| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Überall werbung im BrowserWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
| |
18.09.2013, 18:35
| #1 |
| |  Überall werbung im Browser AdwCleaner Code:
ATTFilter # AdwCleaner v3.004 - Bericht erstellt am 18/09/2013 um 19:28:50
# Updated 15/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Jason - JASONPC
# Gestartet von : C:\Users\Jason\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\AVG Secure Search
Ordner Gelöscht : C:\Program Files (x86)\AVG Secure Search
Ordner Gelöscht : C:\Program Files (x86)\Common Files\AVG Secure Search
Ordner Gelöscht : C:\Users\Jason\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\Jason\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\Jason\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKCU\Software\AVG Secure Search
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKLM\Software\AVG Secure Search
Schlüssel Gelöscht : HKLM\Software\AVG Security Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16686
-\\ Google Chrome v29.0.1547.66
[ Datei : C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [5494 octets] - [16/09/2013 22:19:54]
AdwCleaner[R1].txt - [4802 octets] - [18/09/2013 19:28:15]
AdwCleaner[S0].txt - [4625 octets] - [18/09/2013 19:28:50]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4685 octets] ##########
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013 03
Ran by Jason (administrator) on JASONPC on 18-09-2013 19:31:37
Running from C:\Users\Jason\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\PROGRA~2\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\windows\system32\atiesrxx.exe
(AMD) C:\windows\system32\atieclxx.exe
(Microsoft Corporation) C:\windows\SYSTEM32\WISPTIS.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Microsoft Corporation) C:\windows\SYSTEM32\WISPTIS.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
() C:\windows\SysWOW64\PnkBstrA.exe
() C:\windows\SysWOW64\PnkBstrB.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) D:\Programme\TeamViewer\TeamViewer_Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Valve Corporation) D:\Programme\Steam\Setup\Steam.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7174728 2013-03-29] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-27] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-13] (Adobe Systems Incorporated)
HKCU\...\Run: [Steam] - D:\Programme\Steam\Setup\steam.exe [1811368 2013-09-06] (Valve Corporation)
HKLM-x32\...\Run: [BambooCore] - C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] ()
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2236816 2013-08-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4851248 2013-08-26] (AVG Technologies CZ, s.r.o.)
AppInit_DLLs: C:\PROGRA~1\NVIDIA~1\NVSTRE~1\rxinput.dll [653600 2013-07-27] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\NVSTRE~1\rxinput.dll [593696 2013-07-27] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.kiebel.de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFFE2435FF7D1CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.kiebel.de
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://syb.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com
SearchScopes: HKLM - DefaultScope {8F060ECB-DC6F-490B-914D-CC043229E2E5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Chrome:
=======
CHR RestoreOnStartup: "hxxp://students.autodesk.com/?nd=download_detail_v3&product_id=8988&my_products=&first_product_type_id=39&product_version=2010&product_language=German&product_os=Windows+32bit", "https://www.facebook.com/photo.php?v=146799828817094&set=vb.201165376644322&type=2&theater", "https://chrome.google.com/webstore?hl=de&category=theme", "chrome://newtab/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.4_0
CHR Extension: (Google Search) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\Jason\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
==================== Services (Whitelisted) =================
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3534896 2013-08-27] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [300640 2013-08-20] (AVG Technologies CZ, s.r.o.)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14984480 2013-07-27] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-08-16] ()
R2 PnkBstrB; C:\Windows\SysWow64\PnkBstrB.exe [189248 2013-08-22] ()
R2 TeamViewer8; D:\Programme\TeamViewer\TeamViewer_Service.exe [4308320 2013-08-07] (TeamViewer GmbH)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-12-11] (Wacom Technology, Corp.)
