Windows 7: LyriXeeker-1 0.92.10 lässt sich nicht entfernen

e.rico · 19.09.2013, 15:32

Hallo zusammen,

ich habe mir das Firefox-AddOn LyriXeeker eingefangen. Ich habe es bemerkt, als ich im Firefox immer Werbung hatte (zufällige Wörter werden zu klickbaren Spam-Links) bzw. Firefox Werbung anzeigen wollte . Außerdem öffnen sich regelmäßig Pop-Up-Fenster ohne Inhalt (wahrscheinlich AdBlock-Plus geschuldet).

Wenn ich das Firefox-Addon LyriXeeker-1 0.92.10 deinstalliere ist das Problem temporär behoben, jedoch tritt es nach einem Neustart wieder auf - das AddOn ist einfach wieder da.

Meine "Sicherheitssoftware Microsoft Security Essentials" hat bei einer vollständigen Systemüberprüfung nichts gefunden.

Da die Logfiles für den Post zu lang sind, habe ich Sie im Anhang beigefügt. Danke für die Hilfe im Voraus.

e.rico

M-K-D-B · 19.09.2013, 15:33

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags.
Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!
Ich kann Dir niemals eine Garantie geben, dass auch ich alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.

Ich habe dein Thema in Arbeit und melde mich so schnell wie möglich mit weiteren Anweisungen.

M-K-D-B · 19.09.2013, 15:37

Servus,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

e.rico · 19.09.2013, 16:12

ComboFix ist erledigt.

ComboFix

Code:

ATTFilter

ComboFix 13-09-19.01 - **** 19.09.2013  16:41:45.1.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8099.4604 [GMT 2:00]
ausgeführt von:: c:\users\****\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Spybot - Search and Destroy *Disabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
c:\windows\IsUn0407.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-08-19 bis 2013-09-19  ))))))))))))))))))))))))))))))
.
.
2013-09-19 14:51 . 2013-09-19 14:51	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-09-19 12:54 . 2013-09-05 05:32	9694160	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B15B6319-7AB4-424E-A123-98E6CC4E8769}\mpengine.dll
2013-09-19 12:43 . 2013-09-19 12:43	--------	d-----w-	C:\FRST
2013-09-19 12:20 . 2013-09-19 12:20	--------	d-----w-	c:\windows\SysWow64\wbem\en-US
2013-09-19 12:20 . 2013-09-19 12:20	--------	d-----w-	c:\windows\system32\wbem\en-US
2013-09-19 11:59 . 2013-09-01 15:08	79143768	----a-w-	c:\windows\system32\MRT.exe
2013-09-19 11:51 . 2012-07-26 07:46	2560	----a-w-	c:\windows\system32\drivers\de-DE\wdf01000.sys.mui
2013-09-19 11:51 . 2012-07-26 04:55	785512	----a-w-	c:\windows\system32\drivers\Wdf01000.sys
2013-09-19 11:51 . 2012-07-26 04:55	54376	----a-w-	c:\windows\system32\drivers\WdfLdr.sys
2013-09-19 11:51 . 2012-07-26 02:36	9728	----a-w-	c:\windows\system32\Wdfres.dll
2013-09-19 11:39 . 2010-02-23 08:16	294912	----a-w-	c:\windows\system32\browserchoice.exe
2013-09-19 11:27 . 2012-12-16 17:11	46080	----a-w-	c:\windows\system32\atmlib.dll
2013-09-19 11:27 . 2012-12-16 14:45	367616	----a-w-	c:\windows\system32\atmfd.dll
2013-09-19 11:27 . 2012-12-16 14:13	295424	----a-w-	c:\windows\SysWow64\atmfd.dll
2013-09-19 11:27 . 2012-12-16 14:13	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2013-09-19 11:27 . 2010-09-30 10:41	100864	----a-w-	c:\windows\system32\fontsub.dll
2013-09-19 11:27 . 2010-09-30 06:47	70656	----a-w-	c:\windows\SysWow64\fontsub.dll
2013-09-19 11:26 . 2012-07-26 03:08	84992	----a-w-	c:\windows\system32\WUDFSvc.dll
2013-09-19 11:26 . 2012-07-26 03:08	194048	----a-w-	c:\windows\system32\WUDFPlatform.dll
2013-09-19 11:26 . 2012-07-26 02:26	87040	----a-w-	c:\windows\system32\drivers\WUDFPf.sys
2013-09-19 11:26 . 2012-07-26 02:26	198656	----a-w-	c:\windows\system32\drivers\WUDFRd.sys
2013-09-19 11:26 . 2012-07-26 03:08	229888	----a-w-	c:\windows\system32\WUDFHost.exe
2013-09-19 11:26 . 2012-07-26 03:08	744448	----a-w-	c:\windows\system32\WUDFx.dll
2013-09-19 11:26 . 2012-07-26 03:08	45056	----a-w-	c:\windows\system32\WUDFCoinstaller.dll
2013-09-19 11:23 . 2012-03-01 06:46	23408	----a-w-	c:\windows\system32\drivers\fs_rec.sys
2013-09-19 11:23 . 2012-03-01 06:33	81408	----a-w-	c:\windows\system32\imagehlp.dll
2013-09-19 11:23 . 2012-03-01 06:28	5120	----a-w-	c:\windows\system32\wmi.dll
2013-09-19 11:23 . 2012-03-01 05:33	159232	----a-w-	c:\windows\SysWow64\imagehlp.dll
2013-09-19 11:23 . 2012-03-01 05:29	5120	----a-w-	c:\windows\SysWow64\wmi.dll
2013-09-19 11:18 . 2012-12-07 13:20	441856	----a-w-	c:\windows\system32\Wpc.dll
2013-09-19 11:17 . 2010-12-23 10:42	1118720	----a-w-	c:\windows\system32\sbe.dll
2013-09-19 11:16 . 2012-11-01 05:43	2002432	----a-w-	c:\windows\system32\msxml6.dll
2013-09-19 11:15 . 2011-08-27 05:37	861696	----a-w-	c:\windows\system32\oleaut32.dll
2013-09-19 10:59 . 2011-11-19 14:58	77312	----a-w-	c:\windows\system32\packager.dll
2013-09-19 10:59 . 2011-11-19 14:01	67072	----a-w-	c:\windows\SysWow64\packager.dll
2013-09-19 01:56 . 2012-02-17 06:38	1031680	----a-w-	c:\windows\system32\rdpcore.dll
2013-09-19 01:56 . 2012-02-17 05:34	826880	----a-w-	c:\windows\SysWow64\rdpcore.dll
2013-09-19 01:56 . 2012-02-17 04:57	23552	----a-w-	c:\windows\system32\drivers\tdtcp.sys
2013-09-19 01:51 . 2012-06-02 22:19	57880	----a-w-	c:\windows\system32\wuauclt.exe
2013-09-19 01:51 . 2012-06-02 22:19	44056	----a-w-	c:\windows\system32\wups2.dll
2013-09-19 01:51 . 2012-06-02 22:19	2428952	----a-w-	c:\windows\system32\wuaueng.dll
2013-09-19 01:51 . 2012-06-02 22:15	2622464	----a-w-	c:\windows\system32\wucltux.dll
2013-09-19 01:51 . 2012-06-02 22:19	38424	----a-w-	c:\windows\system32\wups.dll
2013-09-19 01:51 . 2012-06-02 22:19	701976	----a-w-	c:\windows\system32\wuapi.dll
2013-09-19 01:51 . 2012-06-02 22:15	99840	----a-w-	c:\windows\system32\wudriver.dll
2013-09-19 01:51 . 2012-06-02 13:19	186752	----a-w-	c:\windows\system32\wuwebv.dll
2013-09-19 01:51 . 2012-06-02 13:15	36864	----a-w-	c:\windows\system32\wuapp.exe
2013-09-19 01:32 . 2013-09-19 10:30	--------	d-----w-	c:\windows\Panther
2013-09-19 01:24 . 2013-09-19 01:24	--------	d-----w-	c:\users\Default\Roaming
2013-09-19 01:24 . 2013-09-19 01:24	--------	d-----w-	c:\users\Default\AppData\Local\Microsoft Help
2013-09-19 01:12 . 2013-09-19 01:34	--------	d-----w-	C:\$WINDOWS.~Q
2013-09-19 00:59 . 2013-09-19 01:08	--------	d-----w-	C:\$INPLACE.~TR
2013-09-19 00:40 . 2013-09-19 12:42	--------	d-----w-	c:\users\****
2013-09-19 00:40 . 2013-09-19 01:15	--------	d-----w-	c:\users\UpdatusUser
2013-09-19 00:39 . 2013-09-19 00:39	--------	d-----w-	c:\program files\AuthenTec
2013-09-19 00:38 . 2012-12-29 08:40	6382008	----a-w-	c:\windows\system32\nvcpl.dll
2013-09-19 00:38 . 2012-12-29 08:40	3455416	----a-w-	c:\windows\system32\nvsvc64.dll
2013-09-19 00:38 . 2012-12-29 08:40	2923201	----a-w-	c:\windows\system32\nvcoproc.bin
2013-09-19 00:38 . 2012-12-29 08:40	997816	----a-w-	c:\windows\system32\nv3dappshext.dll
2013-09-19 00:38 . 2012-12-29 08:40	884152	----a-w-	c:\windows\system32\nvvsvc.exe
2013-09-19 00:38 . 2012-12-29 08:40	63928	----a-w-	c:\windows\system32\nvshext.dll
2013-09-19 00:38 . 2012-12-29 08:40	55736	----a-w-	c:\windows\system32\nv3dappshextr.dll
2013-09-19 00:38 . 2012-12-29 08:40	2558392	----a-w-	c:\windows\system32\nvsvcr.dll
2013-09-19 00:38 . 2012-12-29 08:40	118712	----a-w-	c:\windows\system32\nvmctray.dll
2013-09-19 00:38 . 2013-09-19 00:38	--------	d-----w-	c:\programdata\NVIDIA Corporation
2013-09-19 00:37 . 2013-09-19 00:50	--------	d-----w-	c:\program files (x86)\NVIDIA Corporation
2013-09-19 00:37 . 2013-09-19 00:44	--------	d-----w-	c:\program files\NVIDIA Corporation
2013-09-19 00:37 . 2013-09-19 00:37	--------	d-----w-	c:\windows\SysWow64\RTCOM
2013-09-19 00:37 . 2013-09-19 00:37	--------	d-----w-	c:\program files\Realtek
2013-09-19 00:35 . 2013-09-19 00:35	--------	d-----w-	c:\program files\Synaptics
2013-09-18 11:15 . 2013-09-19 00:56	--------	d-----w-	c:\programdata\Spybot - Search & Destroy
2013-09-18 11:14 . 2009-01-25 11:14	17272	----a-w-	c:\windows\system32\sdnclean64.exe
2013-09-18 11:14 . 2013-09-19 00:54	--------	d-----w-	c:\program files (x86)\Spybot - Search & Destroy 2
2013-09-18 10:50 . 2013-09-05 05:32	9694160	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-09-17 11:00 . 2013-09-19 00:50	--------	d-----w-	c:\program files (x86)\LyriXeeker-1
2013-09-07 12:01 . 2013-09-07 12:01	965008	------w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{AE614C5E-E9B3-4451-B8AD-473F01ECDF0E}\gapaengine.dll
2013-09-06 08:33 . 2013-09-19 00:45	--------	d-----w-	c:\program files\Western Digital
2013-09-06 06:50 . 2013-09-06 06:50	367200	----a-w-	c:\windows\system32\drivers\afcdp.sys
2013-09-06 06:49 . 2013-09-06 06:49	183224	----a-w-	c:\windows\system32\drivers\tib_mounter.sys
2013-09-06 06:49 . 2013-09-06 06:49	1120032	----a-w-	c:\windows\system32\drivers\tib.sys
2013-09-06 06:49 . 2013-09-06 06:49	161568	----a-w-	c:\windows\system32\drivers\vididr.sys
2013-09-05 10:56 . 2013-09-19 00:48	--------	d-----w-	c:\program files (x86)\Common Files\Common Desktop Agent
2013-09-05 10:56 . 2013-09-19 00:43	--------	d-----w-	c:\program files\Common Files\Common Desktop Agent
2013-09-05 10:42 . 2013-09-19 00:54	--------	d-----w-	c:\program files (x86)\Samsung Printers
2013-09-05 10:42 . 2013-09-19 00:39	--------	d-----w-	C:\Temp
2013-09-03 13:53 . 2013-09-03 13:53	187248	----a-w-	c:\program files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
2013-09-03 11:37 . 2013-09-19 00:43	--------	d-----w-	c:\program files\iPod
2013-09-03 11:37 . 2013-09-19 00:56	--------	d-----w-	c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-03 11:37 . 2013-09-19 00:50	--------	d-----w-	c:\program files (x86)\iTunes
2013-09-03 11:37 . 2013-09-19 00:43	--------	d-----w-	c:\program files\iTunes
2013-09-01 19:22 . 2013-09-19 00:55	--------	d-----w-	c:\program files (x86)\Ubisoft
2013-08-20 22:27 . 2013-08-20 22:27	20616	----a-w-	c:\program files (x86)\Common Files\Microsoft Shared\VSTO\10.0\1031\VSTOLoaderUI.dll
2013-08-20 22:27 . 2013-08-20 22:27	10896	----a-w-	c:\program files (x86)\Common Files\Microsoft Shared\VSTO\10.0\1031\VSTOInstallerUI.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-13 16:55 . 2013-02-02 10:06	564432	----a-w-	c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
2013-09-13 16:47 . 2012-04-05 06:24	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-09-13 16:47 . 2012-03-26 18:22	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-06 06:49 . 2012-10-23 16:28	1462560	----a-w-	c:\windows\system32\drivers\tdrpman.sys
2013-09-06 06:49 . 2012-10-23 15:45	117024	----a-w-	c:\windows\system32\drivers\vidsflt.sys
2013-09-06 06:49 . 2012-09-06 15:53	233760	----a-w-	c:\windows\system32\drivers\snapman.sys
2013-09-06 06:49 . 2012-10-23 15:44	108832	----a-w-	c:\windows\system32\drivers\fltsrv.sys
2013-08-22 15:57 . 2012-06-13 16:41	941720	------w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-08-20 01:33 . 2013-08-20 01:33	829264	----a-w-	c:\windows\system32\msvcr100.dll
2013-08-20 01:33 . 2013-08-20 01:33	608080	----a-w-	c:\windows\system32\msvcp100.dll
2013-08-20 00:26 . 2013-08-20 00:26	773968	----a-w-	c:\windows\SysWow64\msvcr100.dll
2013-08-20 00:26 . 2013-08-20 00:26	421200	----a-w-	c:\windows\SysWow64\msvcp100.dll
2013-08-02 01:48 . 2013-09-19 11:19	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2013-06-26 17:18 . 2013-06-26 17:18	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-06-26 17:17 . 2012-09-02 11:31	789416	----a-w-	c:\windows\SysWow64\deployJava1.dll
2013-06-26 17:17 . 2012-09-02 11:31	867240	----a-w-	c:\windows\SysWow64\npDeployJava1.dll
2006-05-03 10:06	163328	--sha-r-	c:\windows\SysWOW64\flvDX.dll
2007-02-21 11:47	31232	--sha-r-	c:\windows\SysWOW64\msfDX.dll
2008-03-16 13:30	216064	--sha-r-	c:\windows\SysWOW64\nbDX.dll
2010-01-06 22:00	107520	--sha-r-	c:\windows\SysWOW64\TAKDSDecoder.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{11111111-1111-1111-1111-110411181156}]
2013-09-17 11:00	598528	----a-w-	c:\program files (x86)\LyriXeeker-1\LyriXeeker-1-bho.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-09-13 16:58	1724616	----a-w-	c:\program files\Microsoft Office 15\root\office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-09-13 16:58	1724616	----a-w-	c:\program files\Microsoft Office 15\root\office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-09-13 16:58	1724616	----a-w-	c:\program files\Microsoft Office 15\root\office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Remote Control Editor"="c:\program files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe" [2013-04-15 1839616]
"updateMgr"="c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe" [2006-03-30 313472]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Acrobat Assistant 7.0"="c:\program files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2008-04-23 483328]
"AcronisTibMounterMonitor"="c:\program files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe" [2013-01-10 1105848]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"Adobe Version Cue CS2"="c:\adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe" [2005-04-06 856064]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"FreePDF Assistant"="c:\program files (x86)\FreePDF_XP\fpassist.exe" [2011-02-23 371200]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-08-16 152392]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2012-03-25 113288]
"PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2013-03-20 162856]
"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2011-07-06 688128]
"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2013-07-25 5624784]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"THX Audio Control Panel"="c:\program files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe" [2010-11-01 1374720]
"TrueImageMonitor.exe"="c:\program files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2013-03-27 6405376]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-10 90112]
"WD Quick View"="c:\program files (x86)\Western Digital\WD Quick View\WDDMStatus.exe" [2013-08-14 5537136]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Acrobat - Schnellstart.lnk - c:\windows\Installer\{AC76BA86-1033-F400-7760-100000000002}\SC_Acrobat.exe [2013-1-30 25214]
Adobe Gamma.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
Hotkey.lnk - c:\program files (x86)\Hotkey\Hotkey.exe [2010-11-29 2766336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages	REG_MULTI_SZ   	scecli c:\program files\Protector Suite\psqlpwd.dll
.
R2 CECFLPKT;CECFLPKT;c:\program files (x86)\ChiconyCam\CECPLFKT.exe;c:\program files (x86)\ChiconyCam\CECPLFKT.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys;c:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SliceDisk5;SliceDisk5;c:\program files\A-FF Find and Mount\slicedisk-x64.sys;c:\program files\A-FF Find and Mount\slicedisk-x64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 tib;Acronis TIB Manager;c:\windows\system32\DRIVERS\tib.sys;c:\windows\SYSNATIVE\DRIVERS\tib.sys [x]
S0 tib_mounter;Acronis TIB Mounter;c:\windows\system32\DRIVERS\tib_mounter.sys;c:\windows\SYSNATIVE\DRIVERS\tib_mounter.sys [x]
S0 vididr;Acronis Virtual Disk;c:\windows\system32\DRIVERS\vididr.sys;c:\windows\SYSNATIVE\DRIVERS\vididr.sys [x]
S0 vidsflt;Acronis Disk Storage Filter;c:\windows\system32\DRIVERS\vidsflt.sys;c:\windows\SYSNATIVE\DRIVERS\vidsflt.sys [x]
S2 afcdpsrv;Acronis Nonstop Backup Service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 EyeTV Netstream;EyeTV Netstream;c:\program files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe;c:\program files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe [x]
S2 OfficeSvc;Microsoft Office-Dienst;c:\program files\Microsoft Office 15\ClientX64\integratedoffice.exe;c:\program files\Microsoft Office 15\ClientX64\integratedoffice.exe [x]
S2 PowerBiosServer;PowerBiosServer;c:\program files (x86)\Hotkey\PowerBiosServer.exe;c:\program files (x86)\Hotkey\PowerBiosServer.exe [x]
S2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]
S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
S2 syncagentsrv;Acronis Sync Agent Service;c:\program files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe;c:\program files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 WDBackup;WD Backup;c:\program files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe;c:\program files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [x]
S2 WDDriveService;WD Drive Manager;c:\program files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe;c:\program files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [x]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 JME;JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits);c:\windows\system32\DRIVERS\JME.sys;c:\windows\SYSNATIVE\DRIVERS\JME.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - KWTIRAOC
*Deregistered* - kwtiraoc
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 16:47]
.
2013-09-19 c:\windows\Tasks\LyriXeeker-1-codedownloader.job
- c:\program files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe [2013-09-17 11:00]
.
2013-09-19 c:\windows\Tasks\LyriXeeker-1-enabler.job
- c:\program files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe [2013-09-17 11:00]
.
2013-09-19 c:\windows\Tasks\LyriXeeker-1-firefoxinstaller.job
- c:\program files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe [2013-09-17 11:00]
.
2013-09-19 c:\windows\Tasks\LyriXeeker-1-updater.job
- c:\program files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe [2013-09-17 11:01]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{11111111-1111-1111-1111-110411181156}]
2013-09-17 11:00	940544	----a-w-	c:\program files (x86)\LyriXeeker-1\LyriXeeker-1-bho64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-09-13 16:58	2328776	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-09-13 16:58	2328776	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-09-13 16:58	2328776	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncError]
@="{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}"
[HKEY_CLASSES_ROOT\CLSID\{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}]
2013-03-27 22:53	2827832	----a-w-	c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncInProgress]
@="{00F848DC-B1D4-4892-9C25-CAADC86A215D}"
[HKEY_CLASSES_ROOT\CLSID\{00F848DC-B1D4-4892-9C25-CAADC86A215D}]
2013-03-27 22:53	2827832	----a-w-	c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncOk]
@="{71573297-552E-46fc-BE3D-3DFAF88D47B7}"
[HKEY_CLASSES_ROOT\CLSID\{71573297-552E-46fc-BE3D-3DFAF88D47B7}]
2013-03-27 22:53	2827832	----a-w-	c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlay]
@="{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}"
[HKEY_CLASSES_ROOT\CLSID\{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}]
2010-04-27 13:48	5947656	----a-w-	c:\program files\Protector Suite\farchns.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlayOpen]
@="{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}"
[HKEY_CLASSES_ROOT\CLSID\{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}]
2010-04-27 13:48	5947656	----a-w-	c:\program files\Protector Suite\farchns.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-12-14 172144]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-12-14 399984]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-12-14 441968]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-03-25 11544680]
"Acronis Scheduler2 Service"="c:\program files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [2013-02-15 517912]
"CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2012-03-09 462712]
"CECAPLF"="c:\program files (x86)\ChiconyCam\CECAPLF.exe" [2010-09-17 121456]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-07-27 1935120]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-06-20 1356240]
"PSQLLauncher"="c:\program files\Protector Suite\launcher.exe" [2010-04-27 84744]
"THXCfg64"="c:\windows\system32\THXCfg64.dll" [2010-09-14 25600]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: An OneNote s&enden - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105
IE: Ausgewählte Verknüpfungen in Adobe PDF konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Ausgewählte Verknüpfungen in vorhandene PDF-Datei konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Auswahl in Adobe PDF konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Auswahl in vorhandene PDF-Datei konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: E&xport to Microsoft Excel - c:\program files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
IE: In Adobe PDF konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: In vorhandene PDF-Datei konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\program files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
IE: Verknüpfungsziel in Adobe PDF konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
Trusted Zone: dell.com
Trusted Zone: samsungsetup.com\www
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Notify-SDWinLogon - SDWinLogon.dll
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_174_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_174_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_174_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_174_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-09-19  17:08:06
ComboFix-quarantined-files.txt  2013-09-19 15:08
.
Vor Suchlauf: 16 Verzeichnis(se), 255.204.081.664 Bytes frei
Nach Suchlauf: 23 Verzeichnis(se), 254.924.365.824 Bytes frei
.
- - End Of File - - 182A7F9CE77074901B0AC56415A49C1F
A36C5E4F47E84449FF07ED3517B43A31

