 06:20 - 00516608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2013-06-22 19:55 - 2012-11-06 06:20 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2013-06-22 19:55 - 2012-11-06 06:20 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2013-06-22 19:55 - 2012-11-06 06:20 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2013-06-22 19:55 - 2012-11-06 06:19 - 08552448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2013-06-22 19:55 - 2012-11-06 06:19 - 01386496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2013-06-22 19:55 - 2012-11-06 06:19 - 00710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2013-06-22 19:55 - 2012-11-06 06:19 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2013-06-22 19:55 - 2012-11-06 06:19 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2013-06-22 19:55 - 2012-11-06 06:19 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2013-06-22 19:55 - 2012-11-06 06:19 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2013-06-22 19:55 - 2012-11-06 06:18 - 11459584 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2013-06-22 19:55 - 2012-11-06 06:18 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2013-06-22 19:55 - 2012-11-06 06:18 - 00976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2013-06-22 19:55 - 2012-11-06 06:18 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2013-06-22 19:55 - 2012-11-06 06:18 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2013-06-22 19:55 - 2012-11-06 06:17 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2013-06-22 19:55 - 2012-11-06 06:17 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll
2013-06-22 19:55 - 2012-11-06 05:53 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2013-06-22 19:55 - 2012-11-06 05:51 - 00665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2013-06-22 19:54 - 2012-11-06 06:20 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2013-06-22 19:54 - 2012-11-06 06:20 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll
2013-06-22 19:54 - 2012-11-06 06:20 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2013-06-22 19:54 - 2012-11-06 06:19 - 00466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll
2013-06-22 19:54 - 2012-11-06 06:19 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll
2013-06-22 19:54 - 2012-11-06 06:19 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2013-06-22 19:54 - 2012-11-06 06:19 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapPeerProxy.dll
2013-06-22 19:54 - 2012-11-06 06:19 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapAuthProxy.dll
2013-06-22 19:54 - 2012-11-06 06:18 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll
2013-06-22 19:54 - 2012-11-06 06:18 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll
2013-06-22 19:54 - 2012-11-06 06:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsilog.dll
2013-06-22 19:54 - 2012-11-06 05:58 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2013-06-22 19:54 - 2012-11-06 05:56 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2013-06-22 19:54 - 2012-11-06 05:55 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2013-06-22 19:54 - 2012-11-06 05:55 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2013-06-22 19:54 - 2012-11-06 05:55 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2013-06-22 19:54 - 2012-11-06 05:55 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2013-06-22 19:54 - 2012-11-06 05:55 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fxppm.sys
2013-06-22 19:53 - 2012-09-20 11:10 - 02367528 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2013-06-22 19:53 - 2012-09-20 10:40 - 00389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2013-06-22 19:53 - 2012-09-20 09:55 - 03265256 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\evbda.sys
2013-06-22 19:53 - 2012-09-20 09:55 - 00533224 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\bxvbda.sys
2013-06-22 19:53 - 2012-09-20 08:33 - 03964416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe
2013-06-22 19:53 - 2012-09-20 08:33 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2013-06-22 19:53 - 2012-09-20 08:33 - 01513984 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2013-06-22 19:53 - 2012-09-20 08:33 - 01304064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-06-22 19:53 - 2012-09-20 08:33 - 00757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2013-06-22 19:53 - 2012-09-20 08:32 - 01739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\RacEngn.dll
2013-06-22 19:53 - 2012-09-20 08:32 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2013-06-22 19:53 - 2012-09-20 08:32 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\system32\provcore.dll
2013-06-22 19:53 - 2012-09-20 08:30 - 03847168 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2013-06-22 19:53 - 2012-09-20 08:30 - 02219008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2013-06-22 19:53 - 2012-09-20 07:54 - 01196032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2013-06-22 19:53 - 2012-09-20 07:53 - 03296256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2013-06-22 19:53 - 2012-09-20 07:53 - 02033664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2013-06-22 19:52 - 2012-09-20 11:08 - 00027280 _____ (Microsoft Corporation) C:\WINDOWS\system32\avrt.dll
2013-06-22 19:52 - 2012-09-20 10:31 - 00425192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2013-06-22 19:52 - 2012-09-20 10:04 - 00100072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2013-06-22 19:52 - 2012-09-20 09:55 - 00120040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2013-06-22 19:52 - 2012-09-20 09:03 - 00465128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2013-06-22 19:52 - 2012-09-20 08:48 - 00062488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2013-06-22 19:52 - 2012-09-20 08:47 - 00307192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 01342464 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00866304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSATAPI.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00110592 _____ C:\WINDOWS\system32\OEMLicense.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2013-06-22 19:52 - 2012-09-20 08:33 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe
2013-06-22 19:52 - 2012-09-20 08:33 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2013-06-22 19:52 - 2012-09-20 08:32 - 01400832 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfos.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfctrs.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfdisk.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll
2013-06-22 19:52 - 2012-09-20 08:32 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimeng.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00755200 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00437760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL
2013-06-22 19:52 - 2012-09-20 08:31 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcss.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll
2013-06-22 19:52 - 2012-09-20 08:31 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 02016256 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 01743872 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2013-06-22 19:52 - 2012-09-20 08:30 - 00634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\aelupsvc.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 00180736 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdsrv.dll
2013-06-22 19:52 - 2012-09-20 08:30 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2013-06-22 19:52 - 2012-09-20 08:13 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll
2013-06-22 19:52 - 2012-09-20 08:13 - 00023656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avrt.dll
2013-06-22 19:52 - 2012-09-20 08:09 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ws2ifsl.sys
2013-06-22 19:52 - 2012-09-20 08:08 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2013-06-22 19:52 - 2012-09-20 08:07 - 00210304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2013-06-22 19:52 - 2012-09-20 07:55 - 00995328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2013-06-22 19:52 - 2012-09-20 07:55 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSATAPI.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe
2013-06-22 19:52 - 2012-09-20 07:55 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00083968 _____ C:\WINDOWS\SysWOW64\OEMLicense.dll
2013-06-22 19:52 - 2012-09-20 07:55 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2013-06-22 19:52 - 2012-09-20 07:55 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2013-06-22 19:52 - 2012-09-20 07:55 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\svchost.exe
2013-06-22 19:52 - 2012-09-20 07:55 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2013-06-22 19:52 - 2012-09-20 07:54 - 01369600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RacEngn.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 01137152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00709632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provcore.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfctrs.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfos.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfdisk.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2013-06-22 19:52 - 2012-09-20 07:54 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimeng.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 02007040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 01701376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2013-06-22 19:52 - 2012-09-20 07:53 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-06-22 19:52 - 2012-09-20 07:53 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPHLPAPI.DLL
2013-06-22 19:52 - 2012-09-20 07:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll
2013-06-22 19:52 - 2012-09-20 06:13 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2013-06-22 19:52 - 2012-09-20 06:10 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2013-06-22 17:23 - 2013-07-05 20:03 - 00000000 ____D C:\Users\Robin\AppData\Local\PMB Files
2013-06-22 17:23 - 2013-07-05 20:03 - 00000000 ____D C:\ProgramData\PMB Files
2013-06-22 17:22 - 2013-06-22 17:22 - 03461416 _____ C:\Users\Robin\Downloads\LeagueofLegends-1.exe
2013-06-22 15:47 - 2013-07-03 22:45 - 00291128 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2013-06-22 15:47 - 2013-07-03 22:45 - 00291128 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2013-06-22 15:47 - 2013-07-03 22:43 - 00291128 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2013-06-22 15:47 - 2013-06-22 15:47 - 00076888 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\Documents\Arktos
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\AppData\Local\PunkBuster
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\AppData\Local\CrashRpt
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\AppData\Local\Arktos
2013-06-22 12:48 - 2013-06-22 12:48 - 00000222 _____ C:\Users\Robin\Desktop\Infestation Survivor Stories.url
2013-06-22 12:48 - 2013-06-22 12:48 - 00000000 ____D C:\Users\Robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-06-22 12:26 - 2013-07-20 21:27 - 00000000 ____D C:\Program Files (x86)\Steam
2013-06-22 12:26 - 2013-06-22 12:26 - 00000928 _____ C:\Users\Public\Desktop\Steam.lnk
2013-06-22 12:25 - 2013-06-22 12:25 - 08531968 _____ C:\Users\Robin\Downloads\SteamInstall_German.msi