S2 vToolbarUpdater15.5.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [x]
==================== Drivers (Whitelisted) ====================
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [147768 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-08-22] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [45856 2013-09-18] (AVG Technologies)
S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-06-13] (Etron Technology Inc)
S3 FLxHCIh; C:\Windows\system32\drivers\FLxHCIh.sys [77480 2013-02-25] (Fresco Logic)
R3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] ()
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28656 2013-04-22] (Intel Corporation)
S3 irstrtdv; C:\Windows\system32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation)
S3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46016 2012-07-24] ()
S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [39704 2012-12-21] (Atheros)
R3 MTsensor; C:\Windows\system32\drivers\ASACPI.sys [15416 2009-05-14] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39712 2013-05-14] (NVIDIA Corporation)
S3 rusb3hub; C:\Windows\system32\drivers\rusb3hub.sys [114568 2012-08-27] (Renesas Electronics Corporation)
S3 rusb3xhc; C:\Windows\system32\drivers\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation)
S3 wacommousefilter; system32\DRIVERS\wacommousefilter.sys [x]
S3 wacomvhid; system32\DRIVERS\wacomvhid.sys [x]
S3 X6va012; \??\C:\windows\SysWOW64\Drivers\X6va012 [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-18 19:23 - 2013-09-18 19:23 - 01039554 _____ C:\Users\Jason\Desktop\adwcleaner.exe
2013-09-17 19:59 - 2013-09-17 19:59 - 01950524 _____ (Farbar) C:\Users\Jason\Desktop\FRST64.exe
2013-09-17 19:59 - 2013-09-17 19:59 - 00000000 ____D C:\FRST
2013-09-16 22:39 - 2013-09-16 22:39 - 00003694 _____ C:\windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-09-16 22:29 - 2013-09-16 22:29 - 00000000 ____D C:\Users\Jason\AppData\Roaming\AVG
2013-09-16 22:26 - 2013-09-16 22:38 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-09-16 22:26 - 2013-09-16 22:31 - 00000000 ____D C:\ProgramData\AVG
2013-09-16 22:21 - 2013-09-16 22:21 - 00000000 ____D C:\Users\Jason\AppData\Roaming\AVG2014
2013-09-16 22:20 - 2013-09-16 22:20 - 00003230 _____ C:\windows\System32\Tasks\SidebarExecute
2013-09-16 22:20 - 2013-09-16 22:20 - 00000000 ____D C:\Users\Jason\AppData\Roaming\TuneUp Software
2013-09-16 22:19 - 2013-09-18 19:28 - 00000000 ____D C:\AdwCleaner
2013-09-16 22:19 - 2013-09-18 18:44 - 00045856 _____ (AVG Technologies) C:\windows\system32\Drivers\avgtpx64.sys
2013-09-16 22:18 - 2013-09-17 19:00 - 00000000 ____D C:\Program Files (x86)\AVG
2013-09-16 22:18 - 2013-09-16 22:20 - 00000000 ____D C:\ProgramData\AVG2014
2013-09-16 22:18 - 2013-09-16 22:18 - 00000000 ___HD C:\$AVG
2013-09-16 22:15 - 2013-09-18 18:56 - 00000000 ____D C:\ProgramData\MFAData
2013-09-16 22:15 - 2013-09-16 22:22 - 00000000 ____D C:\Users\Jason\AppData\Local\Avg2014
2013-09-16 22:15 - 2013-09-16 22:15 - 00000000 ____D C:\Users\Jason\AppData\Local\MFAData
2013-09-16 22:13 - 2013-09-17 18:59 - 00000000 ____D C:\Users\Jason\AppData\Roaming\uTorrent
2013-09-15 23:28 - 2013-09-15 23:31 - 00000000 ___RD C:\Users\Jason\Desktop\Random Shit
2013-09-15 22:18 - 2012-01-03 09:03 - 00810496 _____ C:\windows\system32\xvidcore.dll
2013-09-15 22:18 - 2012-01-03 09:03 - 00183808 _____ C:\windows\system32\xvidvfw.dll
2013-09-15 22:18 - 2012-01-03 09:03 - 00080896 _____ C:\windows\system32\ff_vfw.dll
2013-09-15 22:18 - 2012-01-03 09:03 - 00000590 _____ C:\windows\system32\ff_vfw.dll.manifest
2013-09-15 22:17 - 2012-01-03 09:03 - 00389120 _____ () C:\windows\SysWOW64\actskn43.ocx
2013-09-15 22:17 - 2012-01-03 09:03 - 00389120 _____ () C:\windows\system32\actskn43.ocx