M-K-D-B · 19.09.2013, 18:28

Servus,

ok, gut. So geht es weiter:

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 3
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von JRT,
die Logdatei von MBAM.

e.rico · 20.09.2013, 00:55

Danke für's Feedback. Hier die Ergebnisse:

AdwCleaner[S0]

Code:

ATTFilter

# AdwCleaner v3.004 - Bericht erstellt am 20/09/2013 um 01:31:52
# Updated 15/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : **** - ****-PC
# Gestartet von : C:\Users\****\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0041856.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0041856.BHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0041856.Sandbox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0041856.Sandbox.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411181156}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0194532A-A99C-4337-937E-2A452C8957BE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411181156}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411181156}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411181156}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411181156}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411181156}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKLM\Software\Conduit

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16506


-\\ Mozilla Firefox v23.0.1 (de)

[ Datei : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.crossrider.bic", "14130a91cb231d503ede750cf13c9080");

*************************

AdwCleaner[R0].txt - [3047 octets] - [20/09/2013 01:31:18]
AdwCleaner[S0].txt - [2741 octets] - [20/09/2013 01:31:52]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2801 octets] ##########

JRT

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.1 (09.15.2013:1)
OS: Windows 7 Home Premium x64
Ran by **** on 20.09.2013 at  1:37:53,27
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220422182256}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550455185556}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660466186656}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440444184456}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220422182256}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550455185556}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660466186656}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444184456}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550455185556}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660466186656}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440444184456}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550455185556}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660466186656}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444184456}



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\****\AppData\Roaming\mozilla\firefox\profiles\x0s0w4c4.default\minidumps [25 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20.09.2013 at  1:43:01,27
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

mbam-log-2013-09-20 (01-47-24)

Code:

ATTFilter

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.09.19.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
**** :: ****-PC [Administrator]

Schutz: Aktiviert

20.09.2013 01:47:24
mbam-log-2013-09-20 (01-47-24).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 261393
Laufzeit: 5 Minute(n), 25 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

M-K-D-B · 20.09.2013, 18:56

Servus,

Schritt 1
Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden wieder zwei Logdateien erzeugt. Poste mir diese.

Schritt 2
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)

Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:
Code:
ATTFilter
```
:filefind
*LyriXeeker*

:folderfind
*LyriXeeker*

:regfind
LyriXeeker
         
```
Klicke nun auf den Button Look, um den Scan zu starten.
Der Suchlauf kann einige Zeit dauern.
Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.

Bitte poste mit deiner nächsten Antwort

die beiden Logdateien von FRST,
die Logdatei von SystemLook.

e.rico · 20.09.2013, 22:33

Beides erledigt.

FRST (Teil 1)

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-09-2013 01
Ran by **** (administrator) on ****-PC on 20-09-2013 23:23:53
Running from C:\Users\****\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Adobe Systems Incorporated) c:\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Elgato Systems GmbH) C:\Program Files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
() c:\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Chicony) C:\Program Files (x86)\ChiconyCam\CECAPLF.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(TerraTec Electronic GmbH) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe
() C:\Program Files (x86)\Hotkey\Hotkey.exe
(UPEK Inc.) C:\Program Files\Protector Suite\psqltray.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\acrotray.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Adobe Sytems Incorporated) C:\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-02-11] (Synaptics Incorporated)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11544680 2012-03-25] (Realtek Semiconductor)
HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [517912 2013-02-15] (Acronis)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
HKLM\...\Run: [CECAPLF] - C:\Program Files (x86)\ChiconyCam\CECAPLF.exe [121456 2010-09-17] (Chicony)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-27] (Intel(R) Corporation)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-06-20] (Microsoft Corporation)
HKLM\...\Run: [PSQLLauncher] - c:\Program Files\Protector Suite\launcher.exe [84744 2010-04-27] (UPEK Inc.)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: c:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)
HKCU\...\Run: [Remote Control Editor] - C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1839616 2013-04-15] (TerraTec Electronic GmbH)
HKCU\...\Run: [updateMgr] - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe [313472 2006-03-30] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [Acrobat Assistant 7.0] - C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328 2008-04-23] (Adobe Systems Inc.)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1105848 2013-01-10] (Acronis)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Version Cue CS2] - c:\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2012-03-25] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH)
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [688128 2011-07-06] ()
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6405376 2013-03-28] (Acronis)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [WD Quick View] - C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5537136 2013-08-14] (Western Digital Technologies, Inc.)
HKU\UpdatusUser\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516096 2010-11-21] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [246024 2012-12-29] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli c:\Program Files\Protector Suite\psqlpwd.dll