2013-06-22 12:09 - 2013-06-22 12:09 - 00003548 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2013-06-22 02:17 - 2013-06-22 12:09 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-06-22 02:12 - 2013-07-10 23:08 - 78185248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== One Month Modified Files and Folders =======
2013-07-20 21:35 - 2013-06-19 10:15 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-07-20 21:31 - 2013-06-19 10:27 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-20 21:31 - 2013-01-17 07:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-07-20 21:31 - 2012-07-26 09:52 - 00000000 ____D C:\WINDOWS\ShellNew
2013-07-20 21:30 - 2013-01-17 07:46 - 01127009 _____ C:\WINDOWS\WindowsUpdate.log
2013-07-20 21:30 - 2012-08-01 17:58 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-07-20 21:29 - 2012-07-26 07:26 - 00000100 _____ C:\WINDOWS\win.ini
2013-07-20 21:28 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-07-20 21:27 - 2013-06-22 12:26 - 00000000 ____D C:\Program Files (x86)\Steam
2013-07-20 21:17 - 2013-06-19 14:34 - 00000000 ____D C:\Users\Robin\AppData\Roaming\WebCake
2013-07-20 20:00 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru
2013-07-20 19:49 - 2013-01-17 15:48 - 00753134 _____ C:\WINDOWS\system32\perfh007.dat
2013-07-20 19:49 - 2013-01-17 15:48 - 00155826 _____ C:\WINDOWS\system32\perfc007.dat
2013-07-20 19:49 - 2012-07-26 09:28 - 01745416 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-07-20 19:44 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-07-20 11:59 - 2013-07-19 19:01 - 00004368 _____ C:\WINDOWS\SysWOW64\bufferpool.txt
2013-07-20 11:59 - 2012-07-26 07:26 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2013-07-20 11:57 - 2013-01-17 07:34 - 00000000 ____D C:\ProgramData\McAfee
2013-07-20 11:57 - 2012-08-01 17:51 - 00103082 _____ C:\WINDOWS\PFRO.log
2013-07-20 10:25 - 2013-07-20 10:25 - 00000000 ____D C:\FRST
2013-07-20 10:23 - 2013-07-20 10:23 - 01779345 _____ (Farbar) C:\Users\Robin\Desktop\FRST64.exe
2013-07-20 10:20 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-07-19 22:33 - 2013-07-19 22:33 - 00001806 _____ C:\Users\Robin\Documents\Ereignisse.txt
2013-07-19 20:38 - 2013-06-28 16:01 - 00000000 ____D C:\Users\Robin\AppData\Roaming\TS3Client
2013-07-19 19:28 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-07-19 19:05 - 2013-07-19 19:05 - 00000000 ____D C:\Users\Robin\AppData\Roaming\Avira
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\Users\Robin\AppData\Roaming\Mozilla
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\ProgramData\APN
2013-07-19 19:02 - 2013-07-19 19:02 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-07-19 19:01 - 2013-07-19 19:01 - 00002077 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-07-19 19:01 - 2013-07-19 19:01 - 00000000 ____D C:\ProgramData\Avira
2013-07-19 19:01 - 2013-07-19 19:01 - 00000000 ____D C:\Program Files (x86)\Avira
2013-07-19 19:00 - 2013-07-19 18:55 - 104943936 _____ C:\Users\Robin\Downloads\avira3737_free_antivirus_de.exe
2013-07-19 18:59 - 2012-07-26 10:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2013-07-14 02:25 - 2013-07-14 02:25 - 00427328 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-07-13 22:48 - 2012-07-26 07:26 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2013-07-12 20:39 - 2012-07-26 09:52 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-10 23:08 - 2013-06-22 02:12 - 78185248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-07-08 00:18 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\NDF
2013-07-07 12:04 - 2013-06-18 14:31 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2531656798-1920166471-395699410-1002
2013-07-06 02:45 - 2012-07-26 07:37 - 00000000 ____D C:\WINDOWS\servicing
2013-07-05 20:03 - 2013-06-22 17:23 - 00000000 ____D C:\Users\Robin\AppData\Local\PMB Files
2013-07-05 20:03 - 2013-06-22 17:23 - 00000000 ____D C:\ProgramData\PMB Files
2013-07-03 22:47 - 2013-07-03 22:47 - 00000000 ____D C:\Users\Robin\AppData\Roaming\LolClient
2013-07-03 22:45 - 2013-06-22 15:47 - 00291128 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2013-07-03 22:45 - 2013-06-22 15:47 - 00291128 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2013-07-03 22:43 - 2013-06-22 15:47 - 00291128 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2013-07-03 22:36 - 2013-06-19 14:36 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2013-07-02 21:59 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache
2013-07-02 12:38 - 2013-07-02 12:38 - 00005347 _____ C:\Users\Robin\Downloads\messages-16.zip
2013-07-02 12:14 - 2013-07-02 12:14 - 00000180 _____ C:\Users\Robin\Downloads\244478-RE13 Blasers.txt
2013-06-28 16:00 - 2013-06-28 16:00 - 00000978 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2013-06-28 16:00 - 2013-06-28 16:00 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-06-28 15:59 - 2013-06-28 15:58 - 34954912 _____ (TeamSpeak Systems GmbH) C:\Users\Robin\Downloads\TeamSpeak3-Client-win64-3.0.10.1.exe
2013-06-28 00:04 - 2012-07-26 10:14 - 00693112 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-06-28 00:04 - 2012-07-26 10:14 - 00078200 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-26 15:21 - 2013-06-26 15:21 - 00000000 ____D C:\Users\Robin\AppData\Local\Amazon_Services_LLC
2013-06-23 22:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ToastData
2013-06-23 22:02 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2013-06-23 21:46 - 2013-06-23 21:46 - 00393056 _____ (Softonic ) C:\Users\Robin\Downloads\SoftonicDownloader_fuer_heaven-benchmark.exe
2013-06-22 23:52 - 2013-06-22 23:52 - 00001733 _____ C:\Users\Public\Desktop\League of Legends spielen .lnk
2013-06-22 23:47 - 2013-06-22 23:47 - 00000000 ____D C:\Riot Games
2013-06-22 23:47 - 2013-06-22 21:29 - 00000000 ____D C:\Program Files\League of Legends
2013-06-22 23:47 - 2013-01-17 07:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-22 17:22 - 2013-06-22 17:22 - 03461416 _____ C:\Users\Robin\Downloads\LeagueofLegends-1.exe
2013-06-22 17:22 - 2013-06-19 11:30 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2013-06-22 15:47 - 2013-06-22 15:47 - 00076888 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\Documents\Arktos
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\AppData\Local\PunkBuster
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\AppData\Local\CrashRpt
2013-06-22 15:47 - 2013-06-22 15:47 - 00000000 ____D C:\Users\Robin\AppData\Local\Arktos
2013-06-22 15:46 - 2013-06-19 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2013-06-22 12:48 - 2013-06-22 12:48 - 00000222 _____ C:\Users\Robin\Desktop\Infestation Survivor Stories.url
2013-06-22 12:48 - 2013-06-22 12:48 - 00000000 ____D C:\Users\Robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-06-22 12:26 - 2013-06-22 12:26 - 00000928 _____ C:\Users\Public\Desktop\Steam.lnk
2013-06-22 12:26 - 2013-06-18 14:23 - 00000000 ____D C:\Users\Robin
2013-06-22 12:25 - 2013-06-22 12:25 - 08531968 _____ C:\Users\Robin\Downloads\SteamInstall_German.msi
2013-06-22 12:13 - 2013-06-18 14:24 - 00006864 _____ C:\Users\Robin\AppData\Roaming\AbsoluteReminder.xml
2013-06-22 12:09 - 2013-06-22 12:09 - 00003548 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2013-06-22 12:09 - 2013-06-22 02:17 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-06-22 12:09 - 2013-06-18 14:23 - 00000000 ____D C:\Users\Robin\AppData\Local\Packages
2013-06-22 12:09 - 2012-08-01 17:53 - 00000000 ____D C:\ProgramData\PRICache
2013-06-20 14:48 - 2013-07-19 19:01 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-06-20 14:48 - 2013-07-19 19:01 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2013-07-19 19:06] - [2013-06-01 13:34] - 2391280 ____A (Microsoft Corporation) 0E8E6463F81C80AFBED533E0F1F8895D
C:\Windows\SysWOW64\explorer.exe
[2013-07-19 19:06] - [2013-06-01 12:24] - 2106176 ____A (Microsoft Corporation) EAFE46B0292D2BD2467835E2ACF717CC
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2013-07-19 19:06] - [2013-06-01 13:26] - 0327936 ____A (Microsoft Corporation) 78A5BBA3819FFFC62FFEC3E2220D102D
LastRegBack: 2013-07-13 22:55
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-07-2013
Ran by Robin at 2013-07-20 21:35:08
Running from C:\Users\Robin\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Absolute Reminder (x32 Version: 2.1.0.9)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Amazon Browser App (x32 Version: 1.0.0.0)
Apple Software Update (x32 Version: 2.1.3.127)
Avira Free Antivirus (x32 Version: 13.0.0.3737)
Avira SearchFree Toolbar plus Web Protection (x32 Version: 12.2.1.477)
Benutzerhandbuch (x32 Version: 1.0.0.9)
Dolby Home Theater v4 (x32 Version: 7.2.8000.16)
dows-Treiberpaket - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1) (Version: 06/15/2012 8.1.0.1)
Energy Management (x32 Version: 8.0.2.4)
ExpressCache (Version: 1.0.86)
Infestation: Survivor Stories (x32)
Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10)
Intel PROSet Wireless
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2817)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.5.0.0344)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 2.6.1209.0268)
Intel(R) Rapid Start Technology (x32 Version: 2.1.0.1002)
Intel(R) Rapid Storage Technology (x32 Version: 11.5.0.1207)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel® PROSet/Wireless WiFi-Software (Version: 15.05.2000.1462)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
League of Legends (x32 Version: 1.3)
Lenovo EasyCamera (x32 Version: 1.12.824.1)
Lenovo MediaShow6 (x32 Version: 6.0.4326)
Lenovo OneKey Recovery (Version: 8.0.0.0710)
Lenovo OneKey Recovery (x32 Version: 8.0.0.0710)
Lenovo PowerDVD10 (x32 Version: 10.0.4331.52)
Lenovo Smart Update (x32 Version: 1.6.77)
Lenovo YouCam (x32 Version: 4.1.3127)
LenovoDrv_x64 (Version: 1.0.00)
LockKey (x32 Version: 1.38.1.2)
Microsoft Office (x32 Version: 14.0.6120.5004)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
NVIDIA GeForce Experience 1.5 (Version: 1.5)
NVIDIA Grafiktreiber 306.97 (Version: 306.97)
NVIDIA Install Application (Version: 2.1002.124.810)
NVIDIA Optimus 4.11.9 (Version: 4.11.9)
NVIDIA PhysX (x32 Version: 9.12.0613)
NVIDIA PhysX-Systemsoftware 9.12.0613 (Version: 9.12.0613)
NVIDIA Systemsteuerung 306.97 (Version: 306.97)
NVIDIA Update 4.11.9 (Version: 4.11.9)
NVIDIA Update Components (Version: 4.11.9)
Pando Media Booster (x32 Version: 2.6.0.9)
Power2Go (x32 Version: 5.6.0.9109)
PunkBuster Services (x32 Version: 0.993)
Realtek Ethernet Controller Driver (x32 Version: 8.3.730.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6695)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.8400.39030)
Safari (x32 Version: 5.34.57.2)
Shared C Run-time for x64 (Version: 10.0.0)
Steam (x32 Version: 1.0.0.0)
SugarSync Manager (x32 Version: 1.9.61.90905)
Synaptics Pointing Device Driver (Version: 16.2.10.7)
TeamSpeak 3 Client (Version: 3.0.10)
UserGuide (x32 Version: 1.0.0.9)
WebCake 3.00 (Version: 3.00)
Windows Driver Package - Lenovo Corporation (LAD) System (06/08/2012 1.0.0.3) (Version: 06/08/2012 1.0.0.3)
Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (Version: 06/19/2012 10.13.29.733)
==================== Restore Points =========================
19-07-2013 17:28:17 Windows Update
20-07-2013 19:28:26 Removed Microsoft Office Enterprise 2007
==================== Hosts content: ==========================