2013-09-12 23:41 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-12 23:41 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-12 23:41 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-12 23:41 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-12 23:41 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-12 23:41 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-12 23:41 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-12 23:41 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-12 23:41 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-12 23:41 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-12 23:41 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-09-12 23:41 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-12 23:41 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-12 23:41 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-12 23:41 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-12 23:41 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-12 23:41 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-12 23:41 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-12 23:41 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-12 23:41 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-12 23:41 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-12 23:41 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-12 23:41 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-09-12 23:41 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-12 23:41 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-12 23:41 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-12 23:41 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-12 23:41 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-12 23:41 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-12 23:41 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-09-12 23:41 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-12 21:05 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-09-12 21:05 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys
2013-09-12 21:05 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-09-12 21:05 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-09-12 21:05 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2013-09-12 21:05 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-09-12 21:05 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2013-09-12 21:05 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-09-12 21:05 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2013-09-12 21:05 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-09-12 21:05 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-09-12 21:05 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-09-12 21:05 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-09-12 21:05 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-09-12 21:05 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-09-12 21:05 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-09-12 21:05 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-09-12 21:05 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-09-12 21:05 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-09-12 21:05 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-09-12 21:05 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-09-12 21:05 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 21:05 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-12 21:05 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-09-12 21:05 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-09-12 21:05 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-09-12 21:05 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-09-07 20:44 - 2013-09-07 20:44 - 00000000 ____D C:\Users\Jason\Documents\Diablo III
2013-09-07 20:03 - 2013-09-07 20:22 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2013-09-07 20:02 - 2013-09-07 20:02 - 00000000 ____D C:\ProgramData\Battle.net
2013-09-04 20:21 - 2013-09-04 20:21 - 00000000 ____D C:\Users\Jason\AppData\Local\SplitMediaLabs
2013-09-04 20:20 - 2013-09-04 21:28 - 00000000 __SHD C:\windows\SysWOW64\AI_RecycleBin
2013-09-04 20:20 - 2013-09-04 20:20 - 00000000 ____D C:\Users\Jason\AppData\Roaming\SplitMediaLabs
2013-09-04 20:20 - 2013-09-04 20:20 - 00000000 ____D C:\ProgramData\SplitMediaLabs