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?ocid=OIE9MSE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xBD07CED6C30ACD01
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\THCDeskBand.dll (TerraTec Electronic GmbH)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default
FF Homepage: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com
FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\{ce7e73df-6a44-4028-8079-5927a588c948}.xpi
FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-30] (Adobe Systems)
R2 Adobe Version Cue CS2; c:\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)
S2 CECFLPKT; C:\Program Files (x86)\ChiconyCam\CECPLFKT.exe [84592 2010-09-09] (Chicony Electronics Co., Ltd.)
R2 EyeTV Netstream; C:\Program Files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe [399944 2012-02-10] (Elgato Systems GmbH)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-06-20] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-27] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-06-20] (Microsoft Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1901752 2013-07-22] (Microsoft Corporation)
R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [32768 2010-11-18] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2013-08-14] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [270704 2013-08-14] (Western Digital Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
S3 SliceDisk5; C:\Program Files\A-FF Find and Mount\slicedisk-x64.sys [31824 2011-02-25] (Atola)
S3 SliceDisk5; C:\Program Files\A-FF Find and Mount\slicedisk-x64.sys [31824 2011-02-25] (Atola)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2013-09-06] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2013-09-06] (Acronis)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2013-09-06] (Acronis International GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-20 23:21 - 2013-09-20 23:21 - 01950622 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-20 18:52 - 2013-09-20 18:52 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-20 18:52 - 2013-09-20 18:52 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-09-20 18:52 - 2013-09-20 18:52 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-09-20 18:52 - 2013-09-20 18:52 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-09-20 18:52 - 2013-09-20 18:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-09-20 18:52 - 2013-09-20 18:52 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-09-20 18:52 - 2013-09-20 18:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-09-20 10:46 - 2013-09-20 19:10 - 00026640 _____ C:\Windows\setupact.log
2013-09-20 10:46 - 2013-09-20 10:46 - 00000000 _____ C:\Windows\setuperr.log
2013-09-20 01:48 - 2011-03-25 05:29 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-09-20 01:48 - 2011-03-25 05:29 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-09-20 01:48 - 2011-03-25 05:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-09-20 01:48 - 2011-03-25 05:29 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-09-20 01:48 - 2011-03-25 05:29 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-09-20 01:48 - 2011-03-25 05:29 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-09-20 01:48 - 2011-03-25 05:28 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-09-20 01:48 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2013-09-20 01:48 - 2011-03-11 08:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2013-09-20 01:48 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2013-09-20 01:48 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2013-09-20 01:48 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2013-09-20 01:48 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2013-09-20 01:48 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2013-09-20 01:48 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2013-09-20 01:48 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2013-09-20 01:48 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2013-09-20 01:48 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2013-09-20 01:45 - 2013-09-20 01:45 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Users\****\AppData\Roaming\Malwarebytes
2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-20 01:45 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-20 01:44 - 2013-09-20 01:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\****\Desktop\mbam-setup-1.75.0.1300.exe
2013-09-20 01:43 - 2013-09-20 01:43 - 00002403 _____ C:\Users\****\Desktop\JRT.txt
2013-09-20 01:37 - 2013-09-20 01:37 - 01029675 _____ (Thisisu) C:\Users\****\Desktop\JRT.exe
2013-09-20 01:37 - 2013-09-20 01:37 - 00000000 ____D C:\Windows\ERUNT
2013-09-20 01:34 - 2013-09-20 01:34 - 00002861 _____ C:\Users\****\Desktop\AdwCleaner[S0].txt
2013-09-20 01:31 - 2013-09-20 01:31 - 00000000 ____D C:\AdwCleaner
2013-09-20 01:30 - 2013-09-20 01:30 - 01039554 _____ C:\Users\****\Desktop\adwcleaner.exe
2013-09-19 17:55 - 2013-09-20 10:31 - 00000000 ____D C:\Windows\Minidump
2013-09-19 17:08 - 2013-09-19 17:11 - 00033957 _____ C:\Users\****\Desktop\ComboFix.txt
2013-09-19 16:39 - 2013-09-19 17:09 - 00000000 ____D C:\Qoobox
2013-09-19 16:39 - 2013-09-19 17:03 - 00000000 ____D C:\Windows\erdnt
2013-09-19 16:39 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-19 16:39 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-19 16:39 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-19 16:39 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-19 16:39 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-19 16:39 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-19 16:39 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-19 16:39 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-19 16:37 - 2013-09-19 16:37 - 05128554 ____R (Swearware) C:\Users\****\Desktop\ComboFix.exe
2013-09-19 16:29 - 2013-09-19 16:29 - 00032900 _____ C:\Users\****\Desktop\logfiles.zip
2013-09-19 14:56 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-09-19 14:56 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-09-19 14:54 - 2013-09-19 14:58 - 00012112 _____ C:\Users\****\Desktop\Gmer.txt
2013-09-19 14:45 - 2013-09-19 14:58 - 00142885 _____ C:\Users\****\Desktop\FRST_alt.txt
2013-09-19 14:44 - 2013-09-19 14:55 - 00039322 _____ C:\Users\****\Desktop\Addition_alt.txt
2013-09-19 14:43 - 2013-09-19 14:43 - 00000000 ____D C:\FRST
2013-09-19 14:42 - 2013-09-19 14:54 - 00000474 _____ C:\Users\****\Desktop\defogger_disable.log
2013-09-19 14:42 - 2013-09-19 14:42 - 00000000 _____ C:\Users\****\defogger_reenable
2013-09-19 14:41 - 2013-09-19 14:41 - 00377856 _____ C:\Users\****\Desktop\5txgbuj5.exe
2013-09-19 14:41 - 2013-09-19 14:41 - 00050477 _____ C:\Users\****\Desktop\Defogger.exe
2013-09-19 14:34 - 2013-01-13 23:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-09-19 14:34 - 2013-01-13 22:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-09-19 14:34 - 2013-01-13 22:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-09-19 14:34 - 2013-01-13 22:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-09-19 14:34 - 2013-01-13 21:58 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-09-19 14:34 - 2013-01-13 21:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-09-19 14:34 - 2013-01-13 21:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-09-19 14:34 - 2013-01-13 21:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-09-19 14:34 - 2013-01-13 21:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-09-19 14:34 - 2013-01-13 21:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-09-19 14:34 - 2013-01-13 21:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-09-19 14:34 - 2013-01-13 21:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-09-19 14:34 - 2013-01-13 21:43 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-09-19 14:34 - 2013-01-13 21:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-09-19 14:34 - 2013-01-13 21:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-09-19 14:34 - 2013-01-13 21:37 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-09-19 14:34 - 2013-01-13 21:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-09-19 14:34 - 2013-01-13 21:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-09-19 14:34 - 2013-01-13 21:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-09-19 14:34 - 2013-01-13 21:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-09-19 14:34 - 2013-01-13 21:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-09-19 14:34 - 2013-01-13 21:15 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-09-19 14:34 - 2013-01-13 21:10 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-09-19 14:34 - 2013-01-13 21:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-09-19 14:34 - 2013-01-13 20:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-09-19 14:34 - 2013-01-13 20:32 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-09-19 14:34 - 2013-01-13 20:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-09-19 14:34 - 2013-01-13 19:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-09-19 14:34 - 2013-01-13 19:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-09-19 14:34 - 2013-01-04 08:11 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-09-19 14:34 - 2013-01-04 08:11 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-09-19 14:33 - 2012-08-24 20:13 - 00154480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-09-19 14:33 - 2012-08-24 20:09 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-09-19 14:33 - 2012-08-24 20:05 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-09-19 14:33 - 2012-08-24 20:03 - 01448448 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-09-19 14:33 - 2012-08-24 18:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-09-19 14:33 - 2012-08-24 18:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-09-19 14:33 - 2012-08-24 18:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-09-19 14:19 - 2013-09-18 22:06 - 02850416 _____ C:\Users\****\Desktop\Sicherungskopie_von_flic.cdr
2013-09-19 13:59 - 2013-09-01 17:08 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-19 13:51 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-09-19 13:51 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-09-19 13:51 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-09-19 13:51 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-09-19 13:48 - 2013-09-19 13:48 - 00000134 _____ C:\Users\****\Desktop\Internet Explorer-Problembehebung.url
2013-09-19 13:39 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2013-09-19 13:27 - 2012-12-16 19:11 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-09-19 13:27 - 2012-12-16 16:45 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-09-19 13:27 - 2012-12-16 16:13 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-09-19 13:27 - 2012-12-16 16:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-09-19 13:27 - 2010-09-30 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-09-19 13:27 - 2010-09-30 08:47 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-09-19 13:26 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-09-19 13:26 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-09-19 13:26 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-09-19 13:26 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-09-19 13:26 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-09-19 13:26 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-09-19 13:26 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-09-19 13:26 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-09-19 13:23 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2013-09-19 13:23 - 2012-03-01 08:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-09-19 13:23 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2013-09-19 13:23 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-09-19 13:23 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2013-09-19 13:19 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-19 13:19 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-19 13:19 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-19 13:19 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-19 13:19 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-19 13:19 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-19 13:19 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-19 13:19 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-19 13:19 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-19 13:19 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-19 13:19 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-19 13:19 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-19 13:19 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-19 13:19 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-19 13:19 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-19 13:19 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-19 13:19 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-19 13:19 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-19 13:19 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-19 13:19 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-19 13:19 - 2013-02-27 08:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-09-19 13:19 - 2013-02-27 07:48 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-09-19 13:19 - 2013-02-27 07:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2013-09-19 13:19 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-09-19 13:18 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-09-19 13:18 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-09-19 13:18 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-09-19 13:18 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-09-19 13:18 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-09-19 13:18 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-09-19 13:18 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-09-19 13:18 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-09-19 13:18 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-09-19 13:18 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-09-19 13:18 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-09-19 13:18 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-09-19 13:18 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-09-19 13:18 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls
2013-09-19 13:18 - 2012-11-30 01:15 - 00420064 _____ C:\Windows\system32\locale.nls
2013-09-19 13:18 - 2012-10-03 19:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2013-09-19 13:18 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2013-09-19 13:18 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2013-09-19 13:18 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2013-09-19 13:18 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2013-09-19 13:18 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2013-09-19 13:18 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2013-09-19 13:18 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2013-09-19 13:18 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2013-09-19 13:18 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2013-09-19 13:18 - 2012-01-13 09:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-09-19 13:17 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-19 13:17 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-19 13:17 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-19 13:17 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-19 13:17 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-09-19 13:17 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-09-19 13:17 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-09-19 13:17 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-09-19 13:17 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-09-19 13:17 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-09-19 13:17 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-09-19 13:17 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-09-19 13:17 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-09-19 13:17 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-09-19 13:17 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-09-19 13:17 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2013-09-19 13:17 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-09-19 13:17 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-09-19 13:17 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-09-19 13:17 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-09-19 13:17 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-09-19 13:17 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2013-09-19 13:17 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-09-19 13:17 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2013-09-19 13:17 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2013-09-19 13:17 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2013-09-19 13:17 - 2012-06-02 07:48 - 00095600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-09-19 13:17 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2013-09-19 13:17 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2013-09-19 13:17 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2013-09-19 13:17 - 2011-11-17 08:35 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-09-19 13:17 - 2011-11-17 08:35 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-09-19 13:17 - 2011-11-17 08:35 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-09-19 13:17 - 2011-11-17 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-09-19 13:17 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2013-09-19 13:17 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2013-09-19 13:17 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2013-09-19 13:17 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2013-09-19 13:17 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2013-09-19 13:17 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2013-09-19 13:17 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2013-09-19 13:17 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2013-09-19 13:17 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2013-09-19 13:17 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2013-09-19 13:17 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2013-09-19 13:17 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2013-09-19 13:17 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2013-09-19 13:17 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2013-09-19 13:17 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2013-09-19 13:17 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2013-09-19 13:17 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2013-09-19 13:17 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2013-09-19 13:17 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2013-09-19 13:17 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2013-09-19 13:17 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-09-19 13:17 - 2010-12-23 12:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2013-09-19 13:17 - 2010-12-23 12:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2013-09-19 13:17 - 2010-12-23 12:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2013-09-19 13:17 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2013-09-19 13:17 - 2010-12-23 07:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2013-09-19 13:17 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2013-09-19 13:16 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-19 13:16 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-19 13:16 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-09-19 13:16 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-09-19 13:16 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-09-19 13:16 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-09-19 13:16 - 2013-04-10 08:01 - 00983400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-09-19 13:16 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2013-09-19 13:16 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-09-19 13:16 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-09-19 13:16 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-09-19 13:16 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-09-19 13:16 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-09-19 13:16 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-09-19 13:16 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2013-09-19 13:16 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-09-19 13:16 - 2012-11-01 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2013-09-19 13:16 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-09-19 13:16 - 2012-11-01 06:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-09-19 13:16 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2013-09-19 13:16 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2013-09-19 13:16 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2013-09-19 13:16 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2013-09-19 13:16 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2013-09-19 13:16 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2013-09-19 13:16 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2013-09-19 13:16 - 2012-04-26 07:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2013-09-19 13:16 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2013-09-19 13:16 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2013-09-19 13:16 - 2012-04-07 14:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2013-09-19 13:16 - 2012-04-07 13:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2013-09-19 13:16 - 2011-10-26 07:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2013-09-19 13:16 - 2011-10-26 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-09-19 13:16 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2013-09-19 13:16 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-09-19 13:16 - 2011-07-09 04:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2013-09-19 13:16 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2013-09-19 13:16 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2013-09-19 13:16 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2013-09-19 13:16 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2013-09-19 13:16 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2013-09-19 13:16 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2013-09-19 13:16 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2013-09-19 13:16 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2013-09-19 13:16 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2013-09-19 13:16 - 2011-04-29 05:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2013-09-19 13:16 - 2011-04-29 05:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2013-09-19 13:16 - 2011-04-29 05:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2013-09-19 13:16 - 2011-04-27 04:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2013-09-19 13:16 - 2011-04-27 04:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2013-09-19 13:16 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2013-09-19 13:16 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2013-09-19 13:16 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2013-09-19 13:16 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2013-09-19 13:16 - 2011-02-25 08:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-09-19 13:16 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-09-19 13:16 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-09-19 13:16 - 2010-06-26 05:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2013-09-19 13:16 - 2010-06-26 05:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2013-09-19 13:15 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-09-19 13:15 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-09-19 13:15 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-09-19 13:15 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-09-19 13:15 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-09-19 13:15 - 2013-03-19 07:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-09-19 13:15 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2013-09-19 13:15 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-09-19 13:15 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-09-19 13:15 - 2012-11-22 07:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-09-19 13:15 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-09-19 13:15 - 2012-11-20 07:48 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-09-19 13:15 - 2012-11-20 06:51 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-09-19 13:15 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2013-09-19 13:15 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-09-19 13:15 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-09-19 13:15 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-09-19 13:15 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-09-19 13:15 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-09-19 13:15 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-09-19 13:15 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2013-09-19 13:15 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2013-09-19 13:15 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2013-09-19 13:15 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2013-09-19 13:15 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-09-19 13:15 - 2012-05-05 10:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-09-19 13:15 - 2012-05-05 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2013-09-19 13:15 - 2012-05-01 07:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2013-09-19 13:15 - 2012-04-28 05:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-09-19 13:15 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2013-09-19 13:15 - 2012-02-11 08:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-09-19 13:15 - 2012-02-11 08:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-09-19 13:15 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2013-09-19 13:15 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2013-09-19 13:15 - 2011-12-28 05:59 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-09-19 13:15 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2013-09-19 13:15 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2013-09-19 13:15 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2013-09-19 13:15 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2013-09-19 13:15 - 2011-08-27 07:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-09-19 13:15 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2013-09-19 13:15 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-09-19 13:15 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2013-09-19 13:15 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2013-09-19 13:15 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2013-09-19 13:15 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2013-09-19 13:15 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2013-09-19 13:15 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2013-09-19 13:15 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2013-09-19 13:15 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2013-09-19 13:15 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2013-09-19 13:15 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2013-09-19 13:15 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2013-09-19 13:15 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2013-09-19 13:15 - 2011-05-03 07:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2013-09-19 13:15 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2013-09-19 13:15 - 2011-04-23 00:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2013-09-19 13:15 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2013-09-19 13:15 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2013-09-19 13:15 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2013-09-19 13:15 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2013-09-19 13:15 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2013-09-19 13:15 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2013-09-19 13:15 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2013-09-19 13:15 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2013-09-19 13:15 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2013-09-19 13:15 - 2011-02-05 19:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2013-09-19 13:15 - 2011-02-05 19:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2013-09-19 13:15 - 2011-02-05 19:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2013-09-19 13:15 - 2011-02-05 19:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2013-09-19 13:15 - 2011-02-05 19:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2013-09-19 13:15 - 2011-02-05 19:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2013-09-19 13:15 - 2011-02-05 19:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2013-09-19 12:59 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2013-09-19 12:59 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2013-09-19 12:35 - 2013-09-19 12:35 - 01602164 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-19 12:31 - 2013-09-20 19:06 - 00001413 _____ C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-19 12:31 - 2013-09-19 14:27 - 00146616 _____ C:\Users\****\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-19 12:30 - 2013-09-19 12:30 - 00000020 ___SH C:\Users\****\ntuser.ini
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-09-19 03:56 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2013-09-19 03:56 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-09-19 03:56 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2013-09-19 03:51 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-09-19 03:51 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-09-19 03:51 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-09-19 03:51 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-09-19 03:51 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-09-19 03:51 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-09-19 03:51 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-09-19 03:51 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-09-19 03:51 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-09-19 03:32 - 2013-09-19 12:30 - 00000000 ____D C:\Windows\Panther
2013-09-19 03:30 - 2013-09-19 03:30 - 00022960 _____ C:\Windows\system32\emptyregdb.dat
2013-09-19 03:27 - 2013-09-19 03:27 - 00262144 _____ C:\Windows\system32\config\userdiff
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2008
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2008
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-09-19 02:40 - 2013-09-19 14:42 - 00000000 ____D C:\Users\****
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Vorlagen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Startmenü
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Netzwerkumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Lokale Einstellungen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Eigene Dateien
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Druckumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Musik
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Bilder
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Verlauf
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Anwendungsdaten
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Anwendungsdaten
2013-09-19 02:40 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-19 02:40 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-19 02:40 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-19 02:40 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-19 02:39 - 2013-09-19 02:39 - 00001355 _____ C:\Windows\TSSysprep.log
2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf
2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf
2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____D C:\Program Files\AuthenTec
2013-09-19 02:38 - 2013-09-20 23:19 - 01604444 _____ C:\Windows\WindowsUpdate.log
2013-09-19 02:38 - 2013-09-19 02:38 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-19 02:38 - 2012-12-29 10:40 - 06382008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-09-19 02:38 - 2012-12-29 10:40 - 03455416 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-09-19 02:38 - 2012-12-29 10:40 - 02923201 _____ C:\Windows\system32\nvcoproc.bin
2013-09-19 02:38 - 2012-12-29 10:40 - 02558392 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-09-19 02:38 - 2012-12-29 10:40 - 00997816 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2013-09-19 02:38 - 2012-12-29 10:40 - 00884152 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-09-19 02:38 - 2012-12-29 10:40 - 00118712 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-09-19 02:38 - 2012-12-29 10:40 - 00063928 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-09-19 02:38 - 2012-12-29 10:40 - 00055736 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2013-09-19 02:37 - 2013-09-19 02:50 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-19 02:37 - 2013-09-19 02:44 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files\Realtek
2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____D C:\Program Files\Synaptics
2013-09-19 01:32 - 2013-09-19 03:34 - 00006125 _____ C:\Windows\comsetup.log
2013-09-19 00:51 - 2013-09-19 01:17 - 00003376 _____ C:\Users\****\Desktop\Windows-Kompatibilitätsbericht.htm
2013-09-19 00:43 - 2013-09-19 01:14 - 00002544 _____ C:\Windows\diagwrn.xml
2013-09-19 00:43 - 2013-09-19 01:14 - 00001890 _____ C:\Windows\diagerr.xml
2013-09-18 22:06 - 2013-09-19 14:19 - 01831285 _____ C:\Users\****\Desktop\gutschein_flicflac.cdr
2013-09-18 21:48 - 2013-09-18 21:55 - 423572207 _____ C:\Users\****\Downloads\Windows6.1-KB947821-v28-x64.msu
2013-09-18 19:16 - 2013-02-23 01:16 - 552209689 _____ C:\Users\****\Desktop\IMG_2059.MOV
2013-09-18 13:15 - 2013-09-19 03:29 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-09-18 13:15 - 2013-09-19 02:56 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-18 13:14 - 2013-09-19 02:54 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-09-18 13:14 - 2013-09-18 13:14 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-09-18 13:14 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2013-09-18 13:12 - 2013-09-18 13:12 - 00614816 _____ C:\Users\****\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe
2013-09-17 13:01 - 2013-09-20 23:18 - 00001308 _____ C:\Windows\Tasks\LyriXeeker-1-updater.job
2013-09-17 13:01 - 2013-09-17 13:02 - 00004338 _____ C:\Windows\System32\Tasks\LyriXeeker-1-updater
2013-09-17 13:01 - 2013-09-17 13:01 - 00004142 _____ C:\Windows\System32\Tasks\LyriXeeker-1-enabler
2013-09-17 13:00 - 2013-09-20 23:18 - 00001846 _____ C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job
2013-09-17 13:00 - 2013-09-20 23:18 - 00001212 _____ C:\Windows\Tasks\LyriXeeker-1-codedownloader.job
2013-09-17 13:00 - 2013-09-20 23:18 - 00001112 _____ C:\Windows\Tasks\LyriXeeker-1-enabler.job
2013-09-17 13:00 - 2013-09-20 10:12 - 00000000 ____D C:\Program Files (x86)\LyriXeeker-1
2013-09-17 13:00 - 2013-09-17 13:00 - 00004242 _____ C:\Windows\System32\Tasks\LyriXeeker-1-codedownloader
2013-09-17 12:59 - 2013-09-17 12:59 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\****\Downloads\jDownloaderWebInstaller09581.exe
2013-09-17 12:09 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Weltreise
2013-09-17 11:48 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker -  Böhmische
2013-09-17 11:48 - 2013-09-17 12:00 - 71710551 _____ C:\Users\****\Downloads\DIBwe.rar
2013-09-17 11:40 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Tip-Top WEB
2013-09-17 11:31 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Perfectum est!
2013-09-16 17:10 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Windows XP Professional with Service Pack 3 (x86) - CD (German)
2013-09-16 16:30 - 2013-09-16 16:30 - 00003179 _____ C:\Users\****\Desktop\Secure Download Manager.lnk
2013-09-12 22:43 - 2013-09-12 23:36 - 00010089 _____ C:\Users\****\AppData\Roaming\Durch Trennzeichen getrennte Werte.CAL
2013-09-06 10:33 - 2013-09-19 02:45 - 00000000 ____D C:\Program Files\Western Digital
2013-09-06 08:50 - 2013-09-06 08:50 - 00367200 _____ (Acronis) C:\Windows\system32\Drivers\afcdp.sys
2013-09-06 08:49 - 2013-09-19 03:16 - 00000000 ____D C:\Users\****\AppData\Roaming\17DB5932-922E-412B-B4F0-CDE14C9D6793
2013-09-06 08:49 - 2013-09-06 08:49 - 01120032 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 00183224 _____ (Acronis) C:\Windows\system32\Drivers\tib_mounter.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 00161568 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vididr.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 00001205 _____ C:\Users\Public\Desktop\True Image 2013.lnk
2013-09-05 12:57 - 2013-09-19 03:20 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung Printers
2013-09-05 12:56 - 2013-09-19 03:15 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Samsung
2013-09-05 12:56 - 2013-09-19 02:43 - 00000000 ____D C:\Program Files\Common Files\Common Desktop Agent
2013-09-05 12:42 - 2013-09-19 02:54 - 00000000 ____D C:\Program Files (x86)\Samsung Printers
2013-09-03 13:37 - 2013-09-19 02:56 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-03 13:37 - 2013-09-19 02:50 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-03 13:37 - 2013-09-19 02:43 - 00000000 ____D C:\Program Files\iTunes
2013-09-03 13:37 - 2013-09-19 02:43 - 00000000 ____D C:\Program Files\iPod
2013-09-03 13:37 - 2013-09-03 13:37 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-09-02 12:56 - 2013-09-02 13:01 - 00000000 ____D C:\Windows\pss
2013-09-02 12:10 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Documents\Ubisoft
2013-09-02 12:00 - 2013-09-02 12:00 - 00002490 _____ C:\Users\Public\Desktop\Tom Clancy's Splinter Cell® Blacklist™.lnk
2013-09-01 21:22 - 2013-09-19 03:20 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-09-01 21:22 - 2013-09-19 03:16 - 00000000 ____D C:\Users\****\AppData\Local\Ubisoft Game Launcher
2013-09-01 21:22 - 2013-09-19 02:55 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-09-01 21:22 - 2013-09-01 21:22 - 00001205 _____ C:\Users\****\Desktop\Uplay.lnk
2013-08-22 08:16 - 2013-08-22 08:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf

e.rico · 20.09.2013, 22:40

FRST (Teil 2)

Code:

ATTFilter

==================== One Month Modified Files and Folders =======

2013-09-20 23:21 - 2013-09-20 23:21 - 01950622 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe
2013-09-20 23:19 - 2013-09-19 02:38 - 01604444 _____ C:\Windows\WindowsUpdate.log
2013-09-20 23:18 - 2013-09-17 13:01 - 00001308 _____ C:\Windows\Tasks\LyriXeeker-1-updater.job
2013-09-20 23:18 - 2013-09-17 13:00 - 00001846 _____ C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job
2013-09-20 23:18 - 2013-09-17 13:00 - 00001212 _____ C:\Windows\Tasks\LyriXeeker-1-codedownloader.job
2013-09-20 23:18 - 2013-09-17 13:00 - 00001112 _____ C:\Windows\Tasks\LyriXeeker-1-enabler.job
2013-09-20 22:47 - 2013-05-22 18:11 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-20 19:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-20 19:17 - 2011-04-12 09:43 - 00702852 _____ C:\Windows\system32\perfh007.dat
2013-09-20 19:17 - 2011-04-12 09:43 - 00150460 _____ C:\Windows\system32\perfc007.dat
2013-09-20 19:17 - 2009-07-14 07:13 - 01627884 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-20 19:17 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-20 19:17 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-20 19:10 - 2013-09-20 10:46 - 00026640 _____ C:\Windows\setupact.log
2013-09-20 19:10 - 2013-05-20 18:12 - 00008192 _____ C:\Windows\SysWOW64\WDPABKP.dat
2013-09-20 19:10 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-20 19:06 - 2013-09-19 12:31 - 00001413 _____ C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-20 18:57 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Outlook-Dateien
2013-09-20 18:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-09-20 18:56 - 2013-04-30 22:29 - 00618400 _____ C:\Windows\IE10_main.log
2013-09-20 18:52 - 2013-09-20 18:52 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-20 18:52 - 2013-09-20 18:52 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-20 18:52 - 2013-09-20 18:52 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-09-20 18:52 - 2013-09-20 18:52 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-09-20 18:52 - 2013-09-20 18:52 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-09-20 18:52 - 2013-09-20 18:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-09-20 18:52 - 2013-09-20 18:52 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-09-20 18:52 - 2013-09-20 18:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-09-20 14:47 - 2013-05-22 18:11 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-20 14:47 - 2012-04-05 08:24 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 14:47 - 2012-03-26 20:22 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK
2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-09-20 10:46 - 2013-09-20 10:46 - 00000000 _____ C:\Windows\setuperr.log
2013-09-20 10:31 - 2013-09-19 17:55 - 00000000 ____D C:\Windows\Minidump
2013-09-20 10:12 - 2013-09-17 13:00 - 00000000 ____D C:\Program Files (x86)\LyriXeeker-1
2013-09-20 01:45 - 2013-09-20 01:45 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Users\****\AppData\Roaming\Malwarebytes
2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-20 01:44 - 2013-09-20 01:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\****\Desktop\mbam-setup-1.75.0.1300.exe
2013-09-20 01:43 - 2013-09-20 01:43 - 00002403 _____ C:\Users\****\Desktop\JRT.txt
2013-09-20 01:37 - 2013-09-20 01:37 - 01029675 _____ (Thisisu) C:\Users\****\Desktop\JRT.exe
2013-09-20 01:37 - 2013-09-20 01:37 - 00000000 ____D C:\Windows\ERUNT
2013-09-20 01:34 - 2013-09-20 01:34 - 00002861 _____ C:\Users\****\Desktop\AdwCleaner[S0].txt
2013-09-20 01:31 - 2013-09-20 01:31 - 00000000 ____D C:\AdwCleaner
2013-09-20 01:30 - 2013-09-20 01:30 - 01039554 _____ C:\Users\****\Desktop\adwcleaner.exe
2013-09-19 17:55 - 2010-11-21 05:47 - 00017810 _____ C:\Windows\PFRO.log
2013-09-19 17:11 - 2013-09-19 17:08 - 00033957 _____ C:\Users\****\Desktop\ComboFix.txt
2013-09-19 17:09 - 2013-09-19 16:39 - 00000000 ____D C:\Qoobox
2013-09-19 17:03 - 2013-09-19 16:39 - 00000000 ____D C:\Windows\erdnt
2013-09-19 16:52 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-09-19 16:37 - 2013-09-19 16:37 - 05128554 ____R (Swearware) C:\Users\****\Desktop\ComboFix.exe
2013-09-19 16:29 - 2013-09-19 16:29 - 00032900 _____ C:\Users\****\Desktop\logfiles.zip
2013-09-19 14:58 - 2013-09-19 14:54 - 00012112 _____ C:\Users\****\Desktop\Gmer.txt
2013-09-19 14:58 - 2013-09-19 14:45 - 00142885 _____ C:\Users\****\Desktop\FRST_alt.txt
2013-09-19 14:55 - 2013-09-19 14:44 - 00039322 _____ C:\Users\****\Desktop\Addition_alt.txt
2013-09-19 14:54 - 2013-09-19 14:42 - 00000474 _____ C:\Users\****\Desktop\defogger_disable.log
2013-09-19 14:43 - 2013-09-19 14:43 - 00000000 ____D C:\FRST
2013-09-19 14:42 - 2013-09-19 14:42 - 00000000 _____ C:\Users\****\defogger_reenable
2013-09-19 14:42 - 2013-09-19 02:40 - 00000000 ____D C:\Users\****
2013-09-19 14:41 - 2013-09-19 14:41 - 00377856 _____ C:\Users\****\Desktop\5txgbuj5.exe
2013-09-19 14:41 - 2013-09-19 14:41 - 00050477 _____ C:\Users\****\Desktop\Defogger.exe
2013-09-19 14:27 - 2013-09-19 12:31 - 00146616 _____ C:\Users\****\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-19 14:27 - 2012-03-25 21:47 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-19 14:27 - 2012-03-25 21:47 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-19 14:22 - 2009-07-14 06:45 - 05158952 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-19 14:20 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2013-09-19 14:20 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-09-19 14:20 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-09-19 14:20 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-09-19 14:19 - 2013-09-18 22:06 - 01831285 _____ C:\Users\****\Desktop\gutschein_flicflac.cdr
2013-09-19 14:02 - 2013-07-18 17:57 - 00000000 ____D C:\Windows\system32\MRT
2013-09-19 13:48 - 2013-09-19 13:48 - 00000134 _____ C:\Users\****\Desktop\Internet Explorer-Problembehebung.url
2013-09-19 13:39 - 2012-03-25 22:54 - 00013178 _____ C:\Windows\IE9_main.log
2013-09-19 12:35 - 2013-09-19 12:35 - 01602164 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-19 12:33 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-09-19 12:30 - 2013-09-19 12:30 - 00000020 ___SH C:\Users\****\ntuser.ini
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-09-19 12:30 - 2013-09-19 03:32 - 00000000 ____D C:\Windows\Panther
2013-09-19 12:30 - 2012-03-25 21:47 - 00000000 ____D C:\Recovery
2013-09-19 12:30 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-09-19 12:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery
2013-09-19 12:30 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-09-19 03:50 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2013-09-19 03:34 - 2013-09-19 01:32 - 00006125 _____ C:\Windows\comsetup.log
2013-09-19 03:32 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-09-19 03:32 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-09-19 03:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe
2013-09-19 03:30 - 2013-09-19 03:30 - 00022960 _____ C:\Windows\system32\emptyregdb.dat
2013-09-19 03:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration
2013-09-19 03:29 - 2013-09-18 13:15 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-09-19 03:29 - 2013-05-20 18:15 - 00000000 ____D C:\Windows\System32\Tasks\Western Digital
2013-09-19 03:29 - 2012-08-30 00:25 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-09-19 03:29 - 2012-03-25 22:28 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2013-09-19 03:29 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media
2013-09-19 03:27 - 2013-09-19 03:27 - 00262144 _____ C:\Windows\system32\config\userdiff
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2008
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2008
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-09-19 03:24 - 2009-07-14 06:46 - 00005157 _____ C:\Windows\DtcInstall.log
2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-19 03:21 - 2013-09-17 12:09 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Weltreise
2013-09-19 03:21 - 2013-09-17 11:48 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker -  Böhmische
2013-09-19 03:21 - 2013-09-17 11:40 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Tip-Top WEB
2013-09-19 03:21 - 2013-09-17 11:31 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Perfectum est!
2013-09-19 03:21 - 2013-09-16 17:10 - 00000000 ____D C:\Users\****\Downloads\Windows XP Professional with Service Pack 3 (x86) - CD (German)
2013-09-19 03:21 - 2013-09-02 12:10 - 00000000 ____D C:\Users\****\Documents\Ubisoft
2013-09-19 03:21 - 2013-05-04 23:01 - 00000000 ____D C:\Users\****\eTeks
2013-09-19 03:21 - 2013-04-10 09:01 - 00000000 ____D C:\Users\****\Documents\Wohnung Eisenbach
2013-09-19 03:21 - 2013-03-27 21:02 - 00000000 ____D C:\Users\****\Documents\SimCity
2013-09-19 03:21 - 2012-12-26 13:41 - 00000000 ____D C:\Users\****\Documents\My Games
2013-09-19 03:21 - 2012-10-11 15:40 - 00000000 ____D C:\Users\****\Documents\My Kindle Content
2013-09-19 03:21 - 2012-08-14 22:32 - 00000000 ____D C:\Users\****\Documents\Telekom Deutschland GmbH
2013-09-19 03:21 - 2012-08-14 22:31 - 00000000 ____D C:\Users\****\Documents\Renate
2013-09-19 03:21 - 2012-06-17 19:05 - 00000000 ____D C:\Users\****\Documents\Retrieved Contents
2013-09-19 03:21 - 2012-06-08 21:29 - 00000000 ____D C:\Users\****\Documents\Mängelrüge Reise - Tanja + Madeleine
2013-09-19 03:21 - 2012-03-26 20:22 - 00000000 ____D C:\Users\****\Documents\Visual Studio 2008
2013-09-19 03:21 - 2012-03-26 08:25 - 00000000 ____D C:\Users\****\Documents\Wohnung
2013-09-19 03:21 - 2012-03-26 08:23 - 00000000 ____D C:\Users\****\Documents\Vereinsring
2013-09-19 03:21 - 2012-03-26 08:23 - 00000000 ____D C:\Users\****\Documents\Veranstaltungsfachwirt
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Uni Würzburg
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\TSV Olympia
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\tiere-infos.de (Pascal)-Dateien
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\StreamTransport
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Steuer-Sparbuch
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Steuer
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Sony Ericsson
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\snaps-****
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Routenplaner-Service.de_1
2013-09-19 03:21 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Musikverein
2013-09-19 03:20 - 2013-09-05 12:57 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung Printers
2013-09-19 03:20 - 2013-09-01 21:22 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-09-19 03:20 - 2013-08-04 21:23 - 00000000 ____D C:\Users\****\AppData\Roaming\Skype
2013-09-19 03:20 - 2013-07-28 14:10 - 00000000 ____D C:\Users\****\Documents\Ausbildereigungsprüfung
2013-09-19 03:20 - 2013-07-01 23:12 - 00000000 ____D C:\Users\****\Desktop\CPU
2013-09-19 03:20 - 2013-07-01 13:52 - 00000000 ____D C:\Users\****\Desktop\Präsentation
2013-09-19 03:20 - 2013-06-16 22:26 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar
2013-09-19 03:20 - 2013-06-16 01:21 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quadriga Games
2013-09-19 03:20 - 2013-06-01 12:26 - 00000000 ____D C:\Users\****\AppData\Roaming\TerraTec
2013-09-19 03:20 - 2013-05-30 21:37 - 00000000 ____D C:\Users\****\Documents\Betriebswirt
2013-09-19 03:20 - 2013-03-23 12:54 - 00000000 ____D C:\Users\****\Documents\Armani
2013-09-19 03:20 - 2013-02-02 12:42 - 00000000 ____D C:\Users\****\Documents\Francisco Medina
2013-09-19 03:20 - 2013-01-29 00:56 - 00000000 ____D C:\Users\****\AppData\Roaming\Youtube Downloader HD
2013-09-19 03:20 - 2013-01-12 18:00 - 00000000 ____D C:\Users\****\Documents\Karl Jany
2013-09-19 03:20 - 2012-12-02 17:10 - 00000000 ____D C:\Users\****\AppData\Roaming\MusE
2013-09-19 03:20 - 2012-12-01 13:49 - 00000000 ____D C:\Users\****\AppData\Roaming\Samsung
2013-09-19 03:20 - 2012-11-13 00:16 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge
2013-09-19 03:20 - 2012-11-03 12:18 - 00000000 ____D C:\Users\****\Documents\FUSSBALL MANAGER 13
2013-09-19 03:20 - 2012-11-02 23:15 - 00000000 ____D C:\Users\****\AppData\Roaming\Origin
2013-09-19 03:20 - 2012-10-19 16:41 - 00000000 ____D C:\Users\****\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2013-09-19 03:20 - 2012-10-19 15:53 - 00000000 ____D C:\Users\****\AppData\Roaming\PDAppFlex
2013-09-19 03:20 - 2012-10-18 18:04 - 00000000 ____D C:\Users\****\Documents\Kirchenverwaltungswahl 2012
2013-09-19 03:20 - 2012-10-11 15:40 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-09-19 03:20 - 2012-10-07 22:35 - 00000000 ____D C:\Users\****\Documents\ML-2525W_Printd
2013-09-19 03:20 - 2012-10-07 03:32 - 00000000 ____D C:\Users\****\Documents\HVB
2013-09-19 03:20 - 2012-09-27 18:24 - 00000000 ___SD C:\Users\****\Documents\Meine Shapes
2013-09-19 03:20 - 2012-09-10 19:25 - 00000000 ____D C:\Users\****\AppData\Roaming\Mp3tag
2013-09-19 03:20 - 2012-08-04 16:33 - 00000000 ____D C:\Users\****\AppData\Roaming\TeamViewer
2013-09-19 03:20 - 2012-07-22 18:27 - 00000000 ____D C:\Users\****\AppData\Roaming\NVIDIA
2013-09-19 03:20 - 2012-07-22 18:26 - 00000000 ____D C:\Users\****\AppData\Roaming\ProtectDISC
2013-09-19 03:20 - 2012-06-19 18:31 - 00000000 __SHD C:\Users\****\Documents\cache
2013-09-19 03:20 - 2012-06-19 18:31 - 00000000 ____D C:\Users\****\AppData\Roaming\webex
2013-09-19 03:20 - 2012-05-28 21:11 - 00000000 ____D C:\Users\****\AppData\Roaming\SmartTools
2013-09-19 03:20 - 2012-05-06 19:11 - 00000000 ____D C:\Users\****\AppData\Roaming\WEB.DE
2013-09-19 03:20 - 2012-04-23 11:44 - 00000000 ____D C:\Users\****\Documents\ESM-Tools
2013-09-19 03:20 - 2012-04-23 11:43 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESM-Tools
2013-09-19 03:20 - 2012-04-01 14:27 - 00000000 ____D C:\Users\****\AppData\Roaming\vlc
2013-09-19 03:20 - 2012-04-01 11:38 - 00000000 ____D C:\Users\****\Documents\Beruf
2013-09-19 03:20 - 2012-03-26 20:24 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2013-09-19 03:20 - 2012-03-26 20:22 - 00000000 ____D C:\Users\****\Documents\Corel
2013-09-19 03:20 - 2012-03-26 16:51 - 00000000 ___SD C:\Users\****\Documents\Meine Datenquellen
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Mein Steuer-Sparbuch Heute
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Kontoauszüge
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Junge Union
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Hattrick Organizer
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Hattrick Logo
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Handy
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Facharbeit Alle Dateien
2013-09-19 03:20 - 2012-03-26 08:20 - 00000000 ____D C:\Users\****\Documents\Daten vom P1i
2013-09-19 03:20 - 2012-03-26 08:17 - 00000000 ____D C:\Users\****\Documents\CSU
2013-09-19 03:20 - 2012-03-26 08:17 - 00000000 ____D C:\Users\****\Documents\Blasmusikfreunde Eisenbach
2013-09-19 03:20 - 2012-03-26 08:16 - 00000000 ____D C:\Users\****\Documents\Bewerbung
2013-09-19 03:20 - 2012-03-26 08:16 - 00000000 ____D C:\Users\****\Documents\Barclaycard
2013-09-19 03:20 - 2012-03-26 08:16 - 00000000 ____D C:\Users\****\Documents\Auslandskrankenversicherung
2013-09-19 03:20 - 2012-03-26 08:15 - 00000000 ____D C:\Users\****\Documents\50. Geburtstag Gerald
2013-09-19 03:20 - 2012-03-25 22:48 - 00000000 ____D C:\Users\****\AppData\Roaming\Protector Suite
2013-09-19 03:20 - 2012-03-25 22:25 - 00000000 ____D C:\Users\****\AppData\Roaming\WinRAR
2013-09-19 03:20 - 2012-03-25 22:25 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-09-19 03:20 - 2012-03-25 22:16 - 00000000 ____D C:\Users\****\AppData\Roaming\Mozilla
2013-09-19 03:19 - 2013-05-16 22:04 - 00000000 ____D C:\Users\****\AppData\Roaming\bol
2013-09-19 03:19 - 2013-02-15 20:15 - 00000000 ____D C:\Users\****\AppData\Roaming\BOM
2013-09-19 03:19 - 2013-01-27 17:18 - 00000000 ____D C:\Users\****\AppData\Roaming\e-academy Inc
2013-09-19 03:19 - 2012-10-19 14:17 - 00000000 ____D C:\Users\****\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2013-09-19 03:19 - 2012-10-07 22:56 - 00000000 ____D C:\Users\****\AppData\Roaming\FRITZ!
2013-09-19 03:19 - 2012-09-22 23:37 - 00000000 ____D C:\Users\****\AppData\Roaming\HandBrake
2013-09-19 03:19 - 2012-09-22 23:34 - 00000000 ____D C:\Users\****\AppData\Roaming\Free iPad Video Converter
2013-09-19 03:19 - 2012-04-23 11:44 - 00000000 ____D C:\Users\****\AppData\Roaming\ESM-Tools
2013-09-19 03:19 - 2012-04-13 20:25 - 00000000 ____D C:\Users\****\AppData\Roaming\FileZilla
2013-09-19 03:19 - 2012-04-09 21:56 - 00000000 ____D C:\Users\****\AppData\Roaming\Ashampoo
2013-09-19 03:19 - 2012-04-01 10:47 - 00000000 ____D C:\Users\****\AppData\Roaming\Buhl Data Service
2013-09-19 03:19 - 2012-03-31 14:20 - 00000000 ____D C:\Users\****\AppData\Roaming\Apple Computer
2013-09-19 03:19 - 2012-03-26 21:33 - 00000000 ____D C:\Users\****\AppData\Roaming\Corel
2013-09-19 03:19 - 2012-03-26 20:24 - 00000000 ____D C:\Users\****\AppData\Roaming\IrfanView
2013-09-19 03:19 - 2012-03-26 20:22 - 00000000 ____D C:\Users\****\AppData\Roaming\Macromedia
2013-09-19 03:19 - 2012-03-25 22:29 - 00000000 ____D C:\Users\****\AppData\Roaming\InstallShield
2013-09-19 03:19 - 2012-03-25 22:11 - 00000000 ____D C:\Users\****\AppData\Roaming\Intel
2013-09-19 03:16 - 2013-09-06 08:49 - 00000000 ____D C:\Users\****\AppData\Roaming\17DB5932-922E-412B-B4F0-CDE14C9D6793
2013-09-19 03:16 - 2013-09-01 21:22 - 00000000 ____D C:\Users\****\AppData\Local\Ubisoft Game Launcher
2013-09-19 03:16 - 2013-05-20 18:15 - 00000000 ____D C:\Users\****\AppData\Local\Western_Digital_Technolog
2013-09-19 03:16 - 2013-01-29 01:10 - 00000000 ____D C:\Users\****\AppData\Local\Windows Live
2013-09-19 03:16 - 2012-12-26 13:41 - 00000000 ____D C:\Users\****\AppData\Local\My Games
2013-09-19 03:16 - 2012-12-02 17:10 - 00000000 ____D C:\Users\****\AppData\Local\MusE
2013-09-19 03:16 - 2012-11-02 23:15 - 00000000 ____D C:\Users\****\AppData\Local\Origin
2013-09-19 03:16 - 2012-09-06 17:54 - 00000000 ____D C:\Users\****\AppData\Roaming\Acronis
2013-09-19 03:16 - 2012-07-22 18:27 - 00000000 ____D C:\Users\****\AppData\Local\Quadriga Games