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {087737FC-F41E-4D64-925F-61028EE5A98B} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect
Task: {095D42DE-699A-4316-91A8-EE959C07FD5B} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27] (CyberLink)
Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation)
Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical
Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance
Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {28840A0D-3CE4-4689-8BC4-175A83263DB2} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe [2012-08-15] (Microsoft Corporation)
Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh
Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks
Task: {2FBB994E-1890-470F-8C67-B4F6F850B384} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup
Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update
Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator
Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask
Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance
Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage
Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2013-06-01] (Microsoft Corporation)
Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon
Task: {4BF727ED-61BC-4136-8758-DD10FD8E43E3} - System32\Tasks\WPD\SqmUpload_S-1-5-21-2531656798-1920166471-395699410-1002 => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance
Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required
Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation)
Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation)
Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319
Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update
Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance
Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance
Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode)
Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses
Task: {92AD3A96-894D-4B5F-B0F5-9ECD6FB55D2F} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => C:\WINDOWS\system32\sc.exe [2012-07-26] (Microsoft Corporation)
Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime
Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64
Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic
Task: {9C4D1E99-6B67-4B82-9DCD-7BB4D69389CD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask
Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh
Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask
Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask
Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan
Task: {B7211CD4-8302-431B-871D-15E27A862EC9} - System32\Tasks\OFFICE2010ACT => C:\ProgramData\Microsoft\Windows\OFFICEICON.vbs [2012-03-08] ()
Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific
Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan
Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork
Task: {D647C1E2-D1DF-41BD-885F-7E06859E7CEC} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-19] (Adobe Systems Incorporated)
Task: {D770B186-F3F4-4C69-ADCB-ED149737462F} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2531656798-1920166471-395699410-1002
Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical
Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery
Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM
Task: {F0FD1F17-064F-4A65-A14F-89A6928ADD26} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall
Task: {F31A6BEA-E563-4D69-A953-E9E5F5CA8D03} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Faulty Device Manager Devices =============
Name: Intel(R) Centrino(R) Wireless Bluetooth(R) 4.0 + High Speed Adapter
Description: Intel(R) Centrino(R) Wireless Bluetooth(R) 4.0 + High Speed Adapter
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Intel Corporation
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (07/20/2013 11:58:20 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ZeroConfigService.exe, Version: 15.5.0.2, Zeitstempel: 0x50070789
Name des fehlerhaften Moduls: MurocApi.dll, Version: 15.5.0.1, Zeitstempel: 0x500706ce
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000026390
ID des fehlerhaften Prozesses: 0x974
Startzeit der fehlerhaften Anwendung: 0xZeroConfigService.exe0
Pfad der fehlerhaften Anwendung: ZeroConfigService.exe1
Pfad des fehlerhaften Moduls: ZeroConfigService.exe2
Berichtskennung: ZeroConfigService.exe3
Vollständiger Name des fehlerhaften Pakets: ZeroConfigService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ZeroConfigService.exe5
Error: (07/19/2013 07:09:13 PM) (Source: Application Hang) (User: )
Description: Programm avcenter.exe, Version 13.6.0.1550 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: b60
Startzeit: 01ce84a28d708856
Endzeit: 14
Anwendungspfad: C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
Berichts-ID: ebaae8f5-f095-11e2-be82-2089843461f3
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (07/16/2013 09:13:58 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
Error: (07/12/2013 08:27:17 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
Error: (07/08/2013 05:45:37 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WebKit2WebProcess.exe, Version: 7534.57.2.4, Zeitstempel: 0x4f97642d
Name des fehlerhaften Moduls: verifier.dll, Version: 6.2.9200.16384, Zeitstempel: 0x5010ae19
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000c121
ID des fehlerhaften Prozesses: 0x11f0
Startzeit der fehlerhaften Anwendung: 0xWebKit2WebProcess.exe0
Pfad der fehlerhaften Anwendung: WebKit2WebProcess.exe1
Pfad des fehlerhaften Moduls: WebKit2WebProcess.exe2
Berichtskennung: WebKit2WebProcess.exe3
Vollständiger Name des fehlerhaften Pakets: WebKit2WebProcess.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: WebKit2WebProcess.exe5
Error: (07/08/2013 05:18:14 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WebKit2WebProcess.exe, Version: 7534.57.2.4, Zeitstempel: 0x4f97642d
Name des fehlerhaften Moduls: WebKit.dll, Version: 7534.57.2.4, Zeitstempel: 0x4f976417
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000c7f63
ID des fehlerhaften Prozesses: 0x6fc
Startzeit der fehlerhaften Anwendung: 0xWebKit2WebProcess.exe0
Pfad der fehlerhaften Anwendung: WebKit2WebProcess.exe1
Pfad des fehlerhaften Moduls: WebKit2WebProcess.exe2
Berichtskennung: WebKit2WebProcess.exe3
Vollständiger Name des fehlerhaften Pakets: WebKit2WebProcess.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: WebKit2WebProcess.exe5
Error: (07/08/2013 05:18:07 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SynTPEnh.exe, Version: 16.2.10.7, Zeitstempel: 0x50327655
Name des fehlerhaften Moduls: SynTPEnh.exe, Version: 16.2.10.7, Zeitstempel: 0x50327655
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000009d6f4
ID des fehlerhaften Prozesses: 0x1444
Startzeit der fehlerhaften Anwendung: 0xSynTPEnh.exe0
Pfad der fehlerhaften Anwendung: SynTPEnh.exe1
Pfad des fehlerhaften Moduls: SynTPEnh.exe2
Berichtskennung: SynTPEnh.exe3
Vollständiger Name des fehlerhaften Pakets: SynTPEnh.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SynTPEnh.exe5
Error: (07/07/2013 10:59:13 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Error: (07/07/2013 08:31:52 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
Error: (07/07/2013 08:24:43 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SynTPEnh.exe, Version: 16.2.10.7, Zeitstempel: 0x50327655
Name des fehlerhaften Moduls: SynTPEnh.exe, Version: 16.2.10.7, Zeitstempel: 0x50327655
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000009d6f4
ID des fehlerhaften Prozesses: 0x274
Startzeit der fehlerhaften Anwendung: 0xSynTPEnh.exe0
Pfad der fehlerhaften Anwendung: SynTPEnh.exe1
Pfad des fehlerhaften Moduls: SynTPEnh.exe2
Berichtskennung: SynTPEnh.exe3
Vollständiger Name des fehlerhaften Pakets: SynTPEnh.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SynTPEnh.exe5
System errors:
=============
Error: (07/20/2013 07:45:21 PM) (Source: bowser) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "ROBINUB" auf Transport "NetBT_Tcpip_{AC841A8F-3C02-4F38-8253-2BEC8EE95B69}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.
Error: (07/20/2013 07:44:25 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 20.07.2013 um 15:58:04 unerwartet heruntergefahren.
Error: (07/20/2013 03:18:31 PM) (Source: bowser) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "ROBINUB" auf Transport "NetBT_Tcpip_{AC841A8F-3C02-4F38-8253-2BEC8EE95B69}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.
Error: (07/20/2013 03:18:04 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 20.07.2013 um 12:39:59 unerwartet heruntergefahren.
Error: (07/20/2013 00:00:16 PM) (Source: bowser) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "ROBINUB" auf Transport "NetBT_Tcpip_{AC841A8F-3C02-4F38-8253-2BEC8EE95B69}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.
Error: (07/20/2013 11:58:32 AM) (Source: Service Control Manager) (User: )
Description: Dienst "Intel(R) PROSet/Wireless Zero Configuration Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (07/20/2013 11:58:17 AM) (Source: bowser) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "ROBINUB" auf Transport "NetBT_Tcpip_{AC841A8F-3C02-4F38-8253-2BEC8EE95B69}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.
Error: (07/20/2013 11:57:35 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 20.07.2013 um 10:28:48 unerwartet heruntergefahren.
Error: (07/19/2013 10:31:24 PM) (Source: bowser) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "ROBINUB" auf Transport "NetBT_Tcpip_{AC841A8F-3C02-4F38-8253-2BEC8EE95B69}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.
Error: (07/19/2013 08:24:24 PM) (Source: bowser) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "ROBINUB" auf Transport "NetBT_Tcpip_{AC841A8F-3C02-4F38-8253-2BEC8EE95B69}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2013-07-19 20:35:58.663
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-07-19 19:06:23.286
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-07-19 18:46:05.947
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-07-16 08:55:05.048
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-07-14 20:20:34.784
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-07-06 19:58:22.084
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-07-02 18:29:05.654
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-30 18:46:52.157
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-28 16:02:44.756
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-28 16:01:41.882
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume7\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Percentage of memory in use: 37%
Total physical RAM: 8066.02 MB
Available physical RAM: 5080.93 MB
Total Pagefile: 9282.02 MB
Available Pagefile: 6308.9 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (Windows8_OS) (Fixed) (Total:884.18 GB) (Free:829.68 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.6 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 22 GB) (Disk ID: E2B5C4E2)
Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 932 GB) (Disk ID: E2B5C4EF)
Partition: GPT Partition Type
==================== End Of Log ============================
|
|
21.07.2013, 13:51
| #5 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe Rootkitscan mit GMER Bitte lade dir  GMER herunter: (Dateiname zufällig)
 Tauchen Probleme auf?