2013-09-01 23:11 - 2013-09-01 23:11 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ParanormalDev
2013-09-01 17:56 - 2013-09-01 17:56 - 00000000 ____D C:\Users\Jason\AppData\Roaming\WinRAR
2013-09-01 17:56 - 2013-09-01 17:56 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-29 19:11 - 2013-08-29 19:52 - 00000000 ____D C:\Users\Jason\AppData\Roaming\HitHimTool
2013-08-28 18:45 - 2013-08-28 18:45 - 00003584 _____ C:\Users\Jason\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-27 20:03 - 2013-09-04 21:20 - 00000000 ____D C:\Users\Jason\Documents\Visual Studio 2012
2013-08-25 21:27 - 2013-08-25 21:27 - 00000000 ____D C:\Users\Jason\Documents\Freemake
2013-08-25 15:09 - 2013-08-25 16:49 - 00000000 ___RD C:\Users\Jason\Desktop\Musik
2013-08-25 13:10 - 2013-08-25 13:10 - 00000000 __SHD C:\ProgramData\DSS
2013-08-25 11:14 - 2013-08-25 11:14 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Microsoft FxCop
2013-08-24 18:02 - 2013-08-24 18:15 - 00000000 ____D C:\Users\Jason\AppData\Local\Microsoft Games
2013-08-24 12:09 - 2013-08-24 12:09 - 00000000 ____D C:\Users\Jason\AppData\Roaming\PDAppFlex
2013-08-24 12:09 - 2013-08-24 12:09 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-08-24 12:00 - 2013-08-24 12:00 - 00000000 ____D C:\ProgramData\ALM
2013-08-22 23:34 - 2010-09-16 00:13 - 02601752 _____ C:\windows\SysWOW64\pbsvc_moh.exe
2013-08-22 23:25 - 2013-08-22 23:25 - 00212280 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgldx64.sys
2013-08-22 23:08 - 2013-08-22 23:08 - 00294712 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgloga.sys
2013-08-22 22:55 - 2013-08-22 22:55 - 00241464 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgidsdrivera.sys
2013-08-22 22:54 - 2013-08-22 22:54 - 00192824 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgidsha.sys
2013-08-22 20:34 - 2013-08-22 20:34 - 00000000 __RHD C:\Users\Jason\AppData\Roaming\SecuROM
2013-08-22 18:21 - 2013-08-25 13:10 - 00000000 ____D C:\Users\Jason\Documents\EA Games
2013-08-22 06:46 - 2013-08-22 06:46 - 00000000 ____D C:\Users\Jason\AppData\Local\EA Games
2013-08-21 22:28 - 2013-08-29 21:14 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Origin
2013-08-21 22:28 - 2013-08-22 06:46 - 00000000 ____D C:\Users\Jason\AppData\Local\Origin
2013-08-21 22:26 - 2013-08-29 21:14 - 00000000 ____D C:\ProgramData\Origin
2013-08-21 22:26 - 2013-08-22 06:46 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-08-21 21:35 - 2013-08-21 21:35 - 00000000 ____D C:\Users\Jason\AppData\Roaming\wacomid-desktop-launcher
2013-08-20 22:53 - 2013-08-20 22:53 - 00123704 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgmfx64.sys
2013-08-19 23:34 - 2013-08-19 23:34 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-08-19 23:31 - 2013-08-23 23:40 - 00000132 _____ C:\Users\Jason\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen
2013-08-19 21:51 - 2013-08-24 12:00 - 00000000 ____D C:\Program Files\Adobe
2013-08-19 21:48 - 2013-08-24 12:00 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-08-19 21:47 - 2013-08-19 21:47 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf
2013-08-19 21:47 - 2013-08-19 21:47 - 00000000 ____D C:\Program Files\TabletPlugins
2013-08-19 21:47 - 2012-12-03 16:36 - 00081824 _____ (Wacom Technology) C:\windows\system32\Drivers\wachidrouter.sys
2013-08-19 21:47 - 2012-12-03 16:36 - 00013728 _____ (Windows (R) Win 7 DDK provider) C:\windows\system32\Drivers\hidkmdf.sys
2013-08-19 21:47 - 2012-11-15 09:41 - 00015776 _____ (Wacom Technology) C:\windows\system32\Drivers\wacomrouterfilter.sys
2013-08-19 21:33 - 2013-08-19 21:33 - 00003500 _____ C:\windows\System32\Tasks\AdobeAAMUpdater-1.0-JasonPC-Jason
2013-08-19 21:30 - 2013-08-19 21:30 - 00000000 ____D C:\Users\Jason\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1
2013-08-19 21:27 - 2013-08-19 21:30 - 00000000 ____D C:\ProgramData\Wacom
2013-08-19 21:27 - 2013-08-19 21:27 - 00000002 _____ C:\Users\Jason\.bdockinstall.log
2013-08-19 21:27 - 2013-08-19 21:27 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Wacom