2013-09-19 03:16 - 2012-05-22 19:38 - 00000000 ____D C:\Users\****\AppData\Roaming\Amazon
2013-09-19 03:16 - 2012-04-23 13:50 - 00000000 ____D C:\Users\****\AppData\Local\PDF24
2013-09-19 03:16 - 2012-04-09 20:01 - 00000000 ____D C:\Users\****\AppData\Local\Western_Digital
2013-09-19 03:16 - 2012-04-09 20:00 - 00000000 ____D C:\Users\****\AppData\Local\Western Digital
2013-09-19 03:16 - 2012-03-25 23:12 - 00000000 ____D C:\Users\****\AppData\Roaming\Adobe
2013-09-19 03:16 - 2012-03-25 21:47 - 00000000 ____D C:\Users\****\AppData\Local\VirtualStore
2013-09-19 03:15 - 2013-09-05 12:56 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Samsung
2013-09-19 03:15 - 2013-04-28 12:59 - 00000000 ____D C:\Users\****\AppData\Local\e-academy Inc
2013-09-19 03:15 - 2013-03-22 19:57 - 00000000 ____D C:\Users\****\AppData\Local\Macromedia
2013-09-19 03:15 - 2013-02-14 12:09 - 00000000 ____D C:\Users\****\AppData\Local\Apps\2.0
2013-09-19 03:15 - 2012-12-02 20:35 - 00000000 ____D C:\Users\****\AppData\Local\gegl-0.2
2013-09-19 03:15 - 2012-12-02 20:35 - 00000000 ____D C:\Users\****\.gimp-2.8
2013-09-19 03:15 - 2012-11-13 00:21 - 00000000 ____D C:\Users\****\.pdfsam
2013-09-19 03:15 - 2012-10-11 15:40 - 00000000 ____D C:\Users\****\AppData\Local\Amazon
2013-09-19 03:15 - 2012-10-07 22:56 - 00000000 ____D C:\Users\****\AppData\Local\FRITZ!
2013-09-19 03:15 - 2012-10-04 22:58 - 00000000 ____D C:\Users\****\AppData\Local\Eraser 6
2013-09-19 03:15 - 2012-04-09 21:55 - 00000000 ____D C:\Users\****\AppData\Local\ashampoo
2013-09-19 03:15 - 2012-04-01 10:47 - 00000000 ____D C:\Users\****\AppData\Local\Buhl Data Service
2013-09-19 03:15 - 2012-04-01 10:25 - 00000000 ____D C:\Users\****\AppData\Local\Buhl
2013-09-19 03:15 - 2012-03-31 14:20 - 00000000 ____D C:\Users\****\AppData\Local\Apple Computer
2013-09-19 03:15 - 2012-03-31 14:18 - 00000000 ____D C:\Users\****\AppData\Local\Apple
2013-09-19 03:15 - 2012-03-25 23:12 - 00000000 ____D C:\Users\****\AppData\Local\Adobe
2013-09-19 03:15 - 2012-03-25 22:24 - 00000000 ____D C:\Users\****\AppData\Local\Microsoft Help
2013-09-19 03:15 - 2012-03-25 22:16 - 00000000 ____D C:\Users\****\AppData\Local\Mozilla
2013-09-19 03:00 - 2013-01-30 22:39 - 00000000 ____D C:\Windows\SysWOW64\spool
2013-09-19 03:00 - 2012-03-26 20:23 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2013-09-19 03:00 - 2012-03-26 20:22 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-09-19 03:00 - 2012-03-25 22:47 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-09-19 03:00 - 2012-03-25 22:26 - 00000000 ____D C:\Windows\SysWOW64\SDA
2013-09-19 03:00 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2013-09-19 02:59 - 2012-03-26 20:30 - 00000000 ____D C:\Windows\Samsung
2013-09-19 02:59 - 2012-03-26 20:22 - 00000000 ____D C:\Windows\system32\Macromed
2013-09-19 02:59 - 2012-03-25 22:47 - 00000000 ____D C:\Windows\system32\NV
2013-09-19 02:59 - 2011-04-12 09:54 - 00000000 ____D C:\Windows\ShellNew
2013-09-19 02:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-19 02:58 - 2013-01-29 01:15 - 00000000 ____D C:\Windows\de
2013-09-19 02:58 - 2012-08-23 17:05 - 00000000 ____D C:\Windows\CheckSur
2013-09-19 02:58 - 2012-07-22 18:18 - 00000000 ____D C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2013-09-19 02:58 - 2012-03-25 22:43 - 00000000 ____D C:\Windows\Downloaded Installations
2013-09-19 02:57 - 2013-01-30 22:20 - 00000000 ____D C:\Users\Public\Documents\Adobe PDF
2013-09-19 02:57 - 2012-10-02 18:25 - 00000000 ____D C:\Users\Gaeste
2013-09-19 02:57 - 2012-03-26 20:23 - 00000000 ____D C:\Users\Public\Documents\Corel
2013-09-19 02:56 - 2013-09-18 13:15 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-19 02:56 - 2013-09-03 13:37 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-19 02:56 - 2013-08-04 21:23 - 00000000 ____D C:\ProgramData\Skype
2013-09-19 02:56 - 2013-06-01 12:27 - 00000000 ____D C:\ProgramData\TerraTec
2013-09-19 02:56 - 2013-05-20 18:10 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-19 02:56 - 2013-01-29 01:13 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-09-19 02:56 - 2013-01-21 22:51 - 00000000 ____D C:\ProgramData\SlySoft
2013-09-19 02:56 - 2012-11-02 23:07 - 00000000 ____D C:\ProgramData\Origin
2013-09-19 02:56 - 2012-11-02 23:07 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-09-19 02:56 - 2012-10-28 17:53 - 00000000 ____D C:\Users\Admin
2013-09-19 02:56 - 2012-10-19 15:45 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-09-19 02:56 - 2012-09-06 17:53 - 00000000 ____D C:\ProgramData\Acronis
2013-09-19 02:56 - 2012-09-02 13:31 - 00000000 ____D C:\ProgramData\Sun
2013-09-19 02:56 - 2012-06-19 18:30 - 00000000 ____D C:\ProgramData\WebEx
2013-09-19 02:56 - 2012-05-20 21:09 - 00000000 ____D C:\ProgramData\Bitstream
2013-09-19 02:56 - 2012-05-06 19:11 - 00000000 ____D C:\ProgramData\WEB.DE
2013-09-19 02:56 - 2012-05-06 12:53 - 00000000 ____D C:\ProgramData\Mozilla
2013-09-19 02:56 - 2012-04-09 21:55 - 00000000 ____D C:\ProgramData\ashampoo
2013-09-19 02:56 - 2012-04-09 20:00 - 00000000 ____D C:\ProgramData\Western Digital
2013-09-19 02:56 - 2012-04-01 10:23 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH
2013-09-19 02:56 - 2012-04-01 10:23 - 00000000 ____D C:\Program Files (x86)\WISO
2013-09-19 02:56 - 2012-03-31 17:48 - 00000000 ___HD C:\ProgramData\CanonBJ
2013-09-19 02:56 - 2012-03-31 14:19 - 00000000 ____D C:\ProgramData\Apple Computer
2013-09-19 02:56 - 2012-03-31 14:19 - 00000000 ____D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2013-09-19 02:56 - 2012-03-31 14:17 - 00000000 ____D C:\ProgramData\Apple
2013-09-19 02:56 - 2012-03-26 21:33 - 00000000 ____D C:\ProgramData\Protexis
2013-09-19 02:56 - 2012-03-26 20:30 - 00000000 ____D C:\ProgramData\Samsung
2013-09-19 02:56 - 2012-03-25 23:27 - 00000000 ____D C:\ProgramData\Corel
2013-09-19 02:56 - 2012-03-25 23:08 - 00000000 ____D C:\ProgramData\Adobe
2013-09-19 02:56 - 2012-03-25 22:37 - 00000000 ____D C:\ProgramData\FLEXnet
2013-09-19 02:56 - 2012-03-25 22:36 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-19 02:56 - 2012-03-25 22:33 - 00000000 ____D C:\ProgramData\Creative
2013-09-19 02:56 - 2012-03-25 22:24 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-19 02:56 - 2012-03-25 22:10 - 00000000 ____D C:\ProgramData\Intel
2013-09-19 02:55 - 2013-09-01 21:22 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-09-19 02:55 - 2013-06-01 12:27 - 00000000 ____D C:\Program Files (x86)\TerraTec
2013-09-19 02:55 - 2013-05-20 18:12 - 00000000 ____D C:\Program Files (x86)\Western Digital
2013-09-19 02:55 - 2012-12-25 20:48 - 00000000 ____D C:\Program Files (x86)\Steam
2013-09-19 02:55 - 2012-09-30 13:38 - 00000000 ____D C:\Program Files (x86)\StreamTransport
2013-09-19 02:55 - 2012-09-02 20:42 - 00000000 ____D C:\Program Files (x86)\Tools&More
2013-09-19 02:55 - 2012-09-02 15:10 - 00000000 ____D C:\Program Files (x86)\Western Digital Corporation
2013-09-19 02:55 - 2012-05-06 19:11 - 00000000 ____D C:\Program Files (x86)\WEB.DE
2013-09-19 02:55 - 2012-04-01 14:27 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-09-19 02:55 - 2012-03-25 22:54 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-09-19 02:54 - 2013-09-18 13:14 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-09-19 02:54 - 2013-09-05 12:42 - 00000000 ____D C:\Program Files (x86)\Samsung Printers
2013-09-19 02:54 - 2013-08-04 21:23 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-09-19 02:54 - 2013-06-16 23:05 - 00000000 ____D C:\Program Files (x86)\Smart PC Solutions
2013-09-19 02:54 - 2013-03-07 19:21 - 00000000 ____D C:\Program Files (x86)\SonyEditor
2013-09-19 02:54 - 2012-12-28 15:44 - 00000000 ____D C:\Program Files (x86)\SlySoft
2013-09-19 02:54 - 2012-03-26 20:30 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate
2013-09-19 02:54 - 2012-03-26 20:30 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-09-19 02:54 - 2012-03-25 22:29 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-09-19 02:54 - 2012-03-25 22:27 - 00000000 ____D C:\Program Files (x86)\Renesas Electronics
2013-09-19 02:51 - 2012-11-13 00:16 - 00000000 ____D C:\Program Files (x86)\pdfsam
2013-09-19 02:51 - 2012-11-02 23:15 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-09-19 02:51 - 2012-07-22 18:08 - 00000000 ____D C:\Program Files (x86)\Quadriga Games
2013-09-19 02:51 - 2012-03-25 23:13 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-09-19 02:50 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-19 02:50 - 2013-09-03 13:37 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-19 02:50 - 2013-08-18 13:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-19 02:50 - 2013-06-26 19:17 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-19 02:50 - 2013-03-14 23:18 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-09-19 02:50 - 2012-12-02 17:10 - 00000000 ____D C:\Program Files (x86)\MuseScore
2013-09-19 02:50 - 2012-11-02 23:07 - 00000000 ____D C:\Program Files (x86)\Origin
2013-09-19 02:50 - 2012-09-10 19:25 - 00000000 ____D C:\Program Files (x86)\Mp3tag
2013-09-19 02:50 - 2012-05-06 12:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-19 02:50 - 2012-03-26 20:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 9.0
2013-09-19 02:50 - 2012-03-26 20:21 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2013-09-19 02:50 - 2012-03-25 22:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-09-19 02:50 - 2012-03-25 22:29 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-09-19 02:50 - 2012-03-25 22:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2013-09-19 02:50 - 2012-03-25 22:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-19 02:50 - 2012-03-25 22:00 - 00000000 ____D C:\Program Files (x86)\JMicron
2013-09-19 02:49 - 2013-06-16 22:26 - 00000000 ____D C:\Program Files (x86)\Convar
2013-09-19 02:49 - 2013-06-01 12:27 - 00000000 ____D C:\Program Files (x86)\Elgato
2013-09-19 02:49 - 2012-12-28 23:15 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client
2013-09-19 02:49 - 2012-12-20 13:45 - 00000000 ____D C:\Program Files (x86)\FreePDF_XP
2013-09-19 02:49 - 2012-09-14 18:31 - 00000000 ____D C:\Program Files (x86)\eXpress CheckSum Calculator
2013-09-19 02:49 - 2012-05-15 21:10 - 00000000 ____D C:\Program Files (x86)\eRightSoft
2013-09-19 02:49 - 2012-04-23 11:43 - 00000000 ____D C:\Program Files (x86)\ESM-Tools
2013-09-19 02:49 - 2012-03-26 20:24 - 00000000 ____D C:\Program Files (x86)\IrfanView
2013-09-19 02:49 - 2012-03-26 20:21 - 00000000 ____D C:\Program Files (x86)\gs
2013-09-19 02:49 - 2012-03-26 20:11 - 00000000 ____D C:\Program Files (x86)\Corel
2013-09-19 02:49 - 2012-03-25 22:32 - 00000000 ____D C:\Program Files (x86)\Creative
2013-09-19 02:49 - 2012-03-25 22:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-19 02:49 - 2012-03-25 22:27 - 00000000 ____D C:\Program Files (x86)\Hotkey
2013-09-19 02:49 - 2012-03-25 21:59 - 00000000 ____D C:\Program Files (x86)\Intel
2013-09-19 02:48 - 2013-02-15 20:15 - 00000000 ____D C:\Program Files (x86)\Biet-O-Matic
2013-09-19 02:48 - 2012-09-30 13:48 - 00000000 ____D C:\Program Files (x86)\AviSynth 2.5
2013-09-19 02:48 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-09-19 02:48 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-09-19 02:48 - 2012-05-22 19:37 - 00000000 ____D C:\Program Files (x86)\Amazon
2013-09-19 02:48 - 2012-04-09 21:55 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2013-09-19 02:48 - 2012-03-25 23:09 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-09-19 02:48 - 2012-03-25 22:30 - 00000000 ____D C:\Program Files (x86)\ChiconyCam
2013-09-19 02:48 - 2012-03-25 22:30 - 00000000 ____D C:\Program Files (x86)\BisonCam
2013-09-19 02:48 - 2012-03-25 22:10 - 00000000 ____D C:\Program Files (x86)\Cisco
2013-09-19 02:47 - 2012-09-06 17:53 - 00000000 ____D C:\Program Files (x86)\Acronis
2013-09-19 02:47 - 2012-03-25 22:25 - 00000000 ____D C:\Program Files\WinRAR
2013-09-19 02:45 - 2013-09-06 10:33 - 00000000 ____D C:\Program Files\Western Digital
2013-09-19 02:45 - 2012-10-21 17:54 - 00000000 ____D C:\Program Files\Recuva
2013-09-19 02:45 - 2012-03-25 22:43 - 00000000 ____D C:\Program Files\Protector Suite
2013-09-19 02:44 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-09-19 02:44 - 2013-03-14 23:18 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-09-19 02:44 - 2012-03-25 22:41 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-09-19 02:43 - 2013-09-05 12:56 - 00000000 ____D C:\Program Files\Common Files\Common Desktop Agent
2013-09-19 02:43 - 2013-09-03 13:37 - 00000000 ____D C:\Program Files\iTunes
2013-09-19 02:43 - 2013-09-03 13:37 - 00000000 ____D C:\Program Files\iPod
2013-09-19 02:43 - 2013-05-20 18:12 - 00000000 ____D C:\Program Files\Common Files\Western Digital
2013-09-19 02:43 - 2013-02-02 11:56 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-09-19 02:43 - 2012-09-22 23:37 - 00000000 ____D C:\Program Files\Handbrake
2013-09-19 02:43 - 2012-09-02 15:44 - 00000000 ____D C:\Program Files\A-FF Find and Mount
2013-09-19 02:43 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-09-19 02:43 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files\Bonjour
2013-09-19 02:43 - 2012-03-25 22:43 - 00000000 ____D C:\Program Files\Common Files\SPBA
2013-09-19 02:43 - 2012-03-25 22:25 - 00000000 ____D C:\Program Files\Microsoft Office
2013-09-19 02:43 - 2012-03-25 22:10 - 00000000 ____D C:\Program Files\Intel
2013-09-19 02:43 - 2012-03-25 22:10 - 00000000 ____D C:\Program Files\Common Files\Intel
2013-09-19 02:43 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Vorlagen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Startmenü
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Netzwerkumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Lokale Einstellungen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Eigene Dateien
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Druckumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Musik
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Bilder
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Verlauf
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Anwendungsdaten
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Anwendungsdaten
2013-09-19 02:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-09-19 02:39 - 2013-09-19 02:39 - 00001355 _____ C:\Windows\TSSysprep.log
2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf
2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf
2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____D C:\Program Files\AuthenTec
2013-09-19 02:39 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2013-09-19 02:38 - 2013-09-19 02:38 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-19 02:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files\Realtek
2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____D C:\Program Files\Synaptics
2013-09-19 01:54 - 2012-03-25 21:47 - 01939773 _____ C:\Windows\WindowsUpdate (1).log
2013-09-19 01:17 - 2013-09-19 00:51 - 00003376 _____ C:\Users\****\Desktop\Windows-Kompatibilitätsbericht.htm
2013-09-19 01:14 - 2013-09-19 00:43 - 00002544 _____ C:\Windows\diagwrn.xml
2013-09-19 01:14 - 2013-09-19 00:43 - 00001890 _____ C:\Windows\diagerr.xml
2013-09-18 22:06 - 2013-09-19 14:19 - 02850416 _____ C:\Users\****\Desktop\Sicherungskopie_von_flic.cdr
2013-09-18 21:55 - 2013-09-18 21:48 - 423572207 _____ C:\Users\****\Downloads\Windows6.1-KB947821-v28-x64.msu
2013-09-18 13:14 - 2013-09-18 13:14 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-09-18 13:12 - 2013-09-18 13:12 - 00614816 _____ C:\Users\****\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe
2013-09-17 13:36 - 2012-12-20 13:47 - 00000000 ____D C:\Users\****\AppData\Local\FreePDF_XP
2013-09-17 13:02 - 2013-09-17 13:01 - 00004338 _____ C:\Windows\System32\Tasks\LyriXeeker-1-updater
2013-09-17 13:01 - 2013-09-17 13:01 - 00004142 _____ C:\Windows\System32\Tasks\LyriXeeker-1-enabler
2013-09-17 13:00 - 2013-09-17 13:00 - 00004242 _____ C:\Windows\System32\Tasks\LyriXeeker-1-codedownloader
2013-09-17 12:59 - 2013-09-17 12:59 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\****\Downloads\jDownloaderWebInstaller09581.exe
2013-09-17 12:00 - 2013-09-17 11:48 - 71710551 _____ C:\Users\****\Downloads\DIBwe.rar
2013-09-16 20:59 - 2012-03-26 20:31 - 00000099 _____ C:\Users\Public\LMDebug.log
2013-09-16 16:30 - 2013-09-16 16:30 - 00003179 _____ C:\Users\****\Desktop\Secure Download Manager.lnk
2013-09-12 23:36 - 2013-09-12 22:43 - 00010089 _____ C:\Users\****\AppData\Roaming\Durch Trennzeichen getrennte Werte.CAL
2013-09-06 10:33 - 2012-03-25 22:10 - 00108534 _____ C:\Windows\DPINST.LOG
2013-09-06 08:50 - 2013-09-06 08:50 - 00367200 _____ (Acronis) C:\Windows\system32\Drivers\afcdp.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 01120032 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 00183224 _____ (Acronis) C:\Windows\system32\Drivers\tib_mounter.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 00161568 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vididr.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 00001205 _____ C:\Users\Public\Desktop\True Image 2013.lnk
2013-09-06 08:49 - 2012-10-23 18:28 - 01462560 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tdrpman.sys
2013-09-06 08:49 - 2012-10-23 17:45 - 00117024 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vidsflt.sys
2013-09-06 08:49 - 2012-10-23 17:44 - 00108832 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\fltsrv.sys
2013-09-06 08:49 - 2012-09-06 17:53 - 00233760 _____ (Acronis) C:\Windows\system32\Drivers\snapman.sys
2013-09-03 13:37 - 2013-09-03 13:37 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-09-02 13:01 - 2013-09-02 12:56 - 00000000 ____D C:\Windows\pss
2013-09-02 12:01 - 2012-07-22 18:19 - 00098951 _____ C:\Windows\DirectX.log
2013-09-02 12:00 - 2013-09-02 12:00 - 00002490 _____ C:\Users\Public\Desktop\Tom Clancy's Splinter Cell® Blacklist™.lnk
2013-09-01 21:22 - 2013-09-01 21:22 - 00001205 _____ C:\Users\****\Desktop\Uplay.lnk
2013-09-01 17:08 - 2013-09-19 13:59 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-22 17:48 - 2012-04-01 10:25 - 00000687 _____ C:\Windows\wiso.ini
2013-08-22 08:16 - 2013-08-22 08:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf

Some content of TEMP:
====================
C:\Users\****\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-19 04:49

==================== End Of Log ============================

Addition

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-09-2013 01
Ran by **** at 2013-09-20 23:24:18
Running from C:\Users\****\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Acronis True Image WD*Edition (x32 Version: 13.0.14189)
Adobe Acrobat 7.0 Professional - English, Français, Deutsch (x32 Version: 7.1.0)
Adobe Acrobat 7.1.0 Professional - English, Français, Deutsch (x32 Version: 7.1.0)
Adobe Bridge 1.0 (x32 Version: 001.000.001)
Adobe Common File Installer (x32 Version: 1.00.002)
Adobe Creative Suite 2 (x32)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Help Center 1.0 (x32 Version: 001.000.0002)
Adobe Illustrator CS2 (x32 Version: 12.000.000)
Adobe InCopy CS2 (x32 Version: 004.000.000)
Adobe InDesign CS2 (x32 Version: 004.000.000)
Adobe Photoshop CS2 (x32 Version: 9.0)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.4.634)
Adobe SVG Viewer 3.0 (x32 Version:  3.0)
Adobe Version Cue CS2 (x32 Version: 2.0)
Amazon Kindle (HKCU)
Amazon MP3-Downloader 1.0.9 (x32)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Ashampoo Burning Studio 2012 CBE v.11.0.4 (x32 Version: 11.0.4)
AttachmentsManager 1.8.5 (x32 Version: 1.8.5)
BisonCam (x32 Version: 9.2.1.71.34)
Bonjour (Version: 3.0.0.10)
ChangeNames 5.0.4 (x32 Version: 5.0.4)
ChiconyCam (x32 Version: 1.0.43.1129)
Cisco WebEx Meetings (HKCU)
Common Desktop Agent (Version: 1.62.0)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.0.686)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686)
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686)
CorelDRAW Graphics Suite X5 - BR (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Capture (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Common (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Connect (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Custom Data (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - DE (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Draw (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - EN (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - ES (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Extra Content (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Extra Content (x32)
CorelDRAW Graphics Suite X5 - Filters (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - FontNav (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - FR (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - IPM (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - IT (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - NL (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - PHOTO-PAINT (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Photozoom Plugin (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Redist (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Setup Files (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - VBA (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - VideoBrowser (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - VSTA (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - WT (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 (x32 Version: 15.3)
CorelDRAW(R) Graphics Suite X5 (x32 Version: 15.2.0.686)
CustomAnniversaries 2.1.14 (x32 Version: 2.1.14)
CustomBirthdays 2.1.14 (x32 Version: 2.1.14)
D3DX10 (x32 Version: 15.4.2368.0902)
Data Lifeguard Diagnostic for Windows 1.24 (x32)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
EditContacts 2.0.14 (x32 Version: 2.0.14)
Emergency 2013 (x32)
ESM-Installer (x32)
EyeTV Netstream for Windows Media Center (x32 Version: 1.01.00.16)
FileZilla Client 3.7.3 (x32 Version: 3.7.3)
Find and Mount 2.32 (Version: 2.32)
FormatNumbers 7.5.0 (x32 Version: 7.5.0)
Fotogalerie (x32 Version: 16.4.3505.0912)
FreePDF (Remove only) (x32)
FUSSBALL MANAGER 13 (x32 Version: 1.0.3.0)
Ghostscript GPL 8.64 (Msi Setup) (x32 Version: 8.64)
HandBrake 0.9.8 (x32 Version: 0.9.8)
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (x32 Version: 1)
Hotkey 3.3017 (x32 Version: 3.3017)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1118)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2932)
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.2.0000)
IrfanView (remove only) (x32 Version: 4.32)
iTunes (Version: 11.0.5.5)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
JMicron Ethernet Adapter NDIS Driver (x32 Version: 6.0.24.7)
JMicron Flash Media Controller Driver (x32 Version: 1.0.54.1)
LyriXeeker-1 (x32 Version: 1.28.153.3)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4.5
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4535.1004)
Microsoft Office Project MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Project Professional 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Visio 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Visio MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Project Professional 2010 (x32 Version: 14.0.7015.1000)
Microsoft Security Client (Version: 4.3.0215.0)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Security Essentials (Version: 4.3.215.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visio Premium 2010 (x32 Version: 14.0.7015.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (x32 Version: 9.0.30729)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Movie Maker (x32 Version: 16.4.3505.0912)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
Mp3tag v2.52 (x32 Version: v2.52)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MuseScore 1.2 MuseScore score typesetter (x32 Version: 1.2.0)
NVIDIA Grafiktreiber 310.90 (Version: 310.90)
NVIDIA Install Application (Version: 2.1002.95.599)
NVIDIA Optimus 1.11.3 (Version: 1.11.3)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Systemsteuerung 310.90 (Version: 310.90)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4535.1004)
Office 15 Click-to-Run Licensing Component (Version: 15.0.4535.1004)
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4535.1004)
Origin (x32 Version: 9.0.15.65)
PDF24 Creator 5.4.0 (x32)
pdfsam (HKCU Version: 2.2.1)
Photo Gallery (x32 Version: 16.4.3505.0912)
Protector Suite 2009 (Version: 5.9.3.6379)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6233)
Recuva (Version: 1.43)
RedMon - Redirection Port Monitor
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0)
Samsung Easy Printer Manager (x32 Version: 1.03.09.00(08.03.2013))
Samsung Easy Wireless Setup (x32 Version: 3.60.05)
Secure Download Manager (x32 Version: 3.1.10)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32)
SetIP (x32 Version: 1.04.01.00)
Sid Meier's Civilization V (x32)
SimCity™ (x32 Version: 1.0.0.0)
Skype™ 6.7 (x32 Version: 6.7.102)
Smart Data Recovery v4.3 (x32 Version: 4.3)
SonyEditor (remove only) (x32)
Spybot - Search & Destroy (x32 Version: 2.1.21)
Steam (x32 Version: 1.0.0.0)
StreamTransport version: 1.0.2.2171 (x32)
SUPER © v2012.build.51 (April 7, 2012) Version v2012.build.51 (x32 Version: v2012.build.51)
Synaptics Pointing Device Driver (Version: 15.0.8.0)
TeamViewer 8 (x32 Version: 8.0.20202)
TerraTec Home Cinema (x32 Version: 6.28.8)
THX TruStudio Pro (x32 Version: TAMB-CVS1D-1-LB R07)
Tom Clancy's Splinter Cell® Blacklist™ (x32 Version: 1.02)
True Image 2013 (x32 Version: 16.0.6514)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553157) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760758) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Uplay (x32 Version: 3.0)
Visual Basic for Applications (R) Core - English (x32 Version: 6.4.99.69)
Visual Basic for Applications (R) Core - German (x32 Version: 6.4.99.69)
Visual Basic for Applications (R) Core (x32 Version: 6.4.99.69)
VLC media player 2.0.1 (x32 Version: 2.0.1)
Wartung Samsung ML-2525W Series (x32)
WD Quick View (x32 Version: 2.2.0.8)
WD SmartWare (Version: 2.2.0.8)
WD SmartWare Installer (x32 Version: 2.2.0.8)
WEB.DE Club SmartFax (x32 Version: 2.00.223)
WebCam Installer (x32 Version: 3.32)
WebEx Schulungsmanager für Firefox oder Chrome (x32 Version: 5.29.3202)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)
WISO Steuer-Sparbuch 2013 (x32 Version: 20.00.8137)

==================== Restore Points  =========================

19-09-2013 01:50:47 Windows Update
19-09-2013 10:31:49 Windows Update
19-09-2013 11:20:18 Windows Update
19-09-2013 12:29:54 Windows Update
19-09-2013 12:33:52 Windows Update
20-09-2013 00:02:57 Windows Update
20-09-2013 08:27:29 Windows Update
20-09-2013 13:18:50 Windows Update
20-09-2013 16:50:17 Windows Update
20-09-2013 17:08:35 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-09-19 16:51 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {05799850-53E8-4FF7-984B-B704CB7D3AA1} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-07-22] (Microsoft Corporation)
Task: {0831465C-3ACB-4CC8-A28E-3BC22A8D065B} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {2FD72F9A-DD9F-419E-BFA5-0C51A0C6BAC9} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-21] (Microsoft Corporation)
Task: {39B24F8C-063B-463B-9993-496E6C1DB115} - System32\Tasks\LyriXeeker-1-updater => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe
Task: {4BC35937-9FBA-47E4-A711-3E76DF30D221} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-09-13] (Microsoft Corporation)
Task: {5A0D0AB1-3FE5-46DE-B8C7-B34FB26005C5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5DCF99EC-17A4-4A3F-A2CE-8C93F4E1C005} - System32\Tasks\LyriXeeker-1-firefoxinstaller => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe
Task: {69D1F12C-F8F9-473A-AE1D-6DFB8B1EDC6D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {7020F111-57EE-4ED1-9284-7363A7B2CF84} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {9405692F-6B83-4588-AFF7-C19AF4A6F59E} - System32\Tasks\LyriXeeker-1-enabler => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe
Task: {A1D60D55-A6B8-401B-BC05-2938E02DF2F2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe
Task: {A8E2441C-4128-421A-A19B-5882F581EE33} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {AEE3A20F-B242-4771-AB4B-3A8F21AC69C5} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation)
Task: {BB9BDF00-B058-4B1F-8412-CD087AE2DF14} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)
Task: {C4E8B14A-4159-4C58-BDAD-281DBBFC97E8} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => d:\program files\windows defender\MpCmdRun.exe
Task: {D0F8CAFA-D555-46A0-A0E4-F18D1B192200} - System32\Tasks\LyriXeeker-1-codedownloader => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe
Task: {FA4B8B2D-CCA2-45FD-948C-AE35EDBFB833} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {FCD0E786-5EF6-484D-AEA3-109B5CB90B08} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-09-13] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe
Task: C:\Windows\Tasks\LyriXeeker-1-enabler.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe
Task: C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe
Task: C:\Windows\Tasks\LyriXeeker-1-updater.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe

==================== Loaded Modules (whitelisted) =============

2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2013-03-27 22:39 - 2013-03-27 22:39 - 00021824 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\x64\ti_managers_proxy_stub.dll
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-12-14 02:42 - 2012-12-14 02:42 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2012-03-25 22:25 - 2012-02-17 20:55 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll
2012-04-01 10:02 - 2010-02-11 12:29 - 00396584 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2012-04-01 10:02 - 2010-02-11 12:29 - 00207144 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2012-12-14 02:42 - 2012-12-14 02:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-03-09 09:58 - 2012-03-09 09:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2011-07-27 20:07 - 2011-07-27 20:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2012-03-25 22:32 - 2010-11-12 12:38 - 00241152 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2013-06-01 12:27 - 2012-08-30 14:17 - 00021504 _____ (eMPIA Technology, Inc.) C:\Program Files (x86)\Common Files\TerraTec\Remote\BDADLL.dll
2010-06-25 10:38 - 2010-06-25 10:38 - 00218112 _____ (TODO: <公司名稱>) C:\Program Files (x86)\Hotkey\GetProductdll.dll
2010-08-20 10:15 - 2010-08-20 10:15 - 00220160 _____ (TODO: <公司名稱>) C:\Program Files (x86)\Hotkey\powerlife.dll
2009-06-06 14:50 - 2009-06-06 14:50 - 00019968 _____ () C:\Program Files (x86)\Hotkey\Audiodll.dll
2013-01-30 23:05 - 2006-01-12 22:20 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\acrotray.deu
2013-01-30 23:05 - 2006-01-12 22:13 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\acrotray.FRA
2013-01-10 13:43 - 2013-01-10 13:43 - 00014360 _____ () C:\Program Files (x86)\Common Files\Acronis\TibMounter\icudt38.dll
2005-04-06 17:53 - 2005-04-06 17:53 - 00425984 _____ (Adobe Systems Incorporated) c:\Adobe\Adobe Version Cue CS2\bin\AdobeUpdater.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 00053608 _____ (Open Source Software community project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-08-30 23:05 - 2011-08-30 23:05 - 00085864 _____ (Apple Inc.) C:\Windows\system32\dnssd.dll
2012-03-25 22:20 - 2012-03-25 22:20 - 00096904 _____ (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll
2012-03-25 23:13 - 2013-03-20 14:38 - 00057384 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\Settings.dll
2012-03-25 23:13 - 2013-03-20 14:38 - 00395304 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\NotifyIcon.dll
2012-03-25 23:13 - 2013-03-20 14:38 - 00047144 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\Language.dll
2012-03-25 23:13 - 2013-03-20 14:38 - 00382504 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\About.dll
2013-09-18 13:14 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-09-18 13:14 - 2013-05-16 10:55 - 03643800 _____ (Project JEDI) C:\Program Files (x86)\Spybot - Search & Destroy 2\Jcl150.bpl
2013-09-18 13:14 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2012-03-25 22:32 - 2010-11-01 17:34 - 00159744 _____ () C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\de-DE\THXAudio.resources.dll
2013-03-28 00:37 - 2013-03-28 00:37 - 13627872 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers.dll
2012-11-21 20:16 - 2013-08-07 11:42 - 00350560 _____ (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Resource_de.dll
2012-11-21 20:16 - 2013-08-07 11:42 - 03011936 _____ (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_StaticRes.dll
2012-11-21 20:16 - 2013-08-07 11:28 - 00095584 _____ (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.dll
2013-08-18 13:25 - 2013-08-18 13:25 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-09-11 12:47 - 2013-09-11 12:47 - 16177544 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll

==================== Alternate Data Streams (whitelisted) ==========



==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/20/2013 07:10:45 PM) (Source: Bonjour Service) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   22 103.0.168.192.in-addr.arpa. PTR ****-PC.local.

Error: (09/20/2013 07:10:45 PM) (Source: Bonjour Service) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.103:5353   24 103.0.168.192.in-addr.arpa. PTR ****-PC-2.local.

Error: (09/20/2013 07:10:45 PM) (Source: EyeTV Netstream) (User: )
Description: UPnpFindNetstreamDevices() FAILED

Error: (09/20/2013 07:10:45 PM) (Source: EyeTV Netstream) (User: )
Description: .NET EXCEPTION
System.Runtime.InteropServices.COMException (0x80070420): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80070420.
   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)

Error: (09/20/2013 07:10:42 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName1".
Die Einstellung "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName" ist nicht registriert.

Error: (09/20/2013 07:10:42 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/20/2013 07:10:37 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: CECPLFKT.exe, Version: 0.9.1.1030, Zeitstempel: 0x4aefec4e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1072
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00039393
ID des fehlerhaften Prozesses: 0x82c
Startzeit der fehlerhaften Anwendung: 0xCECPLFKT.exe0
Pfad der fehlerhaften Anwendung: CECPLFKT.exe1
Pfad des fehlerhaften Moduls: CECPLFKT.exe2
Berichtskennung: CECPLFKT.exe3

Error: (09/20/2013 06:59:46 PM) (Source: EyeTV Netstream) (User: )
Description: UPnpFindNetstreamDevices() FAILED

Error: (09/20/2013 06:59:46 PM) (Source: EyeTV Netstream) (User: )
Description: .NET EXCEPTION
System.Runtime.InteropServices.COMException (0x80070420): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80070420.
   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)

Error: (09/20/2013 06:59:45 PM) (Source: Bonjour Service) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   22 103.0.168.192.in-addr.arpa. PTR ****-PC.local.


System errors:
=============
Error: (09/20/2013 07:12:46 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (09/20/2013 07:12:46 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (09/20/2013 07:10:44 PM) (Source: Service Control Manager) (User: )
Description: Dienst "CECFLPKT" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/20/2013 07:10:42 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%14001

Error: (09/20/2013 07:01:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (09/20/2013 07:01:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (09/20/2013 06:59:47 PM) (Source: Service Control Manager) (User: )
Description: Dienst "CECFLPKT" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/20/2013 06:59:42 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%14001

Error: (09/20/2013 03:28:03 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2835361)

Error: (09/20/2013 03:28:03 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Update für Windows 7 für x64-basierte Systeme (KB2574819)


Microsoft Office Sessions:
=========================
Error: (09/20/2013 07:10:45 PM) (Source: Bonjour Service)(User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   22 103.0.168.192.in-addr.arpa. PTR ****-PC.local.

Error: (09/20/2013 07:10:45 PM) (Source: Bonjour Service)(User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.103:5353   24 103.0.168.192.in-addr.arpa. PTR ****-PC-2.local.