Anschließend bitte MBAR ausführen: Malwarebytes Anti-Rootkit (MBAR) Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
24.07.2013, 21:40
| #6 |
| | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe Nachdem ich GMER gestartet habe, meldet er mir "C:\windows\system32\config\system: der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. Ich habe jedoch vorher alle Programm geschlossen. Wie weiter? liebe Grüße ! |
|
25.07.2013, 04:08
| #7 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe Neustarten, nochmal probieren  Geht es wieder niht, GMER bitte weglassen und nur das andere Tool laufen lassen
__________________ Logfiles bitte immer in CODE-Tags posten |
|
25.07.2013, 10:15
| #8 |
| | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe Vorher; Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.06.0.1004
www.malwarebytes.org
Database version: v2013.07.25.02
Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16635
Robin :: ROBINUB [administrator]
25.07.2013 10:47:40
mbar-log-2013-07-25 (10-47-40).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUM | P2P
Scan options disabled: PUP
Objects scanned: 249918
Time elapsed: 10 minute(s), 32 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 1
c:\Users\Robin\AppData\Local\Temp\DIQM\directx_027\directx.exe (Adware.DomaIQ) -> Delete on reboot.
Physical Sectors Detected: 0
(No malicious items detected)
(end)
Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.06.0.1004
www.malwarebytes.org
Database version: v2013.07.25.02
Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16635
Robin :: ROBINUB [administrator]
25.07.2013 11:03:49
mbar-log-2013-07-25 (11-03-49).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUM | P2P
Scan options disabled: PUP
Objects scanned: 249783
Time elapsed: 7 minute(s), 11 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
|
|
25.07.2013, 16:49
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Im Anschluss: adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Danach eine Kontrolle mit OTL bitte:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
25.07.2013, 22:05
| #10 |
| | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe JRT Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.2.2 (07.22.2013:2)
OS: Windows 8 x64
Ran by Robin on 25.07.2013 at 22:42:56,25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
Successfully stopped: [Service] webcake desktop updater
Successfully deleted: [Service] webcake desktop updater
~~~ Registry Values
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\webcake desktop
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\appid\webcakeieclient.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\appid\{7169bbb3-3289-4696-b35d-4a88bcf6fb12}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\clsid\{2a5a2a90-3b30-4e6e-a955-2f232c6ef517}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\clsid\{af6b0594-6008-4327-93e5-608ad710a6fa}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\clsid\{bb975e58-e769-4e5a-ba12-b765bc559ff3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\clsid\{df84e609-c3a4-49cb-a160-61767daf8899}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\clsid\{fb684d26-01f4-4d9d-87cb-f486beba56dc}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\interface\{0afd55c8-adf8-4a33-a6e1-dedb7a36aeb4}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\interface\{df84e609-c3a4-49cb-a160-61767daf8899}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\typelib\{efdf368c-8dd9-4e05-87cd-16aa5cb03cb8}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\webcakeieclient.api
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\webcakeieclient.api.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\webcakeieclient.layers
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\webcakeieclient.layers.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\clsid\{fb684d26-01f4-4d9d-87cb-f486beba56dc}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\webcakedesktop_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\webcakedesktop_rasmancs
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\ProgramData\tarma installer"
Successfully deleted: [Folder] "C:\Users\Robin\AppData\Roaming\webcake"
Successfully deleted: [Folder] "C:\Program Files (x86)\webcake"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.07.2013 at 22:45:48,79
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Dann ADW Code:
ATTFilter # AdwCleaner v2.306 - Datei am 25/07/2013 um 22:50:16 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzer : Robin - ROBINUB
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Robin\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
Gestoppt & Gelöscht : APNMCP
***** [Dateien / Ordner] *****
Ordner Gelöscht : C:\Program Files (x86)\AskPartnerNetwork
Ordner Gelöscht : C:\ProgramData\AskPartnerNetwork
Ordner Gelöscht : C:\Users\Robin\AppData\Local\Temp\APN
***** [Registrierungsdatenbank] *****
Schlüssel Gelöscht : HKCU\Software\AskPartnerNetwork
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AF6B0594-6008-4327-93E5-608AD710A6FA}
Schlüssel Gelöscht : HKLM\Software\AskPartnerNetwork
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AF6B0594-6008-4327-93E5-608AD710A6FA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}
Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16537
[OK] Die Registrierungsdatenbank ist sauber.
*************************
AdwCleaner[S1].txt - [1854 octets] - [25/07/2013 22:50:16]
########## EOF - C:\AdwCleaner[S1].txt - [1914 octets] ##########
Und zuguter Letzt OTL Code:
ATTFilter OTL logfile created on: 25.07.2013 22:55:44 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Robin\Desktop 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16635) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 7,88 Gb Total Physical Memory | 5,28 Gb Available Physical Memory | 67,07% Memory free 9,06 Gb Paging File | 6,45 Gb Available in Paging File | 71,20% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 884,18 Gb Total Space | 828,33 Gb Free Space | 93,68% Space Free | Partition Type: NTFS Drive D: | 25,00 Gb Total Space | 22,60 Gb Free Space | 90,42% Space Free | Partition Type: NTFS Computer Name: ROBINUB | User Name: Robin | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Robin\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) PRC - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) PRC - C:\Windows\SysWOW64\PnkBstrA.exe () PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (NVIDIA Corporation) PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation) PRC - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Motorola Solutions, Inc.) PRC - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.) PRC - C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe (Lenovo) PRC - C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (CyberLink Corp.) PRC - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink) PRC - C:\Windows\SysWOW64\irstrtsv.exe (Intel Corporation) PRC - C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe (Lenovo) PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) PRC - C:\Program Files (x86)\Safari\Safari.exe (Apple Inc.) PRC - C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe (Apple Inc.) PRC - C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.) PRC - C:\Program Files (x86)\USB Camera2\VM332STI.EXE (Vimicro) PRC - C:\Program Files (x86)\LockKey\LockKey.exe ( ) ========== Modules (No Company Name) ========== MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\5e3a9f3d64adfb3c69b49d37368bf454\mscorlib.ni.dll () MOD - C:\Program Files (x86)\Steam\bin\chromehtml.DLL () MOD - C:\Program Files (x86)\Steam\bin\libcef.dll () MOD - C:\Program Files (x86)\Steam\SDL2.dll () MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () MOD - C:\Program Files (x86)\Steam\bin\avcodec-53.dll () MOD - C:\Program Files (x86)\Steam\bin\avformat-53.dll () MOD - C:\Program Files (x86)\Steam\bin\avutil-51.dll () MOD - C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll () MOD - C:\Program Files (x86)\Lenovo\Lenovo Smart Update\HookDll.dll () MOD - C:\Program Files (x86)\Safari\Apple Application Support\zlib1.dll () MOD - C:\Program Files (x86)\Safari\Apple Application Support\libxml2.dll () ========== Services (SafeList) ========== SRV:64bit: - (DsmSvc) -- C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation) SRV:64bit: - (netprofm) -- C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation) SRV:64bit: - (BrokerInfrastructure) -- C:\Windows\SysNative\bisrv.dll (Microsoft Corporation) SRV:64bit: - (AudioEndpointBuilder) -- C:\Windows\SysNative\AudioEndpointBuilder.dll (Microsoft Corporation) SRV:64bit: - (TimeBroker) -- C:\Windows\SysNative\TimeBrokerServer.dll (Microsoft Corporation) SRV:64bit: - (SystemEventsBroker) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation) SRV:64bit: - (wlidsvc) -- C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation) SRV:64bit: - (LSM) -- C:\Windows\SysNative\lsm.dll (Microsoft Corporation) SRV:64bit: - (WSService) -- C:\Windows\SysNative\WSService.dll (Microsoft Corporation) SRV:64bit: - (fhsvc) -- C:\Windows\SysNative\fhsvc.dll (Microsoft Corporation) SRV:64bit: - (PrintNotify) -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation) SRV:64bit: - (WiaRpc) -- C:\Windows\SysNative\wiarpc.dll (Microsoft Corporation) SRV:64bit: - (Wcmsvc) -- C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation) SRV:64bit: - (VaultSvc) -- C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation) SRV:64bit: - (svsvc) -- C:\Windows\SysNative\svsvc.dll (Microsoft Corporation) SRV:64bit: - (Netlogon) -- C:\Windows\SysNative\netlogon.dll (Microsoft Corporation) SRV:64bit: - (NcaSvc) -- C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation) SRV:64bit: - (NcdAutoSetup) -- C:\Windows\SysNative\NcdAutoSetup.dll (Microsoft Corporation) SRV:64bit: - (KeyIso) -- C:\Windows\SysNative\keyiso.dll (Microsoft Corporation) SRV:64bit: - (EFS) -- C:\Windows\SysNative\efssvc.dll (Microsoft Corporation) SRV:64bit: - (DeviceAssociationService) -- C:\Windows\SysNative\das.dll (Microsoft Corporation) SRV:64bit: - (AllUserInstallAgent) -- C:\Windows\SysNative\AUInstallAgent.dll (Microsoft Corporation) SRV:64bit: - (vmicvss) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmictimesync) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmicshutdown) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmicrdv) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmickvpexchange) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV:64bit: - (vmicheartbeat) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation) SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe () SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirWebService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation) SRV - (Bluetooth OBEX Service) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Motorola Solutions, Inc.) SRV - (Bluetooth Device Monitor) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.) SRV - (cphs) -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation) SRV - (PrintNotify) -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll (Microsoft Corporation) SRV - (StorSvc) -- C:\Windows\SysWOW64\StorSvc.dll (Microsoft Corporation) SRV - (irstrtsv) -- C:\Windows\SysWOW64\irstrtsv.exe (Intel Corporation) SRV - (Lenovo Smart Update Service) -- C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe (Lenovo) SRV - (ZeroConfigService) -- C:\Programme\Intel\WiFi\bin\ZeroConfigService.exe (Intel® Corporation) SRV - (MyWiFiDHCPDNS) -- C:\Programme\Intel\WiFi\bin\PanDhcpDns.exe () SRV - (EvtEng) -- C:\Programme\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation) SRV - (RegSrvc) -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation) SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (AMPPALR3) -- C:\Programme\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel Corporation) SRV - (IconMan_R) -- C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe (Realsil Microelectronics Inc.) SRV - (jhi_service) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) SRV - (BTHSSecurityMgr) -- C:\Programme\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel(R) Corporation) SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) SRV - (ExpressCache) -- C:\Programme\Diskeeper Corporation\ExpressCache\ExpressCache.exe (Diskeeper Corporation) ========== Driver Services (SafeList) ========== DRV:64bit: - (avipbb) -- C:\Windows\SysNative\Drivers\avipbb.sys (Avira Operations GmbH & Co. KG) DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\Drivers\avgntflt.sys (Avira Operations GmbH & Co. KG) DRV:64bit: - (sdbus) -- C:\Windows\SysNative\Drivers\sdbus.sys (Microsoft Corporation) DRV:64bit: - (USBXHCI) -- C:\Windows\SysNative\Drivers\USBXHCI.SYS (Microsoft Corporation) DRV:64bit: - (UCX01000) -- C:\Windows\SysNative\Drivers\UCX01000.SYS (Microsoft Corporation) DRV:64bit: - (BthAvrcpTg) -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys (Microsoft Corporation) DRV:64bit: - (avnetflt) -- C:\Windows\SysNative\Drivers\avnetflt.sys (Avira Operations GmbH & Co. KG) DRV:64bit: - (USBHUB3) -- C:\Windows\SysNative\Drivers\USBHUB3.SYS (Microsoft Corporation) DRV:64bit: - (spaceport) -- C:\Windows\SysNative\Drivers\spaceport.sys (Microsoft Corporation) DRV:64bit: - (storahci) -- C:\Windows\SysNative\Drivers\storahci.sys (Microsoft Corporation) DRV:64bit: - (TPM) -- C:\Windows\SysNative\Drivers\tpm.sys (Microsoft Corporation) DRV:64bit: - (pdc) -- C:\Windows\SysNative\Drivers\pdc.sys (Microsoft Corporation) DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\Drivers\avkmgr.sys (Avira Operations GmbH & Co. KG) DRV:64bit: - (WdBoot) -- C:\Windows\SysNative\Drivers\WdBoot.sys (Microsoft Corporation) DRV:64bit: - (WdFilter) -- C:\Windows\SysNative\Drivers\WdFilter.sys (Microsoft Corporation) DRV:64bit: - (LHDmgr) -- C:\Windows\SysNative\Drivers\LhdX64.sys (Lenovo.) DRV:64bit: - (ACPIVPC) -- C:\Windows\SysNative\Drivers\AcpiVpc.sys (Lenovo Corporation) DRV:64bit: - (msgpiowin32) -- C:\Windows\SysNative\Drivers\msgpiowin32.sys (Microsoft Corporation) DRV:64bit: - (bthhfhid) -- C:\Windows\SysNative\Drivers\BthhfHid.sys (Microsoft Corporation) DRV:64bit: - (hidi2c) -- C:\Windows\SysNative\Drivers\hidi2c.sys (Microsoft Corporation) DRV:64bit: - (FxPPM) -- C:\Windows\SysNative\Drivers\fxppm.sys (Microsoft Corporation) DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys (Microsoft Corporation) DRV:64bit: - (sdstor) -- C:\Windows\SysNative\Drivers\sdstor.sys (Microsoft Corporation) DRV:64bit: - (dam) -- C:\Windows\SysNative\Drivers\dam.sys (Microsoft Corporation) DRV:64bit: - (WSDScan) -- C:\Windows\SysNative\Drivers\WSDScan.sys (Microsoft Corporation) DRV:64bit: - (nvpciflt) -- C:\Windows\SysNative\Drivers\nvpciflt.sys (NVIDIA Corporation) DRV:64bit: - (GPIOClx0101) -- C:\Windows\SysNative\Drivers\msgpioclx.sys (Microsoft Corporation) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\Drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\Drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (btmhsf) -- C:\Windows\SysNative\Drivers\btmhsf.sys (Motorola Solutions, Inc.) DRV:64bit: - (btmaux) -- C:\Windows\SysNative\Drivers\btmaux.sys (Motorola Solutions, Inc.) DRV:64bit: - (vm332avs) -- C:\Windows\SysNative\Drivers\vm332avs.sys (Vimicro Corporation) DRV:64bit: - (SynTP) -- C:\Windows\SysNative\Drivers\SynTP.sys (Synaptics Incorporated) DRV:64bit: - (SmbDrvI) -- C:\Windows\SysNative\Drivers\Smb_driver_Intel.sys (Synaptics Incorporated) DRV:64bit: - (NETwNe64) -- C:\Windows\SysNative\Drivers\NETwew00.sys (Intel Corporation) DRV:64bit: - (igfx) -- C:\Windows\SysNative\Drivers\igdkmd64.sys (Intel Corporation) DRV:64bit: - (ibtfltcoex) -- C:\Windows\SysNative\Drivers\iBtFltCoex.sys (Intel Corporation) DRV:64bit: - (RTL8168) -- C:\Windows\SysNative\Drivers\Rt630x64.sys (Realtek ) DRV:64bit: - (Fs_Rec) -- C:\WINDOWS\SysNative\drivers\fs_rec.sys (Microsoft Corporation) DRV:64bit: - (condrv) -- C:\Windows\SysNative\Drivers\condrv.sys (Microsoft Corporation) DRV:64bit: - (VSTXRAID) -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS (VIA Corporation) DRV:64bit: - (VerifierExt) -- C:\Windows\SysNative\Drivers\VerifierExt.sys (Microsoft Corporation) DRV:64bit: - (UASPStor) -- C:\Windows\SysNative\Drivers\uaspstor.sys (Microsoft Corporation) DRV:64bit: - (acpiex) -- C:\Windows\SysNative\Drivers\acpiex.sys (Microsoft Corporation) DRV:64bit: - (mvumis) -- C:\Windows\SysNative\Drivers\mvumis.sys (Marvell Semiconductor, Inc.) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\Drivers\stexstor.sys (Promise Technology, Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\Drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (LSI_SSS) -- C:\Windows\SysNative\Drivers\lsi_sss.sys (LSI Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\Drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (EhStorTcgDrv) -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys (Microsoft Corporation) DRV:64bit: - (EhStorClass) -- C:\Windows\SysNative\Drivers\EhStorClass.sys (Microsoft Corporation) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\Drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (3ware) -- C:\Windows\SysNative\Drivers\3ware.sys (LSI) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\Drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\Drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (CLFS) -- C:\Windows\SysNative\Drivers\clfs.sys (Microsoft Corporation) DRV:64bit: - (WFPLWFS) -- C:\Windows\SysNative\Drivers\wfplwfs.sys (Microsoft Corporation) DRV:64bit: - (vpci) -- C:\Windows\SysNative\Drivers\vpci.sys (Microsoft Corporation) DRV:64bit: - (terminpt) -- C:\Windows\SysNative\Drivers\terminpt.sys (Microsoft Corporation) DRV:64bit: - (WSDPrintDevice) -- C:\Windows\SysNative\Drivers\WSDPrint.sys (Microsoft Corporation) DRV:64bit: - (mshidumdf) -- C:\Windows\SysNative\Drivers\mshidumdf.sys (Microsoft Corporation) DRV:64bit: - (BasicDisplay) -- C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation) DRV:64bit: - (HyperVideo) -- C:\Windows\SysNative\Drivers\HyperVideo.sys (Microsoft Corporation) DRV:64bit: - (BasicRender) -- C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation) DRV:64bit: - (gencounter) -- C:\Windows\SysNative\Drivers\vmgencounter.sys (Microsoft Corporation) DRV:64bit: - (kdnic) -- C:\Windows\SysNative\Drivers\kdnic.sys (Microsoft Corporation) DRV:64bit: - (acpitime) -- C:\Windows\SysNative\Drivers\acpitime.sys (Microsoft Corporation) DRV:64bit: - (npsvctrig) -- C:\Windows\SysNative\Drivers\npsvctrig.sys (Microsoft Corporation) DRV:64bit: - (WpdUpFltr) -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys (Microsoft Corporation) DRV:64bit: - (acpipagr) -- C:\Windows\SysNative\Drivers\acpipagr.sys (Microsoft Corporation) DRV:64bit: - (hyperkbd) -- C:\Windows\SysNative\Drivers\hyperkbd.sys (Microsoft Corporation) DRV:64bit: - (SerCx) -- C:\Windows\SysNative\Drivers\SerCx.sys (Microsoft Corporation) DRV:64bit: - (SpbCx) -- C:\Windows\SysNative\Drivers\SpbCx.sys (Microsoft Corporation) DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\Drivers\TsUsbGD.sys (Microsoft Corporation) DRV:64bit: - (BthHFEnum) -- C:\Windows\SysNative\Drivers\bthhfenum.sys (Microsoft Corporation) DRV:64bit: - (dmvsc) -- C:\Windows\SysNative\Drivers\dmvsc.sys (Microsoft Corporation) DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys (Microsoft Corporation) DRV:64bit: - (wpcfltr) -- C:\Windows\SysNative\Drivers\wpcfltr.sys (Microsoft Corporation) DRV:64bit: - (BthLEEnum) -- C:\Windows\SysNative\Drivers\BthLEEnum.sys (Microsoft Corporation) DRV:64bit: - (NdisImPlatform) -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys (Microsoft Corporation) DRV:64bit: - (MsLldp) -- C:\Windows\SysNative\Drivers\mslldp.sys (Microsoft Corporation) DRV:64bit: - (Ndu) -- C:\Windows\SysNative\Drivers\Ndu.sys (Microsoft Corporation) DRV:64bit: - (irstrtdv) -- C:\Windows\SysNative\Drivers\irstrtdv.sys (Intel Corporation) DRV:64bit: - (AMPPALP) -- C:\Windows\SysNative\Drivers\AmpPal.sys (Windows (R) Win 7 DDK provider) DRV:64bit: - (AMPPAL) -- C:\Windows\SysNative\Drivers\AmpPal.sys (Windows (R) Win 7 DDK provider) DRV:64bit: - (iaStorA) -- C:\Windows\SysNative\Drivers\iaStorA.sys (Intel Corporation) DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\Drivers\HECIx64.sys (Intel Corporation) DRV:64bit: - (IntcDAud) -- C:\Windows\SysNative\Drivers\IntcDAud.sys (Intel(R) Corporation) DRV:64bit: - (RSUSBVSTOR) -- C:\Windows\SysNative\Drivers\RtsUVStor.sys (Realtek Semiconductor Corp.) DRV:64bit: - (wsvd) -- C:\Windows\SysNative\Drivers\wsvd.sys ("CyberLink) DRV:64bit: - (LAD) -- C:\Windows\SysNative\Drivers\LAD.sys (TODO: <Company name>) DRV:64bit: - (NETwNs64) -- C:\Windows\SysNative\Drivers\NETwNs64.sys (Intel Corporation) DRV:64bit: - (e1iexpress) -- C:\Windows\SysNative\Drivers\e1i63x64.sys (Intel Corporation) DRV:64bit: - (excsd) -- C:\Windows\SysNative\Drivers\excsd.sys (Diskeeper Corporation) DRV:64bit: - (excfs) -- C:\Windows\SysNative\Drivers\excfs.sys (Diskeeper Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = IE:64bit: - HKLM\..