2013-08-19 21:27 - 2013-08-19 21:27 - 00000000 ____D C:\Program Files (x86)\Bamboo Dock
2013-08-19 21:26 - 2013-08-19 21:47 - 00000000 ____D C:\Program Files (x86)\TabletPlugins
2013-08-19 21:26 - 2013-08-19 21:26 - 00000000 ____D C:\Users\Jason\AppData\Roaming\WTablet
2013-08-19 21:26 - 2012-12-11 13:07 - 01974144 _____ (Wacom Technology, Corp.) C:\windows\system32\Pen_Touch_Tablet.dll
2013-08-19 21:26 - 2012-12-11 13:07 - 01621888 _____ (Wacom Technology, Corp.) C:\windows\SysWOW64\Pen_Touch_Tablet.dll
2013-08-19 21:25 - 2013-08-21 22:02 - 00000000 ____D C:\Program Files\Tablet
2013-08-19 21:25 - 2012-12-11 13:07 - 01981312 _____ (Wacom Technology, Corp.) C:\windows\system32\Pen_Tablet.dll
2013-08-19 21:25 - 2012-12-11 13:07 - 01843584 _____ (Wacom Technology, Corp.) C:\windows\system32\Wintab32.dll
2013-08-19 21:25 - 2012-12-11 13:07 - 01840000 _____ (Wacom Technology, Corp.) C:\windows\system32\WacomMT.dll
2013-08-19 21:25 - 2012-12-11 13:07 - 01628544 _____ (Wacom Technology, Corp.) C:\windows\SysWOW64\Pen_Tablet.dll
2013-08-19 21:25 - 2012-12-11 13:07 - 01509760 _____ (Wacom Technology, Corp.) C:\windows\SysWOW64\Wintab32.dll
2013-08-19 21:25 - 2012-12-11 13:07 - 01505664 _____ (Wacom Technology, Corp.) C:\windows\SysWOW64\WacomMT.dll
2013-08-19 19:03 - 2013-09-18 19:23 - 00000000 ____D C:\Users\Jason\AppData\Local\Adobe
==================== One Month Modified Files and Folders =======
2013-09-18 19:30 - 2013-08-12 18:36 - 00001104 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-18 19:30 - 2013-08-09 14:14 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-18 19:30 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-09-18 19:30 - 2009-07-14 06:51 - 00047816 _____ C:\windows\setupact.log
2013-09-18 19:29 - 2013-08-12 18:25 - 02054661 _____ C:\windows\WindowsUpdate.log
2013-09-18 19:28 - 2013-09-16 22:19 - 00000000 ____D C:\AdwCleaner
2013-09-18 19:23 - 2013-09-18 19:23 - 01039554 _____ C:\Users\Jason\Desktop\adwcleaner.exe
2013-09-18 19:23 - 2013-08-19 19:03 - 00000000 ____D C:\Users\Jason\AppData\Local\Adobe
2013-09-18 19:16 - 2013-05-21 10:53 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-18 18:56 - 2013-09-16 22:15 - 00000000 ____D C:\ProgramData\MFAData
2013-09-18 18:51 - 2010-11-21 08:50 - 00699416 _____ C:\windows\system32\perfh007.dat
2013-09-18 18:51 - 2010-11-21 08:50 - 00149556 _____ C:\windows\system32\perfc007.dat
2013-09-18 18:51 - 2009-07-14 07:13 - 01620612 _____ C:\windows\system32\PerfStringBackup.INI
2013-09-18 18:51 - 2009-07-14 06:45 - 00032080 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-18 18:51 - 2009-07-14 06:45 - 00032080 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-18 18:44 - 2013-09-16 22:19 - 00045856 _____ (AVG Technologies) C:\windows\system32\Drivers\avgtpx64.sys
2013-09-17 22:41 - 2013-08-12 18:36 - 00001108 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-17 21:15 - 2013-08-12 19:01 - 00000000 ___RD C:\Users\Jason\Desktop\Programme
2013-09-17 19:59 - 2013-09-17 19:59 - 01950524 _____ (Farbar) C:\Users\Jason\Desktop\FRST64.exe
2013-09-17 19:59 - 2013-09-17 19:59 - 00000000 ____D C:\FRST
2013-09-17 19:04 - 2013-08-12 18:26 - 00058848 _____ C:\Users\Jason\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-17 19:00 - 2013-09-16 22:18 - 00000000 ____D C:\Program Files (x86)\AVG
2013-09-17 18:59 - 2013-09-16 22:13 - 00000000 ____D C:\Users\Jason\AppData\Roaming\uTorrent
2013-09-17 18:59 - 2013-08-12 18:36 - 00004114 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-09-17 18:59 - 2013-08-12 18:36 - 00003862 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-09-17 18:58 - 2013-08-12 18:58 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Skype
2013-09-17 18:27 - 2009-07-14 06:45 - 04939536 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-17 18:26 - 2010-11-21 05:47 - 00176378 _____ C:\windows\PFRO.log
2013-09-16 22:39 - 2013-09-16 22:39 - 00003694 _____ C:\windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-09-16 22:38 - 2013-09-16 22:26 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-09-16 22:37 - 2013-08-12 19:02 - 00000000 ___RD C:\Users\Jason\Desktop\Spiele