Error: (09/20/2013 07:10:45 PM) (Source: EyeTV Netstream)(User: )
Description: UPnpFindNetstreamDevices() FAILED

Error: (09/20/2013 07:10:45 PM) (Source: EyeTV Netstream)(User: )
Description: .NET EXCEPTION
System.Runtime.InteropServices.COMException (0x80070420): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80070420.
   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)

Error: (09/20/2013 07:10:42 PM) (Source: SideBySide)(User: )
Description: hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayNameC:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

Error: (09/20/2013 07:10:42 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/20/2013 07:10:37 PM) (Source: Application Error)(User: )
Description: CECPLFKT.exe0.9.1.10304aefec4entdll.dll6.1.7601.1822951fb1072c00000050003939382c01ceb6244aa0e9a8C:\Program Files (x86)\ChiconyCam\CECPLFKT.exeC:\Windows\SysWOW64\ntdll.dll915e5234-2217-11e3-9fa1-0090f5bcd228

Error: (09/20/2013 06:59:46 PM) (Source: EyeTV Netstream)(User: )
Description: UPnpFindNetstreamDevices() FAILED

Error: (09/20/2013 06:59:46 PM) (Source: EyeTV Netstream)(User: )
Description: .NET EXCEPTION
System.Runtime.InteropServices.COMException (0x80070420): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80070420.
   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)

Error: (09/20/2013 06:59:45 PM) (Source: Bonjour Service)(User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   22 103.0.168.192.in-addr.arpa. PTR ****-PC.local.


CodeIntegrity Errors:
===================================
  Date: 2013-09-20 19:10:09.082
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-20 19:10:09.051
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-20 19:10:09.020
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-20 19:10:08.989
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-20 19:10:08.958
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-20 19:10:08.926
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-20 18:59:02.142
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-20 18:59:02.110
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-20 18:59:02.079
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-20 18:59:02.032
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 38%
Total physical RAM: 8099.07 MB
Available physical RAM: 4951.09 MB
Total Pagefile: 16196.32 MB
Available Pagefile: 13063.64 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:457.85 GB) (Free:238.65 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 7C4C6991)
Partition 1: (Not Active) - (Size=8 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=458 GB) - (Type=07 NTFS)

==================== End Of Log ============================

System Look

Code:

ATTFilter

SystemLook 30.07.11 by jpshortstuff
Log created at 23:26 on 20/09/2013 by ****
Administrator - Elevation successful

========== filefind ==========

Searching for "*LyriXeeker*"
C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-bg.exe	--a---- 738304 bytes	[11:00 17/09/2013]	[11:00 17/09/2013] 29ED5B105CF788506E1CB25431A61008
C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-bho.dll	--a---- 598528 bytes	[11:00 17/09/2013]	[11:00 17/09/2013] BB212B74376AF866427E7F7348F3C3BD
C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-bho64.dll	--a---- 940544 bytes	[11:00 17/09/2013]	[11:00 17/09/2013] 1A8B331FCC6736A13BE3C83244BD3915
C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-buttonutil.dll	--a---- 400896 bytes	[11:00 17/09/2013]	[11:00 17/09/2013] 8F813EFE26CE98A73FF658D91571CE9C
C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-buttonutil.exe	--a---- 338944 bytes	[11:00 17/09/2013]	[11:00 17/09/2013] F794FD3ABD8CD4A5E759D0D4B004BCDD
C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-buttonutil64.dll	--a---- 486912 bytes	[11:00 17/09/2013]	[11:00 17/09/2013] 22B30ECF828063F4536080EF6CFB2DE1
C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-buttonutil64.exe	--a---- 443392 bytes	[11:00 17/09/2013]	[11:00 17/09/2013] 54C3C68D397FB14B337D38F4E222F478
C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-helper.exe	--a---- 311296 bytes	[11:00 17/09/2013]	[11:00 17/09/2013] 962B6F981655F1920DACE37DFCE61DC8
C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1.ico	--a---- 9662 bytes	[20:12 12/09/2013]	[20:12 12/09/2013] CCB861E826B3577700DC7463F1D93E2D
C:\Windows\System32\Tasks\LyriXeeker-1-codedownloader	--a---- 4242 bytes	[11:00 17/09/2013]	[11:00 17/09/2013] EA6D70E69E84E0478666D050F2B2419E
C:\Windows\System32\Tasks\LyriXeeker-1-enabler	--a---- 4142 bytes	[11:01 17/09/2013]	[11:01 17/09/2013] 1DDA77C6C31DB39E07628FFAA0897F3C
C:\Windows\System32\Tasks\LyriXeeker-1-firefoxinstaller	--a---- 4876 bytes	[11:00 17/09/2013]	[11:00 17/09/2013] 59DFB4A4E5EB7F75AE13809CFA632781
C:\Windows\System32\Tasks\LyriXeeker-1-updater	--a---- 4338 bytes	[11:01 17/09/2013]	[11:02 17/09/2013] CA59265DD252C04E487ABFB947C392E1
C:\Windows\Tasks\LyriXeeker-1-codedownloader.job	--a---- 1212 bytes	[11:00 17/09/2013]	[21:18 20/09/2013] F315CEB1B2E9256D14867D4A080CD71D
C:\Windows\Tasks\LyriXeeker-1-enabler.job	--a---- 1112 bytes	[11:00 17/09/2013]	[21:18 20/09/2013] BA0E875994804187343732B1BE0A82C7
C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job	--a---- 1846 bytes	[11:00 17/09/2013]	[21:18 20/09/2013] 96733892E5328D8CDC9A731D4E866609
C:\Windows\Tasks\LyriXeeker-1-updater.job	--a---- 1308 bytes	[11:01 17/09/2013]	[21:18 20/09/2013] E1C3FD39D03BD2542A073225CC4AB3CF

========== folderfind ==========

Searching for "*LyriXeeker*"
C:\Program Files (x86)\LyriXeeker-1	d------	[11:00 17/09/2013]

========== regfind ==========

Searching for "LyriXeeker"
[HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker-1]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker-1\Manifest]
"Description"="LyriXeeker will allow you to display lyrics for your favorite songs alongside any Youtube music video"
[HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker-1\Manifest]
"Name"="LyriXeeker-1"
[HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Common\Internet]
"UseRWHlinkNavigation"="http://www.trojaner-board.de/141830-...new-post.html"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422182256}\InprocServer32]
@="C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-bho64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{39B24F8C-063B-463B-9993-496E6C1DB115}]
"Path"="\LyriXeeker-1-updater"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5DCF99EC-17A4-4A3F-A2CE-8C93F4E1C005}]
"Path"="\LyriXeeker-1-firefoxinstaller"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9405692F-6B83-4588-AFF7-C19AF4A6F59E}]
"Path"="\LyriXeeker-1-enabler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D0F8CAFA-D555-46A0-A0E4-F18D1B192200}]
"Path"="\LyriXeeker-1-codedownloader"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-codedownloader]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-enabler]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-firefoxinstaller]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-updater]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LyriXeeker-1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{090bb045-13a7-447c-b78e-30b1ddb41389}]
"AppName"="LyriXeeker-1-buttonutil64.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{090bb045-13a7-447c-b78e-30b1ddb41389}]
"AppPath"="C:\Program Files (x86)\LyriXeeker-1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2fa47400-045a-4ff8-81a2-377f157a4e5a}]
"AppName"="LyriXeeker-1-codedownloader.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2fa47400-045a-4ff8-81a2-377f157a4e5a}]
"AppPath"="C:\Program Files (x86)\LyriXeeker-1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37237a65-5777-43f2-ba9b-339de5a29d22}]
"AppName"="LyriXeeker-1-bg.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37237a65-5777-43f2-ba9b-339de5a29d22}]
"AppPath"="C:\Program Files (x86)\LyriXeeker-1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4b7fb8aa-25e0-4a1d-ba79-f77e674dd6a2}]
"AppName"="LyriXeeker-1-helper.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4b7fb8aa-25e0-4a1d-ba79-f77e674dd6a2}]
"AppPath"="C:\Program Files (x86)\LyriXeeker-1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90b3c11d-5652-4b5a-886b-9e20a42dbadc}]
"AppName"="LyriXeeker-1-buttonutil.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90b3c11d-5652-4b5a-886b-9e20a42dbadc}]
"AppPath"="C:\Program Files (x86)\LyriXeeker-1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASMANCS]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASMANCS]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1]
"DisplayIcon"="C:\Program Files (x86)\LyriXeeker-1\utils.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1]
"DisplayName"="LyriXeeker-1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1]
"UninstallString"="C:\Program Files (x86)\LyriXeeker-1\Uninstall.exe /fromcontrolpanel=1"
[HKEY_USERS\S-1-5-21-1546768945-1265243594-1503920770-1000\Software\AppDataLow\Software\LyriXeeker-1]
[HKEY_USERS\S-1-5-21-1546768945-1265243594-1503920770-1000\Software\AppDataLow\Software\LyriXeeker-1\Manifest]
"Description"="LyriXeeker will allow you to display lyrics for your favorite songs alongside any Youtube music video"
[HKEY_USERS\S-1-5-21-1546768945-1265243594-1503920770-1000\Software\AppDataLow\Software\LyriXeeker-1\Manifest]
"Name"="LyriXeeker-1"
[HKEY_USERS\S-1-5-21-1546768945-1265243594-1503920770-1000\Software\Microsoft\Office\15.0\Common\Internet]
"UseRWHlinkNavigation"="http://www.trojaner-board.de/141830-...new-post.html"

-= EOF =-

Kurze ergänzende Anmerkung:

An der im 1. Post geschilderten Symptomatik (Spam-Links und leere Fenster mit Adressen, wie hxxp://ici.resynccdn.net/sd/wrap-0.01.html?u=http%3A%2F%2Fici.resynccdn.net%2Fsd%2Fapps%2Ffusionx%2F0.0.3.html%3Faff%3D1060-2028) hat sich bisher nichts geändert.

M-K-D-B · 21.09.2013, 11:28

Servus,

Zitat:

Zitat von e.rico

An der im 1. Post geschilderten Symptomatik (Spam-Links und leere Fenster mit Adressen, wie hxxp://ici.resynccdn.net/sd/wrap-0.01.html?u=http%3A%2F%2Fici.resynccdn.net%2Fsd%2Fapps%2Ffusionx%2F0.0.3.html%3Faff%3D1060-2028) hat sich bisher nichts geändert.

Dachte ich mir schon, ist eine neue Adware, wir entfernen sie jetzt.

Ganz wichtig:
Du hast deinen Benutzernamen durch "****" unkenntlich gemacht.
Ersetze die "****" durch den richtigen Namen, sonst wird der Fix nicht funktionieren!

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

start
FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com
C:\Windows\Tasks\LyriXeeker-1-updater.job
C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job
C:\Windows\Tasks\LyriXeeker-1-codedownloader.job
C:\Windows\Tasks\LyriXeeker-1-enabler.job
Task: {39B24F8C-063B-463B-9993-496E6C1DB115} - System32\Tasks\LyriXeeker-1-updater => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe
C:\Program Files (x86)\LyriXeeker-1
Task: {5DCF99EC-17A4-4A3F-A2CE-8C93F4E1C005} - System32\Tasks\LyriXeeker-1-firefoxinstaller => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe
Task: {9405692F-6B83-4588-AFF7-C19AF4A6F59E} - System32\Tasks\LyriXeeker-1-enabler => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe
Task: {D0F8CAFA-D555-46A0-A0E4-F18D1B192200} - System32\Tasks\LyriXeeker-1-codedownloader => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe
Task: C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe
Task: C:\Windows\Tasks\LyriXeeker-1-enabler.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe
Task: C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe
Task: C:\Windows\Tasks\LyriXeeker-1-updater.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe
Reg: reg delete "HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker-1" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422182256}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LyriXeeker-1" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{090bb045-13a7-447c-b78e-30b1ddb41389}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2fa47400-045a-4ff8-81a2-377f157a4e5a}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37237a65-5777-43f2-ba9b-339de5a29d22}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4b7fb8aa-25e0-4a1d-ba79-f77e674dd6a2}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90b3c11d-5652-4b5a-886b-9e20a42dbadc}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASAPI32" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASMANCS" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASAPI32" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASMANCS" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1" /f
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Wenn FRST deinen Rechner beim Fix nicht automatisch neu gestartet hat, so starte deinen Rechner jetzt per Hand neu!

Schritt 3
Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden wieder zwei Logdateien erzeugt. Poste mir diese.

Gibt es noch Probleme mit LyriXeeker in einem Browser? Wenn ja, welche?

Bitte poste mit deiner nächsten Antwort

die Logdatei des FRST-Fix,
die beiden neuen Logdateien von FRST nach dem Neustart,
die Beantwortung der gestellten Fragen.

e.rico · 21.09.2013, 12:07

Hallo Matthias,

danke. Hier die gewünschten Logfiles.

FRST-Fix

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-09-2013
Ran by **** at 2013-09-21 12:54:07 Run:1
Running from C:\Users\****\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com
C:\Windows\Tasks\LyriXeeker-1-updater.job
C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job
C:\Windows\Tasks\LyriXeeker-1-codedownloader.job
C:\Windows\Tasks\LyriXeeker-1-enabler.job
Task: {39B24F8C-063B-463B-9993-496E6C1DB115} - System32\Tasks\LyriXeeker-1-updater => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe
C:\Program Files (x86)\LyriXeeker-1
Task: {5DCF99EC-17A4-4A3F-A2CE-8C93F4E1C005} - System32\Tasks\LyriXeeker-1-firefoxinstaller => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe
Task: {9405692F-6B83-4588-AFF7-C19AF4A6F59E} - System32\Tasks\LyriXeeker-1-enabler => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe
Task: {D0F8CAFA-D555-46A0-A0E4-F18D1B192200} - System32\Tasks\LyriXeeker-1-codedownloader => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe
Task: C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe
Task: C:\Windows\Tasks\LyriXeeker-1-enabler.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe
Task: C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe
Task: C:\Windows\Tasks\LyriXeeker-1-updater.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe
Reg: reg delete "HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker-1" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422182256}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LyriXeeker-1" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{090bb045-13a7-447c-b78e-30b1ddb41389}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2fa47400-045a-4ff8-81a2-377f157a4e5a}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37237a65-5777-43f2-ba9b-339de5a29d22}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4b7fb8aa-25e0-4a1d-ba79-f77e674dd6a2}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90b3c11d-5652-4b5a-886b-9e20a42dbadc}" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASAPI32" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASMANCS" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASAPI32" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASMANCS" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1" /f
end
*****************

C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com => Moved successfully.
C:\Windows\Tasks\LyriXeeker-1-updater.job => Moved successfully.
C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => Moved successfully.
C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => Moved successfully.
C:\Windows\Tasks\LyriXeeker-1-enabler.job => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{39B24F8C-063B-463B-9993-496E6C1DB115} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{39B24F8C-063B-463B-9993-496E6C1DB115} => Key deleted successfully.
C:\Windows\System32\Tasks\LyriXeeker-1-updater => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-updater => Key deleted successfully.
C:\Program Files (x86)\LyriXeeker-1 => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5DCF99EC-17A4-4A3F-A2CE-8C93F4E1C005} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5DCF99EC-17A4-4A3F-A2CE-8C93F4E1C005} => Key deleted successfully.
C:\Windows\System32\Tasks\LyriXeeker-1-firefoxinstaller => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-firefoxinstaller => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9405692F-6B83-4588-AFF7-C19AF4A6F59E} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9405692F-6B83-4588-AFF7-C19AF4A6F59E} => Key deleted successfully.
C:\Windows\System32\Tasks\LyriXeeker-1-enabler => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-enabler => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D0F8CAFA-D555-46A0-A0E4-F18D1B192200} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D0F8CAFA-D555-46A0-A0E4-F18D1B192200} => Key deleted successfully.
C:\Windows\System32\Tasks\LyriXeeker-1-codedownloader => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-codedownloader => Key deleted successfully.
C:\Windows\Tasks\LyriXeeker-1-codedownloader.job not found.
C:\Windows\Tasks\LyriXeeker-1-enabler.job not found.
C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job not found.
C:\Windows\Tasks\LyriXeeker-1-updater.job not found.

========= reg delete "HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker-1" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422182256}" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LyriXeeker-1" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{090bb045-13a7-447c-b78e-30b1ddb41389}" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2fa47400-045a-4ff8-81a2-377f157a4e5a}" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37237a65-5777-43f2-ba9b-339de5a29d22}" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4b7fb8aa-25e0-4a1d-ba79-f77e674dd6a2}" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90b3c11d-5652-4b5a-886b-9e20a42dbadc}" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASAPI32" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASMANCS" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASAPI32" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASMANCS" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1" /f =========

Der Vorgang wurde erfolgreich beendet.