\SearchScopes\{C10E8E55-6F72-4731-8521-86BE333790A8}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{C10E8E55-6F72-4731-8521-86BE333790A8}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-2531656798-1920166471-395699410-1001\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-2531656798-1920166471-395699410-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com IE - HKU\S-1-5-21-2531656798-1920166471-395699410-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com [binary data] IE - HKU\S-1-5-21-2531656798-1920166471-395699410-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com [binary data] IE - HKU\S-1-5-21-2531656798-1920166471-395699410-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com IE - HKU\S-1-5-21-2531656798-1920166471-395699410-1002\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-2531656798-1920166471-395699410-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK [2013.07.19 19:02:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Robin\AppData\Roaming\mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions [2013.07.03 00:42:09 | 000,713,719 | ---- | M] () (No name found) -- C:\Users\Robin\AppData\Roaming\mozilla\firefox\profiles\{DefaultProfilesFolder}\extensions\toolbar_AVIRA-V7@apn.ask.com.xpi O1 HOSTS File: ([2012.07.26 07:26:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts O2 - BHO: (Avira SearchFree Toolbar plus Web Protection) - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" File not found O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar plus Web Protection) - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" File not found O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll (Motorola Solutions, Inc.) O4:64bit: - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited) O4:64bit: - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe (Lenovo(beijing) Limited) O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:64bit: - HKLM..\Run: [SynLenovoGestureMgr] C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe (Synaptics) O4 - HKLM..\Run: [332BigDog] C:\Program Files (x86)\USB Camera2\VM332STI.EXE (Vimicro) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [Dolby Home Theater v4] C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe (Dolby Laboratories Inc.) O4 - HKLM..\Run: [Intel AppUp(SM) center] C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe (Intel Corporation) O4 - HKLM..\Run: [LockKey] C:\Program Files (x86)\LockKey\LockKey.exe ( ) O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.) O4 - HKLM..\Run: [Smart Update] C:\Program Files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe (Lenovo) O4 - HKLM..\Run: [YouCam Mirage] C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink) O4 - HKLM..\Run: [YouCam Tray] C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (CyberLink Corp.) O4 - HKU\S-1-5-21-2531656798-1920166471-395699410-1002..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\S-1-5-21-2531656798-1920166471-395699410-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8:64bit: - Extra context menu item: An Bluetooth senden - C:\Program Files (x86)\Intel\Bluetooth\btSendToObject.htm () O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: An Bluetooth senden - C:\Program Files (x86)\Intel\Bluetooth\btSendToObject.htm () O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AC841A8F-3C02-4F38-8253-2BEC8EE95B69}: DhcpNameServer = 192.168.178.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EEB3D0CB-704E-4983-9EFF-87DF205BD7CC}: DhcpNameServer = 192.168.2.1 O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation) O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\WINDOWS\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O30 - LSA: Security Packages - (livessp) - File not found O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.07.25 22:54:29 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Robin\Desktop\OTL.exe [2013.07.25 22:42:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERUNT [2013.07.25 22:41:50 | 000,560,934 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\Robin\Desktop\JRT.exe [2013.07.25 10:45:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2013.07.25 10:43:56 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Local\WinZip [2013.07.25 10:43:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip [2013.07.25 10:42:55 | 000,000,000 | ---D | C] -- C:\ProgramData\WinZip [2013.07.25 10:42:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinZip [2013.07.20 10:25:44 | 000,000,000 | ---D | C] -- C:\FRST [2013.07.20 10:23:45 | 001,779,345 | ---- | C] (Farbar) -- C:\Users\Robin\Desktop\FRST64.exe [2013.07.19 19:06:03 | 002,219,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll [2013.07.19 19:06:02 | 006,987,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe [2013.07.19 19:06:02 | 002,391,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [2013.07.19 19:06:02 | 002,106,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe [2013.07.19 19:06:02 | 001,842,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll [2013.07.19 19:06:02 | 001,527,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll [2013.07.19 19:06:01 | 001,453,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll [2013.07.19 19:06:01 | 001,403,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi [2013.07.19 19:06:01 | 001,271,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe [2013.07.19 19:06:01 | 000,729,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\samsrv.dll [2013.07.19 19:06:00 | 001,217,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi [2013.07.19 19:06:00 | 001,093,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe [2013.07.19 19:06:00 | 001,048,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll [2013.07.19 19:06:00 | 000,583,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mscms.dll [2013.07.19 19:06:00 | 000,523,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsGdiConverter.dll [2013.07.19 19:06:00 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsGdiConverter.dll [2013.07.19 19:06:00 | 000,213,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UCX01000.SYS [2013.07.19 19:06:00 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\samlib.dll [2013.07.19 19:05:59 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll [2013.07.19 19:05:59 | 000,337,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS [2013.07.19 19:05:59 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceSetupManager.dll [2013.07.19 19:05:59 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeParserTask.exe [2013.07.19 19:05:58 | 000,194,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdbus.sys [2013.07.19 19:05:58 | 000,125,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dumpsd.sys [2013.07.19 19:05:57 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vdsutil.dll [2013.07.19 19:05:57 | 000,037,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BthAvrcpTg.sys [2013.07.19 19:05:11 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\Avira [2013.07.19 19:02:47 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\Mozilla [2013.07.19 19:01:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira [2013.07.19 19:01:15 | 000,130,016 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\SysNative\drivers\avipbb.sys [2013.07.19 19:01:15 | 000,100,712 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\SysNative\drivers\avgntflt.sys [2013.07.19 19:01:15 | 000,083,672 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\SysNative\drivers\avnetflt.sys [2013.07.19 19:01:15 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\SysNative\drivers\avkmgr.sys [2013.07.19 19:01:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2013.07.19 19:01:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira [2013.07.10 23:01:13 | 001,838,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll [2013.07.10 23:01:12 | 000,595,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\qedit.dll [2013.07.10 23:01:12 | 000,496,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\qedit.dll [2013.07.10 23:00:51 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll [2013.07.10 23:00:48 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll [2013.07.10 23:00:47 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll [2013.07.10 23:00:46 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll [2013.07.10 23:00:46 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe [2013.07.10 23:00:08 | 002,842,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMVDECOD.DLL [2013.07.10 23:00:08 | 002,620,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WMVDECOD.DLL [2013.07.03 22:47:29 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\LolClient [2013.07.03 20:57:57 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tssdisai.dll [2013.06.28 16:01:10 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\TS3Client [2013.06.28 16:00:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client [2013.06.28 16:00:45 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client [2013.06.26 15:21:44 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Local\Amazon_Services_LLC [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.07.25 22:57:28 | 000,753,134 | ---- | M] () -- C:\WINDOWS\SysNative\perfh007.dat [2013.07.25 22:57:28 | 000,710,244 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat [2013.07.25 22:57:28 | 000,155,826 | ---- | M] () -- C:\WINDOWS\SysNative\perfc007.dat [2013.07.25 22:57:28 | 000,132,614 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat [2013.07.25 22:57:27 | 001,745,416 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI [2013.07.25 22:54:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Robin\Desktop\OTL.exe [2013.07.25 22:53:06 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2013.07.25 22:51:05 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2013.07.25 22:51:04 | 2471,297,023 | -HS- | M] () -- C:\hiberfil.sys [2013.07.25 22:48:19 | 000,666,633 | ---- | M] () -- C:\Users\Robin\Desktop\adwcleaner.exe [2013.07.25 22:41:50 | 000,560,934 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\Robin\Desktop\JRT.exe [2013.07.25 22:35:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2013.07.25 10:43:02 | 000,002,242 | ---- | M] () -- C:\Users\Public\Desktop\WinZip.lnk [2013.07.25 10:41:55 | 051,187,712 | ---- | M] () -- C:\Users\Robin\Desktop\wz175-32gev.msi [2013.07.25 10:33:50 | 013,399,154 | ---- | M] () -- C:\Users\Robin\Desktop\mbar-1.06.0.1004.zip [2013.07.24 22:31:02 | 000,377,856 | ---- | M] () -- C:\Users\Robin\Desktop\gmer_2.1.19163.exe [2013.07.24 22:25:59 | 000,423,552 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT [2013.07.20 10:23:50 | 001,779,345 | ---- | M] (Farbar) -- C:\Users\Robin\Desktop\FRST64.exe [2013.07.19 19:01:18 | 000,002,077 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk [2013.07.03 22:45:51 | 000,291,128 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.xtr [2013.07.03 22:45:51 | 000,291,128 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe [2013.07.03 22:43:11 | 000,291,128 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.ex0 [2013.07.02 18:30:54 | 000,020,710 | ---- | M] () -- C:\Users\Robin\Documents\tubs.pdf [2013.06.28 16:00:48 | 000,000,978 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk [2013.06.28 00:04:51 | 000,693,112 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe [2013.06.28 00:04:51 | 000,078,200 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.07.25 22:48:19 | 000,666,633 | ---- | C] () -- C:\Users\Robin\Desktop\adwcleaner.exe [2013.07.25 10:43:02 | 000,002,242 | ---- | C] () -- C:\Users\Public\Desktop\WinZip.lnk [2013.07.25 10:37:57 | 051,187,712 | ---- | C] () -- C:\Users\Robin\Desktop\wz175-32gev.msi [2013.07.25 10:33:14 | 013,399,154 | ---- | C] () -- C:\Users\Robin\Desktop\mbar-1.06.0.1004.zip [2013.07.24 22:31:02 | 000,377,856 | ---- | C] () -- C:\Users\Robin\Desktop\gmer_2.1.19163.exe [2013.07.19 19:06:03 | 000,386,642 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml [2013.07.19 19:01:18 | 000,002,077 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk [2013.07.14 02:25:37 | 000,423,552 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT [2013.07.02 18:30:54 | 000,020,710 | ---- | C] () -- C:\Users\Robin\Documents\tubs.pdf [2013.06.28 16:00:48 | 000,000,978 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk [2013.06.22 19:52:19 | 000,083,968 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll [2013.06.22 15:47:09 | 000,291,128 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe [2013.06.22 15:47:09 | 000,076,888 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe [2013.06.18 14:24:52 | 000,006,864 | ---- | C] () -- C:\Users\Robin\AppData\Roaming\AbsoluteReminder.xml [2013.01.17 07:15:57 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl [2013.01.17 07:10:44 | 000,001,915 | ---- | C] () -- C:\WINDOWS\vm332Rmv.ini [2013.01.17 07:10:44 | 000,001,915 | ---- | C] () -- C:\WINDOWS\SysWow64\vm332Rmv.ini [2012.08.21 08:24:34 | 000,597,244 | ---- | C] () -- C:\WINDOWS\SysWow64\igvpkrng700.bin [2012.08.21 08:24:29 | 000,064,512 | ---- | C] () -- C:\WINDOWS\SysWow64\igdde32.dll [2012.08.21 08:24:28 | 000,755,048 | ---- | C] () -- C:\WINDOWS\SysWow64\igcodeckrng700.bin [2012.07.26 10:13:10 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat [2012.07.26 10:13:09 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT [2012.07.26 09:21:26 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2012.07.26 03:17:42 | 000,043,520 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll [2012.07.25 22:37:29 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin [2012.07.25 22:28:31 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll [2012.07.25 22:22:56 | 000,267,284 | ---- | C] () -- C:\WINDOWS\SysWow64\igvpkrng600.bin [2012.07.25 22:22:54 | 000,963,376 | ---- | C] () -- C:\WINDOWS\SysWow64\igcodeckrng600.bin [2012.06.02 16:31:19 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat [2012.04.20 14:59:44 | 000,001,536 | ---- | C] () -- C:\WINDOWS\SysWow64\IusEventLog.dll ========== ZeroAccess Check ========== [2013.06.18 14:25:13 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013.03.06 08:31:28 | 019,758,592 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013.03.06 07:03:37 | 017,561,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012.07.26 05:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2012.07.26 05:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012.07.26 05:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] < End of report > Code:
ATTFilter OTL Extras logfile created on: 25.07.2013 22:55:44 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Robin\Desktop
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
7,88 Gb Total Physical Memory | 5,28 Gb Available Physical Memory | 67,07% Memory free
9,06 Gb Paging File | 6,45 Gb Available in Paging File | 71,20% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 884,18 Gb Total Space | 828,33 Gb Free Space | 93,68% Space Free | Partition Type: NTFS
Drive D: | 25,00 Gb Total Space | 22,60 Gb Free Space | 90,42% Space Free | Partition Type: NTFS
Computer Name: ROBINUB | User Name: Robin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = CE 37 E6 AF FF 6A CD 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00BC411B-46F7-4271-BAD1-1A705F1D73AD}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{0726A2BC-71BF-459A-AB03-A87C6B8783A7}" = rport=137 | protocol=17 | dir=out | app=system |
"{1739A380-681A-45BB-A332-47DFB06BDE9C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{1ECE8731-30C7-4499-B194-6721ED84A2D7}" = rport=138 | protocol=17 | dir=out | app=system |
"{4067A404-4C3E-4FE4-B571-77CD689CCAAC}" = lport=2869 | protocol=6 | dir=in | app=system |
"{44E95D5E-2C43-4155-BE52-1E4A045D6E6D}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{47143C85-3F9A-450A-B28E-82B602E61C77}" = lport=445 | protocol=6 | dir=in | app=system |
"{4ED6360A-D1A7-4A56-BFB2-B4049598F3C9}" = lport=138 | protocol=17 | dir=in | app=system |
"{5A627EB1-FB64-476F-A351-C19F82F74251}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{6EAD1B9E-D308-46C7-A736-632159617873}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{94F83807-1D84-42C2-AA64-8EAFAE5C940A}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{967871DE-2A94-4046-B548-C1E98EA17F17}" = lport=10243 | protocol=6 | dir=in | app=system |
"{B5AB4FAB-9AF8-48AE-A962-B1277D8D0B3C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{BE7E0758-7598-43B5-BDAB-51F9AF633D57}" = lport=139 | protocol=6 | dir=in | app=system |
"{BFB238D5-D42F-40D2-8B4A-F2CB9CD4D3B6}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{C97C97A1-566E-4DE5-A66C-97A4001CE072}" = rport=445 | protocol=6 | dir=out | app=system |
"{C9A0BAB9-9615-417E-AFF3-C50D36747228}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{CD779683-8C6F-4302-9138-F79CACF762CE}" = rport=139 | protocol=6 | dir=out | app=system |
"{D67F70D7-B060-493D-8D4D-FB1F6610FCD9}" = lport=137 | protocol=17 | dir=in | app=system |
"{D83AB7B2-9029-461B-911D-4D70836CE6FF}" = rport=10243 | protocol=6 | dir=out | app=system |
"{FC059A30-0B9E-4DC7-919C-0A06791AEE9E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03B34CA1-6711-4BE2-81DE-67CF10BFCE84}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{097C2B6B-A6A2-4627-83EA-0FF7CF87A0AB}" = dir=out | name=accuweather for windows 8 |
"{0D1FDF9B-528B-4B81-9290-C2918E93879F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{16096F6E-7B0D-4866-9103-32ECD0FE5E32}" = dir=out | name=rara.com |
"{167512FB-CC3F-4B4A-9845-F24DF75CA6B9}" = dir=in | app=c:\program files (x86)\lenovo\powerdvd10\powerdvd cinema\powerdvdcinema10.exe |
"{1875B348-7530-4B30-AB18-3C7D17794E56}" = dir=out | name=@{microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{1A643F79-18EC-4B5E-82DC-3978181D806F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the war z\warzlauncher.exe |
"{212BB25E-07BA-47B0-9AE3-04A6AC819ED3}" = dir=out | name=@{microsoft.bingsports_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} |
"{276E7667-AAF1-4383-A4EC-A3E9A6FDABDD}" = dir=in | name=evernote |
"{2EC23CB9-B460-4896-BA01-775B8A5A90A5}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{368EE373-448B-4FD2-9FF9-19972A6A4F67}" = dir=in | name=@{microsoft.reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
"{3784BBEA-AFBD-4A2C-ADA9-D80BD51FC6C8}" = dir=in | name=kindle |
"{3B271D1A-7AF1-4FAA-A4CE-12A9BCA27F37}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{3D6DA639-E77B-4739-8769-64FD0719B57C}" = protocol=6 | dir=out | app=system |
"{3DB2EF37-A050-4EAA-8308-C46C452C3A2A}" = dir=in | name=skype |
"{3EA7E51D-3D18-46B1-9B29-F2629DEEBBD0}" = dir=out | name=evernote |
"{493C6F39-4530-43B2-B99D-5D4B09BEE2C6}" = dir=in | name=ebay |
"{56DC7C73-586B-4297-ABB8-E47A6A37EA7D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{576E4877-C219-4F10-A16E-344CCD44746C}" = dir=out | name=@{microsoft.bing_1.2.0.137_x64__8wekyb3d8bbwe?ms-resource://microsoft.bing/resources/app_name} |
"{5B00F093-4A6A-436B-B9EF-84F6E6D27518}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{6A839219-8794-4F47-97BD-CF78A46ACD7D}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{715E2658-79F6-4A14-8D69-3CC44438ADFB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the war z\warzlauncher.exe |
"{7354DE68-4E6C-4231-BD5E-9730672A2F49}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{7AE2CFF9-EB3F-4212-865F-B7D8FC7ED6B1}" = dir=out | name=powerdvd for lenovo idea |
"{808F1451-4108-46FD-ADBB-F17324B5F0BD}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{8306FD75-0D3A-48BD-8CD3-EF4524249599}" = dir=in | name=@{microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{838845BC-6218-4366-89E3-A8103650A670}" = dir=out | name=@{microsoft.zunevideo_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/33270} |
"{8CC82FD2-FA4A-4D44-9573-86ABACD4A080}" = dir=in | name=@{microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
"{8F644FDB-D773-4E10-A992-CB74EDC42035}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{901B376E-A9CF-4DDE-95D8-751EB9306EFD}" = dir=out | name=@{microsoft.bingnews_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/news} |
"{92E32B70-9687-4A1F-BEE8-41CBF6BC4EF2}" = dir=in | name=@{microsoft.bing_1.2.0.137_x64__8wekyb3d8bbwe?ms-resource://microsoft.bing/resources/app_name} |
"{954E64EC-373A-404F-AE32-DB350149BCB2}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe |
"{98A8DF2E-9438-4176-B786-233EFF6F4407}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{98FBAF18-8C02-4486-BDC4-FFAAD03C5CD1}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{9954BF93-1F5D-478F-8F2B-55EC2C7C0FF9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9B264B49-B909-4249-B014-E648BBAA7F8C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{9BAD1DCD-A088-407B-B957-F71EDE1951A7}" = dir=out | name=@{microsoft.zunemusic_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/33273} |
"{9C0B9A36-23E2-4742-9E84-5F1841D40F6C}" = dir=out | name=@{microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
"{9E98D2D2-8928-493A-9DC2-1E3895D03FA1}" = dir=out | name=@{microsoft.bingmaps_1.2.0.136_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |
"{A0566E89-E083-4307-8D07-DC31B3C391D0}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{A9F9D109-2141-47BC-837D-08B57F78B699}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{B32C4830-977F-4835-AB5F-806C249F2F44}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{B635C69F-5ABA-432A-8ADA-B436647BFE21}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{BBA520F0-57FB-4924-B7D6-6F6D5300C7B8}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{BC01DB93-6FD4-48FE-AA1B-D47DE6DE4940}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{BF6F3AE2-A70F-4863-A589-4D3F57C682CE}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C0B90D6E-B5D1-4374-892C-67C45038DE8D}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{C157FC51-BE30-498C-A4EA-CE5500350BD3}" = dir=out | name=lenovo companion |
"{C60667D4-5997-4A7F-A790-C438938D2956}" = dir=out | name=@{microsoft.microsoftskydrive_16.4.4204.712_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftskydrive/resources/shortproductname} |
"{C6962431-58FB-448E-A8F3-28AE2625B4F7}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{C9934BFD-653B-4208-9657-4C700AEA0E8D}" = dir=out | name=mcafee security advisor for lenovo |
"{CFA4867C-736A-4846-871D-F2E0A0A58941}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{D0DDA93F-06D8-4E45-85A0-702AD75D9FCF}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |
"{D24F010E-16A1-403C-B8EC-FB4068884EC6}" = dir=in | app=c:\program files (x86)\lenovo\powerdvd10\powerdvd10.exe |
"{D3A175A5-EEEF-44BD-9427-EB19A75A984F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{DE3794B4-D950-4CC3-94F5-9874CD6B0154}" = dir=out | name=@{microsoft.reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
"{E116C78E-7200-40D0-AF4D-8EA8762CEA55}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{E5C61911-0721-4AFA-8DC4-3D8B4619A6EE}" = dir=out | name=skype |
"{E7985E1D-C36F-4787-80A8-6350D07E9266}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{E955E05D-EC7E-40D6-8A83-AD1A4853C1AA}" = dir=out | name=ebay |
"{E9D4D066-D605-4534-A323-A0B9A1C02BD6}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{EA397E6C-F301-46A4-811D-CB8E61545C1D}" = dir=out | name=@{microsoft.bingweather_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} |
"{EF4E8B72-0CAC-412B-86BF-A2661DDE8BD6}" = dir=out | name=lenovo support |
"{F09FEF8F-F7B6-4A96-B1F3-7350BD6F8D65}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |
"{F1861866-7E97-452F-BFCC-DD4D0D25B380}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{F26708B8-917E-4B31-8523-81E681918914}" = dir=out | name=@{microsoft.bingfinance_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} |
"{F6E7519A-C581-4559-9EA1-CFC994ACC7C6}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{F70CBE98-7414-4F42-ABFC-B06B450048CD}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{F70DDC24-C0B8-4337-873B-1E80510648D3}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{F8CFB226-6911-4095-AC0C-C0B6BE3E38FF}" = dir=out | name=kindle |
"{F95D7CAA-9548-4E9A-863B-D2864F5AA91A}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{F99F5D08-327C-49A8-A042-C20839B87201}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{F9E35977-81F6-461F-8EF7-F61E36101FC4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{FA0C5856-2EDE-43B7-8853-8EBCC5D0143C}" = dir=out | name=@{microsoft.bingtravel_1.2.0.145_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} |
"{FA38778A-0967-477C-BA1D-CCB58A6FFC54}" = dir=out | name=windows_ie_ac_001 |
"{FB624925-84B7-476A-9FCA-6B2330E63DA3}" = dir=out | name=@{microsoft.xboxlivegames_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |
"{FCAB96B0-3C63-46BF-A1D5-D0E7CBE302C6}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{FD049FA8-B305-4187-AA58-F3F605CFE160}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0728A184-F899-4356-B93D-8228674F0DEB}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{2EBEFDA8-F905-4C39-AC1C-D5ABE7B3E0AE}" = ExpressCache
"{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery
"{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{83E68458-AF28-4CA4-8AFC-595A10307290}" = LenovoDrv_x64
"{89478C31-5CE8-461A-9084-9A0AF059F84F}" = Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed
"{89D2FA50-6002-4AFB-8586-3E38B355E891}" = Intel® PROSet/Wireless WiFi-Software
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.5
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 4.11.9
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.0613
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 4.11.9
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{EF79C448-6946-4D71-8134-03407888C054}" = Shared C Run-time for x64
"{F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}" = Intel® Trusted Connect Service Client
"71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42" = Windows-Treiberpaket - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1)
"8A223E56FB1ED4F697B54E5BF96F1EB63B512684" = Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733)
"C48768A2A32F4649238F7DCF737A260911895FDE" = Windows Driver Package - Lenovo Corporation (LAD) System (06/08/2012 1.0.0.3)
"ProInst" = Intel PROSet Wireless
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TeamSpeak 3 Client" = TeamSpeak 3 Client
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Lenovo YouCam
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0A7D6F3C-F2AB-48ED-BE23-99791BFF87D6}" = Amazon Browser App
"{29B7C0EB-A1E6-4BC3-8344-70EDE4F189F1}" = Lenovo Smart Update
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{40F4FF7A-B214-4453-B973-080B09CED019}" = Absolute Reminder
"{41564952-412D-5637-00A7-A758B70C0201}" = Avira SearchFree Toolbar plus Web Protection
"{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}" = NVIDIA PhysX
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8FCCB703-3FBF-49e7-A43F-A81E27D9B07E}" = Lenovo MediaShow6
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{ADE16A9D-FBDC-4ECC-B6BD-9C31E51D0333}" = Lenovo EasyCamera
"{AF192694-4B15-4AC1-92F3-1B02E98C08BD}" = LockKey
"{B26438B4-BF51-49C3-9567-7F14A5E40CB9}" = Dolby Home Theater v4
"{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240DA}" = WinZip 17.5
"{D0956C11-0F60-43FE-99AD-524E833471BB}" = Energy Management
"{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = Lenovo PowerDVD10
"{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}" = Benutzerhandbuch
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package
"3D073343-CEEB-4ce7-85AC-A69A7631B5D6" = Intel(R) Rapid Start Technology
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Avira AntiVir Desktop" = Avira Free Antivirus
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Lenovo YouCam
"InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery
"InstallShield_{8FCCB703-3FBF-49e7-A43F-A81E27D9B07E}" = Lenovo MediaShow6
"InstallShield_{AF192694-4B15-4AC1-92F3-1B02E98C08BD}" = LockKey
"InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}" = Energy Management
"InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = Lenovo PowerDVD10
"InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}" = UserGuide
"Intel AppUp(SM) center 33057" = Intel AppUp(SM) center
"PunkBusterSvc" = PunkBuster Services
"Steam App 226700" = Infestation: Survivor Stories
"SugarSync" = SugarSync Manager
< End of report >
|
|
25.07.2013, 22:11
| #11 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Vollscan mit Malwarebytes Anti-Malware (MBAM) (falls du vor kurzem erst einen Vollscan gemacht hast, reicht auch ein Quickscan (spart Zeit), das dann mir bitte auch mitteilen) Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren! Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt: ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten |
|
26.07.2013, 18:58
| #12 |
| | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe Ich bin jetzt erstmal bis zum 4.8 im Urlaub. Ich dachte, ich sage mal bescheid, damit du weißt, dass ich mich melden werde, sobald ich wieder da bin! Vielen Danke schonmal für deine Hilfe! Liebe Grüße! |
|
26.07.2013, 19:08
| #13 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe Ok, dann wünsche ich erholsamen Urlaub
__________________ Logfiles bitte immer in CODE-Tags posten |
|
11.08.2013, 14:11
| #14 |
| | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe Hey! Sorry, dass es so lange gedauert hat, ich war ziemlich gestresst durch Studium und Arbeit! Hier sind schonmal beide Logfiles; er hat 3 ingesamt gefunden, was mich etwas irritiert, weil ich nicht wirklich am Rechner arbeite seitdem ich das Virus gefunden habe! MBAM Logfile Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.08.11.01 Windows 8 x64 NTFS Internet Explorer 10.0.9200.16635 Robin :: ROBINUB [Administrator] 11.08.2013 13:40:28 MBAM-log-2013-08-11 (14-14-33).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 407896 Laufzeit: 29 Minute(n), 20 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 3 C:\Users\Robin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ARYTHUQB\WebCakesetup[1].exe (Trojan.PUP.WebCake.A) -> Keine Aktion durchgeführt. C:\Users\Robin\AppData\Local\Temp\DIQM\directx_027\software\Webcake.exe (Trojan.PUP.WebCake.A) -> Keine Aktion durchgeführt. C:\Users\Robin\Downloads\SoftonicDownloader_fuer_heaven-benchmark.exe (PUP.Optional.Softonic) -> Keine Aktion durchgeführt. (Ende) Und ESET Logfile Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=ea4c1b6aa376f84897c351d1cae161c8
# engine=14734
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-11 01:05:46
# local_time=2013-08-11 03:05:46 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT
# compatibility_mode=1799 16775165 100 94 5517 241649636 0 0
# compatibility_mode=5893 16776574 100 94 4585383 35732457 0 0
# scanned=200248
# found=2
# cleaned=0
# scan_time=2750
sh=67D181F0D9FEC6690C0AE4C606DEA14A5C0E6CDD ft=1 fh=3b21a895403b5dee vn="multiple threats" ac=I fn="C:\Users\Robin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ARYTHUQB\WebCakesetup[1].exe"
sh=4C118E807439220E732338FD3F137A48D8D56006 ft=1 fh=846c49fea72dc6d8 vn="a variant of Win32/SpeedingUpMyPC.B application" ac=I fn="C:\Users\Robin\AppData\Local\Temp\DIQM\directx_027\software\OptimizerPro.exe"
|
|
11.08.2013, 16:14
| #15 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exeZitat:
Finger weg von von dieser Toolbar und Adwareschleuder Softonic! Die anderen Funde beziehen sich nur auf TEMP-Ordner, dazu bite TFC anwenden: TFC - Temp File Cleaner Lade dir  TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu ADWARE/DomaIQ.G in C:\Users\***\AppData\Local\Temp\DIQM\directx_027\directx.exe |
| adware.domaiq, adware/domaiq.cc.47, adware/domaiq.g, aktion, antivirenprogramm, antwort, appdata, beseitigung, brauch, chip.de, daten, download, heute, malware, meldung, namen, neues, ordner, programm, temp, totaler, unerwünschtes programm, virus, zugriff |
Linear-Darstellung