2013-09-16 22:31 - 2013-09-16 22:26 - 00000000 ____D C:\ProgramData\AVG
2013-09-16 22:29 - 2013-09-16 22:29 - 00000000 ____D C:\Users\Jason\AppData\Roaming\AVG
2013-09-16 22:22 - 2013-09-16 22:15 - 00000000 ____D C:\Users\Jason\AppData\Local\Avg2014
2013-09-16 22:21 - 2013-09-16 22:21 - 00000000 ____D C:\Users\Jason\AppData\Roaming\AVG2014
2013-09-16 22:20 - 2013-09-16 22:20 - 00003230 _____ C:\windows\System32\Tasks\SidebarExecute
2013-09-16 22:20 - 2013-09-16 22:20 - 00000000 ____D C:\Users\Jason\AppData\Roaming\TuneUp Software
2013-09-16 22:20 - 2013-09-16 22:18 - 00000000 ____D C:\ProgramData\AVG2014
2013-09-16 22:18 - 2013-09-16 22:18 - 00000000 ___HD C:\$AVG
2013-09-16 22:17 - 2012-01-13 16:23 - 00001912 _____ C:\windows\epplauncher.mif
2013-09-16 22:15 - 2013-09-16 22:15 - 00000000 ____D C:\Users\Jason\AppData\Local\MFAData
2013-09-16 21:08 - 2013-08-12 18:25 - 00000000 ____D C:\Users\Jason
2013-09-15 23:31 - 2013-09-15 23:28 - 00000000 ___RD C:\Users\Jason\Desktop\Random Shit
2013-09-15 23:18 - 2013-08-12 18:26 - 00000000 ____D C:\Users\Jason\AppData\Local\VirtualStore
2013-09-15 21:25 - 2013-08-13 19:17 - 00000000 ____D C:\Users\Jason\AppData\Roaming\TS3Client
2013-09-15 16:21 - 2013-08-12 20:55 - 00000000 ____D C:\Users\Jason\AppData\Roaming\.minecraft
2013-09-14 10:21 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-09-13 18:52 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2013-09-13 18:16 - 2013-05-21 10:53 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-13 18:16 - 2012-04-16 10:33 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-13 18:16 - 2012-01-13 15:34 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-13 18:11 - 2013-08-12 18:25 - 00000000 ___RD C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-13 18:11 - 2013-08-12 18:25 - 00000000 ___RD C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-12 23:41 - 2013-08-15 20:30 - 00000000 ____D C:\windows\system32\MRT
2013-09-12 23:40 - 2012-01-13 16:22 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-09-07 20:44 - 2013-09-07 20:44 - 00000000 ____D C:\Users\Jason\Documents\Diablo III
2013-09-07 20:22 - 2013-09-07 20:03 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2013-09-07 20:02 - 2013-09-07 20:02 - 00000000 ____D C:\ProgramData\Battle.net
2013-09-05 00:43 - 2013-08-12 18:37 - 00002190 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-04 21:28 - 2013-09-04 20:20 - 00000000 __SHD C:\windows\SysWOW64\AI_RecycleBin
2013-09-04 21:20 - 2013-08-27 20:03 - 00000000 ____D C:\Users\Jason\Documents\Visual Studio 2012
2013-09-04 20:21 - 2013-09-04 20:21 - 00000000 ____D C:\Users\Jason\AppData\Local\SplitMediaLabs
2013-09-04 20:20 - 2013-09-04 20:20 - 00000000 ____D C:\Users\Jason\AppData\Roaming\SplitMediaLabs
2013-09-04 20:20 - 2013-09-04 20:20 - 00000000 ____D C:\ProgramData\SplitMediaLabs
2013-09-01 23:11 - 2013-09-01 23:11 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ParanormalDev
2013-09-01 17:56 - 2013-09-01 17:56 - 00000000 ____D C:\Users\Jason\AppData\Roaming\WinRAR
2013-09-01 17:56 - 2013-09-01 17:56 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-29 21:14 - 2013-08-21 22:28 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Origin
2013-08-29 21:14 - 2013-08-21 22:26 - 00000000 ____D C:\ProgramData\Origin
2013-08-29 19:52 - 2013-08-29 19:11 - 00000000 ____D C:\Users\Jason\AppData\Roaming\HitHimTool
2013-08-28 18:45 - 2013-08-28 18:45 - 00003584 _____ C:\Users\Jason\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-25 21:27 - 2013-08-25 21:27 - 00000000 ____D C:\Users\Jason\Documents\Freemake
2013-08-25 16:49 - 2013-08-25 15:09 - 00000000 ___RD C:\Users\Jason\Desktop\Musik
2013-08-25 13:10 - 2013-08-25 13:10 - 00000000 __SHD C:\ProgramData\DSS
2013-08-25 13:10 - 2013-08-22 18:21 - 00000000 ____D C:\Users\Jason\Documents\EA Games
2013-08-25 11:19 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-08-25 11:14 - 2013-08-25 11:14 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Microsoft FxCop
2013-08-24 18:15 - 2013-08-24 18:02 - 00000000 ____D C:\Users\Jason\AppData\Local\Microsoft Games
2013-08-24 12:09 - 2013-08-24 12:09 - 00000000 ____D C:\Users\Jason\AppData\Roaming\PDAppFlex
2013-08-24 12:09 - 2013-08-24 12:09 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-08-24 12:09 - 2013-08-12 18:25 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Adobe
2013-08-24 12:00 - 2013-08-24 12:00 - 00000000 ____D C:\ProgramData\ALM
2013-08-24 12:00 - 2013-08-19 21:51 - 00000000 ____D C:\Program Files\Adobe
2013-08-24 12:00 - 2013-08-19 21:48 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-08-24 11:59 - 2013-01-15 09:23 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-08-24 00:50 - 2013-08-12 18:25 - 00000000 ____D C:\Users\Jason\AppData\Local\Windows Live
2013-08-23 23:40 - 2013-08-19 23:31 - 00000132 _____ C:\Users\Jason\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen
2013-08-23 18:39 - 2013-08-12 19:15 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-08-22 23:34 - 2013-08-16 07:00 - 00189248 _____ C:\windows\SysWOW64\PnkBstrB.exe
2013-08-22 23:34 - 2013-08-16 07:00 - 00189248 _____ C:\windows\SysWOW64\PnkBstrB.ex0
2013-08-22 23:29 - 2012-01-13 13:57 - 00288234 _____ C:\windows\DirectX.log
2013-08-22 23:25 - 2013-08-22 23:25 - 00212280 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgldx64.sys
2013-08-22 23:08 - 2013-08-22 23:08 - 00294712 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgloga.sys
2013-08-22 22:55 - 2013-08-22 22:55 - 00241464 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgidsdrivera.sys
2013-08-22 22:54 - 2013-08-22 22:54 - 00192824 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgidsha.sys
2013-08-22 20:34 - 2013-08-22 20:34 - 00000000 __RHD C:\Users\Jason\AppData\Roaming\SecuROM
2013-08-22 06:46 - 2013-08-22 06:46 - 00000000 ____D C:\Users\Jason\AppData\Local\EA Games
2013-08-22 06:46 - 2013-08-21 22:28 - 00000000 ____D C:\Users\Jason\AppData\Local\Origin
2013-08-22 06:46 - 2013-08-21 22:26 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-08-21 22:02 - 2013-08-19 21:25 - 00000000 ____D C:\Program Files\Tablet
2013-08-21 21:35 - 2013-08-21 21:35 - 00000000 ____D C:\Users\Jason\AppData\Roaming\wacomid-desktop-launcher
2013-08-20 22:53 - 2013-08-20 22:53 - 00123704 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgmfx64.sys
2013-08-19 23:34 - 2013-08-19 23:34 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-08-19 21:52 - 2012-01-13 15:21 - 00000000 ____D C:\ProgramData\Adobe
2013-08-19 21:47 - 2013-08-19 21:47 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf
2013-08-19 21:47 - 2013-08-19 21:47 - 00000000 ____D C:\Program Files\TabletPlugins
2013-08-19 21:47 - 2013-08-19 21:26 - 00000000 ____D C:\Program Files (x86)\TabletPlugins
2013-08-19 21:33 - 2013-08-19 21:33 - 00003500 _____ C:\windows\System32\Tasks\AdobeAAMUpdater-1.0-JasonPC-Jason
2013-08-19 21:30 - 2013-08-19 21:30 - 00000000 ____D C:\Users\Jason\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1
2013-08-19 21:30 - 2013-08-19 21:27 - 00000000 ____D C:\ProgramData\Wacom
2013-08-19 21:27 - 2013-08-19 21:27 - 00000002 _____ C:\Users\Jason\.bdockinstall.log
2013-08-19 21:27 - 2013-08-19 21:27 - 00000000 ____D C:\Users\Jason\AppData\Roaming\Wacom
2013-08-19 21:27 - 2013-08-19 21:27 - 00000000 ____D C:\Program Files (x86)\Bamboo Dock
2013-08-19 21:26 - 2013-08-19 21:26 - 00000000 ____D C:\Users\Jason\AppData\Roaming\WTablet
Some content of TEMP:
====================
C:\Users\Jason\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\Jason\AppData\Local\Temp\CreativeCloudSet-Up.exe
C:\Users\Jason\AppData\Local\Temp\oi_{DF9EAC72-59F0-4D6C-A131-FA43705275AD}.exe
C:\Users\Jason\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 00:03
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- |
|
| Themen zu Überall werbung im Browser |
| abend, adblock, browse, browser, facebook, folge, folgen, foren, gestern, google, hoffe, konnte, problem, schwerwiegendes, troja, unterstrichen, versuch, versucht, werbelinks, werbung, werbung auf jeder internetseite, werbung im browser, win, wirklich, worte |
Hybrid-Darstellung