========= End of Reg: =========


==== End of Fixlog ====

FRST (Teil 1)

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-09-2013
Ran by **** (administrator) on ****-PC on 21-09-2013 13:01:22
Running from C:\Users\****\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Adobe Systems Incorporated) c:\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Chicony) C:\Program Files (x86)\ChiconyCam\CECAPLF.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(UPEK Inc.) C:\Program Files\Protector Suite\psqltray.exe
(TerraTec Electronic GmbH) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\Acrobat_sl.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Elgato Systems GmbH) C:\Program Files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe
() C:\Program Files (x86)\Hotkey\Hotkey.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\acrotray.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Adobe Sytems Incorporated) C:\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
() c:\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-02-11] (Synaptics Incorporated)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11544680 2012-03-25] (Realtek Semiconductor)
HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [517912 2013-02-15] (Acronis)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
HKLM\...\Run: [CECAPLF] - C:\Program Files (x86)\ChiconyCam\CECAPLF.exe [121456 2010-09-17] (Chicony)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-27] (Intel(R) Corporation)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-06-20] (Microsoft Corporation)
HKLM\...\Run: [PSQLLauncher] - c:\Program Files\Protector Suite\launcher.exe [84744 2010-04-27] (UPEK Inc.)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: c:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)
HKCU\...\Run: [Remote Control Editor] - C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1839616 2013-04-15] (TerraTec Electronic GmbH)
HKCU\...\Run: [updateMgr] - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe [313472 2006-03-30] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [Acrobat Assistant 7.0] - C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328 2008-04-23] (Adobe Systems Inc.)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1105848 2013-01-10] (Acronis)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Version Cue CS2] - c:\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2012-03-25] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH)
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [688128 2011-07-06] ()
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6405376 2013-03-28] (Acronis)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [WD Quick View] - C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5537136 2013-08-14] (Western Digital Technologies, Inc.)
HKU\UpdatusUser\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516096 2010-11-21] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [246024 2012-12-29] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli c:\Program Files\Protector Suite\psqlpwd.dll

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?ocid=OIE9MSE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xBD07CED6C30ACD01
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\THCDeskBand.dll (TerraTec Electronic GmbH)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default
FF Homepage: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\{ce7e73df-6a44-4028-8079-5927a588c948}.xpi
FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-30] (Adobe Systems)
R2 Adobe Version Cue CS2; c:\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)
S2 CECFLPKT; C:\Program Files (x86)\ChiconyCam\CECPLFKT.exe [84592 2010-09-09] (Chicony Electronics Co., Ltd.)
R2 EyeTV Netstream; C:\Program Files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe [399944 2012-02-10] (Elgato Systems GmbH)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-06-20] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-27] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-06-20] (Microsoft Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1901752 2013-07-22] (Microsoft Corporation)
R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [32768 2010-11-18] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2013-08-14] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [270704 2013-08-14] (Western Digital Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
S3 SliceDisk5; C:\Program Files\A-FF Find and Mount\slicedisk-x64.sys [31824 2011-02-25] (Atola)
S3 SliceDisk5; C:\Program Files\A-FF Find and Mount\slicedisk-x64.sys [31824 2011-02-25] (Atola)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2013-09-06] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2013-09-06] (Acronis)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2013-09-06] (Acronis International GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-21 12:53 - 2013-09-21 12:53 - 01956670 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe
2013-09-20 23:26 - 2013-09-20 23:27 - 00016514 _____ C:\Users\****\Desktop\SystemLook.txt
2013-09-20 23:26 - 2013-09-20 23:26 - 00165376 _____ C:\Users\****\Desktop\SystemLook_x64.exe
2013-09-20 23:24 - 2013-09-20 23:26 - 00035577 _____ C:\Users\****\Desktop\Addition_alt1.txt
2013-09-20 23:24 - 2013-09-20 23:25 - 00153316 _____ C:\Users\****\Desktop\FRST_alt1.txt
2013-09-20 23:04 - 2013-04-17 09:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-09-20 23:04 - 2013-04-17 08:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-20 18:52 - 2013-09-20 18:52 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-20 18:52 - 2013-09-20 18:52 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-09-20 18:52 - 2013-09-20 18:52 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-09-20 18:52 - 2013-09-20 18:52 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-09-20 18:52 - 2013-09-20 18:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-09-20 18:52 - 2013-09-20 18:52 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-09-20 18:52 - 2013-09-20 18:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-09-20 10:46 - 2013-09-21 12:56 - 00042624 _____ C:\Windows\setupact.log
2013-09-20 10:46 - 2013-09-20 10:46 - 00000000 _____ C:\Windows\setuperr.log
2013-09-20 01:48 - 2011-03-25 05:29 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-09-20 01:48 - 2011-03-25 05:29 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-09-20 01:48 - 2011-03-25 05:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-09-20 01:48 - 2011-03-25 05:29 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-09-20 01:48 - 2011-03-25 05:29 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-09-20 01:48 - 2011-03-25 05:29 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-09-20 01:48 - 2011-03-25 05:28 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-09-20 01:48 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2013-09-20 01:48 - 2011-03-11 08:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2013-09-20 01:48 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2013-09-20 01:48 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2013-09-20 01:48 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2013-09-20 01:48 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2013-09-20 01:48 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2013-09-20 01:48 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2013-09-20 01:48 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2013-09-20 01:48 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2013-09-20 01:48 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2013-09-20 01:45 - 2013-09-20 01:45 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Users\****\AppData\Roaming\Malwarebytes
2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-20 01:45 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-20 01:44 - 2013-09-20 01:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\****\Desktop\mbam-setup-1.75.0.1300.exe
2013-09-20 01:43 - 2013-09-20 01:43 - 00002403 _____ C:\Users\****\Desktop\JRT.txt
2013-09-20 01:37 - 2013-09-20 01:37 - 01029675 _____ (Thisisu) C:\Users\****\Desktop\JRT.exe
2013-09-20 01:37 - 2013-09-20 01:37 - 00000000 ____D C:\Windows\ERUNT
2013-09-20 01:34 - 2013-09-20 01:34 - 00002861 _____ C:\Users\****\Desktop\AdwCleaner[S0].txt
2013-09-20 01:31 - 2013-09-20 01:31 - 00000000 ____D C:\AdwCleaner
2013-09-20 01:30 - 2013-09-20 01:30 - 01039554 _____ C:\Users\****\Desktop\adwcleaner.exe
2013-09-19 17:55 - 2013-09-20 10:31 - 00000000 ____D C:\Windows\Minidump
2013-09-19 17:08 - 2013-09-19 17:11 - 00033957 _____ C:\Users\****\Desktop\ComboFix.txt
2013-09-19 16:39 - 2013-09-19 17:09 - 00000000 ____D C:\Qoobox
2013-09-19 16:39 - 2013-09-19 17:03 - 00000000 ____D C:\Windows\erdnt
2013-09-19 16:39 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-19 16:39 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-19 16:39 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-19 16:39 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-19 16:39 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-19 16:39 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-19 16:39 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-19 16:39 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-19 16:37 - 2013-09-19 16:37 - 05128554 ____R (Swearware) C:\Users\****\Desktop\ComboFix.exe
2013-09-19 16:29 - 2013-09-19 16:29 - 00032900 _____ C:\Users\****\Desktop\logfiles.zip
2013-09-19 14:56 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-09-19 14:56 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-09-19 14:54 - 2013-09-19 14:58 - 00012112 _____ C:\Users\****\Desktop\Gmer.txt
2013-09-19 14:45 - 2013-09-19 14:58 - 00142885 _____ C:\Users\****\Desktop\FRST_alt.txt
2013-09-19 14:44 - 2013-09-19 14:55 - 00039322 _____ C:\Users\****\Desktop\Addition_alt.txt
2013-09-19 14:43 - 2013-09-19 14:43 - 00000000 ____D C:\FRST
2013-09-19 14:42 - 2013-09-19 14:54 - 00000474 _____ C:\Users\****\Desktop\defogger_disable.log
2013-09-19 14:42 - 2013-09-19 14:42 - 00000000 _____ C:\Users\****\defogger_reenable
2013-09-19 14:41 - 2013-09-19 14:41 - 00377856 _____ C:\Users\****\Desktop\5txgbuj5.exe
2013-09-19 14:41 - 2013-09-19 14:41 - 00050477 _____ C:\Users\****\Desktop\Defogger.exe
2013-09-19 14:34 - 2013-01-13 23:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-09-19 14:34 - 2013-01-13 22:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-09-19 14:34 - 2013-01-13 22:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-09-19 14:34 - 2013-01-13 22:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-09-19 14:34 - 2013-01-13 22:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-09-19 14:34 - 2013-01-13 21:58 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-09-19 14:34 - 2013-01-13 21:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-09-19 14:34 - 2013-01-13 21:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-09-19 14:34 - 2013-01-13 21:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-09-19 14:34 - 2013-01-13 21:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-09-19 14:34 - 2013-01-13 21:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-09-19 14:34 - 2013-01-13 21:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-09-19 14:34 - 2013-01-13 21:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-09-19 14:34 - 2013-01-13 21:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-09-19 14:34 - 2013-01-13 21:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-09-19 14:34 - 2013-01-13 21:37 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-09-19 14:34 - 2013-01-13 21:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-09-19 14:34 - 2013-01-13 21:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-09-19 14:34 - 2013-01-13 21:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-09-19 14:34 - 2013-01-13 21:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-09-19 14:34 - 2013-01-13 21:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-09-19 14:34 - 2013-01-13 21:10 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-09-19 14:34 - 2013-01-13 21:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-09-19 14:34 - 2013-01-13 20:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-09-19 14:34 - 2013-01-13 20:32 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-09-19 14:34 - 2013-01-13 20:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-09-19 14:34 - 2013-01-13 19:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-09-19 14:34 - 2013-01-13 19:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-09-19 14:34 - 2013-01-04 08:11 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-09-19 14:34 - 2013-01-04 08:11 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-09-19 14:33 - 2012-08-24 20:13 - 00154480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-09-19 14:33 - 2012-08-24 20:09 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-09-19 14:33 - 2012-08-24 20:05 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-09-19 14:33 - 2012-08-24 20:03 - 01448448 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-09-19 14:33 - 2012-08-24 18:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-09-19 14:33 - 2012-08-24 18:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-09-19 14:33 - 2012-08-24 18:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-09-19 14:19 - 2013-09-18 22:06 - 02850416 _____ C:\Users\****\Desktop\Sicherungskopie_von_flic.cdr
2013-09-19 13:59 - 2013-09-01 17:08 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-19 13:51 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-09-19 13:51 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-09-19 13:51 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-09-19 13:51 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-09-19 13:48 - 2013-09-19 13:48 - 00000134 _____ C:\Users\****\Desktop\Internet Explorer-Problembehebung.url
2013-09-19 13:39 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2013-09-19 13:27 - 2012-12-16 19:11 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-09-19 13:27 - 2012-12-16 16:45 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-09-19 13:27 - 2012-12-16 16:13 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-09-19 13:27 - 2012-12-16 16:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-09-19 13:27 - 2010-09-30 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-09-19 13:27 - 2010-09-30 08:47 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-09-19 13:26 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-09-19 13:26 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-09-19 13:26 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-09-19 13:26 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-09-19 13:26 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-09-19 13:26 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-09-19 13:26 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-09-19 13:26 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-09-19 13:23 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2013-09-19 13:23 - 2012-03-01 08:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-09-19 13:23 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2013-09-19 13:23 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-09-19 13:23 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2013-09-19 13:19 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-19 13:19 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-19 13:19 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-19 13:19 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-19 13:19 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-19 13:19 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-19 13:19 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-19 13:19 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-19 13:19 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-19 13:19 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-19 13:19 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-19 13:19 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-19 13:19 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-19 13:19 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-19 13:19 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-19 13:19 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-19 13:19 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-19 13:19 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-19 13:19 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-19 13:19 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-19 13:19 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-19 13:19 - 2013-02-27 08:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-09-19 13:19 - 2013-02-27 07:48 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-09-19 13:19 - 2013-02-27 07:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2013-09-19 13:19 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-09-19 13:18 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-09-19 13:18 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-09-19 13:18 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-09-19 13:18 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-09-19 13:18 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-09-19 13:18 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-09-19 13:18 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-09-19 13:18 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-09-19 13:18 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-09-19 13:18 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-09-19 13:18 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-09-19 13:18 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-09-19 13:18 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-09-19 13:18 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-09-19 13:18 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-09-19 13:18 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls
2013-09-19 13:18 - 2012-11-30 01:15 - 00420064 _____ C:\Windows\system32\locale.nls
2013-09-19 13:18 - 2012-10-03 19:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2013-09-19 13:18 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2013-09-19 13:18 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2013-09-19 13:18 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2013-09-19 13:18 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2013-09-19 13:18 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2013-09-19 13:18 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2013-09-19 13:18 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2013-09-19 13:18 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2013-09-19 13:18 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2013-09-19 13:18 - 2012-01-13 09:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-09-19 13:17 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-19 13:17 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-19 13:17 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-19 13:17 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-19 13:17 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-09-19 13:17 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-09-19 13:17 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-09-19 13:17 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-09-19 13:17 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-09-19 13:17 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-09-19 13:17 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-09-19 13:17 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-09-19 13:17 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-09-19 13:17 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-09-19 13:17 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-09-19 13:17 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2013-09-19 13:17 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-09-19 13:17 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-09-19 13:17 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-09-19 13:17 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-09-19 13:17 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-09-19 13:17 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2013-09-19 13:17 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-09-19 13:17 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2013-09-19 13:17 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2013-09-19 13:17 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2013-09-19 13:17 - 2012-06-02 07:48 - 00095600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-09-19 13:17 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2013-09-19 13:17 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2013-09-19 13:17 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2013-09-19 13:17 - 2011-11-17 08:35 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-09-19 13:17 - 2011-11-17 08:35 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-09-19 13:17 - 2011-11-17 08:35 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-09-19 13:17 - 2011-11-17 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-09-19 13:17 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2013-09-19 13:17 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2013-09-19 13:17 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2013-09-19 13:17 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2013-09-19 13:17 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2013-09-19 13:17 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2013-09-19 13:17 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2013-09-19 13:17 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2013-09-19 13:17 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2013-09-19 13:17 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2013-09-19 13:17 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2013-09-19 13:17 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2013-09-19 13:17 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2013-09-19 13:17 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2013-09-19 13:17 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2013-09-19 13:17 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2013-09-19 13:17 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2013-09-19 13:17 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2013-09-19 13:17 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2013-09-19 13:17 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2013-09-19 13:17 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-09-19 13:17 - 2010-12-23 12:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2013-09-19 13:17 - 2010-12-23 12:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2013-09-19 13:17 - 2010-12-23 12:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2013-09-19 13:17 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2013-09-19 13:17 - 2010-12-23 07:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2013-09-19 13:17 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2013-09-19 13:16 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-19 13:16 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-19 13:16 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-09-19 13:16 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-09-19 13:16 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-09-19 13:16 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-09-19 13:16 - 2013-04-10 08:01 - 00983400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-09-19 13:16 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2013-09-19 13:16 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-09-19 13:16 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-09-19 13:16 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-09-19 13:16 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-09-19 13:16 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-09-19 13:16 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-09-19 13:16 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2013-09-19 13:16 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-09-19 13:16 - 2012-11-01 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2013-09-19 13:16 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-09-19 13:16 - 2012-11-01 06:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-09-19 13:16 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2013-09-19 13:16 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2013-09-19 13:16 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2013-09-19 13:16 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2013-09-19 13:16 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2013-09-19 13:16 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2013-09-19 13:16 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2013-09-19 13:16 - 2012-04-26 07:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2013-09-19 13:16 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2013-09-19 13:16 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2013-09-19 13:16 - 2012-04-07 14:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2013-09-19 13:16 - 2012-04-07 13:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2013-09-19 13:16 - 2011-10-26 07:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2013-09-19 13:16 - 2011-10-26 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-09-19 13:16 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2013-09-19 13:16 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-09-19 13:16 - 2011-07-09 04:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2013-09-19 13:16 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2013-09-19 13:16 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2013-09-19 13:16 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2013-09-19 13:16 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2013-09-19 13:16 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2013-09-19 13:16 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2013-09-19 13:16 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2013-09-19 13:16 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2013-09-19 13:16 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2013-09-19 13:16 - 2011-04-29 05:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2013-09-19 13:16 - 2011-04-29 05:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2013-09-19 13:16 - 2011-04-29 05:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2013-09-19 13:16 - 2011-04-27 04:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2013-09-19 13:16 - 2011-04-27 04:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2013-09-19 13:16 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2013-09-19 13:16 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2013-09-19 13:16 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2013-09-19 13:16 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2013-09-19 13:16 - 2011-02-25 08:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-09-19 13:16 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-09-19 13:16 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-09-19 13:16 - 2010-06-26 05:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2013-09-19 13:16 - 2010-06-26 05:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2013-09-19 13:15 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-09-19 13:15 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-09-19 13:15 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-09-19 13:15 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-09-19 13:15 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-09-19 13:15 - 2013-03-19 07:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-09-19 13:15 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2013-09-19 13:15 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-09-19 13:15 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-09-19 13:15 - 2012-11-22 07:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-09-19 13:15 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-09-19 13:15 - 2012-11-20 07:48 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-09-19 13:15 - 2012-11-20 06:51 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-09-19 13:15 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2013-09-19 13:15 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-09-19 13:15 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-09-19 13:15 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-09-19 13:15 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-09-19 13:15 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-09-19 13:15 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-09-19 13:15 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2013-09-19 13:15 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2013-09-19 13:15 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2013-09-19 13:15 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2013-09-19 13:15 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-09-19 13:15 - 2012-05-05 10:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-09-19 13:15 - 2012-05-05 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2013-09-19 13:15 - 2012-05-01 07:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2013-09-19 13:15 - 2012-04-28 05:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-09-19 13:15 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2013-09-19 13:15 - 2012-02-11 08:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-09-19 13:15 - 2012-02-11 08:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-09-19 13:15 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2013-09-19 13:15 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2013-09-19 13:15 - 2011-12-28 05:59 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-09-19 13:15 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2013-09-19 13:15 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2013-09-19 13:15 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2013-09-19 13:15 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2013-09-19 13:15 - 2011-08-27 07:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-09-19 13:15 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2013-09-19 13:15 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-09-19 13:15 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2013-09-19 13:15 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2013-09-19 13:15 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2013-09-19 13:15 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2013-09-19 13:15 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2013-09-19 13:15 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2013-09-19 13:15 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2013-09-19 13:15 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2013-09-19 13:15 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2013-09-19 13:15 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2013-09-19 13:15 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2013-09-19 13:15 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2013-09-19 13:15 - 2011-05-03 07:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2013-09-19 13:15 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2013-09-19 13:15 - 2011-04-23 00:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2013-09-19 13:15 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2013-09-19 13:15 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2013-09-19 13:15 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2013-09-19 13:15 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2013-09-19 13:15 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2013-09-19 13:15 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2013-09-19 13:15 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2013-09-19 13:15 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2013-09-19 13:15 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2013-09-19 13:15 - 2011-02-05 19:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2013-09-19 13:15 - 2011-02-05 19:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2013-09-19 13:15 - 2011-02-05 19:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2013-09-19 13:15 - 2011-02-05 19:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2013-09-19 13:15 - 2011-02-05 19:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2013-09-19 13:15 - 2011-02-05 19:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2013-09-19 13:15 - 2011-02-05 19:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2013-09-19 12:59 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2013-09-19 12:59 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2013-09-19 12:35 - 2013-09-19 12:35 - 01602164 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-19 12:31 - 2013-09-20 19:06 - 00001413 _____ C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-19 12:31 - 2013-09-19 14:27 - 00146616 _____ C:\Users\****\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-19 12:30 - 2013-09-19 12:30 - 00000020 ___SH C:\Users\****\ntuser.ini
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-09-19 03:56 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2013-09-19 03:56 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-09-19 03:56 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2013-09-19 03:51 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-09-19 03:51 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-09-19 03:51 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-09-19 03:51 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-09-19 03:51 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-09-19 03:51 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-09-19 03:51 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-09-19 03:51 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-09-19 03:51 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-09-19 03:32 - 2013-09-19 12:30 - 00000000 ____D C:\Windows\Panther
2013-09-19 03:30 - 2013-09-19 03:30 - 00022960 _____ C:\Windows\system32\emptyregdb.dat
2013-09-19 03:27 - 2013-09-19 03:27 - 00262144 _____ C:\Windows\system32\config\userdiff
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2008
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2008
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-09-19 02:40 - 2013-09-19 14:42 - 00000000 ____D C:\Users\****
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Vorlagen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Startmenü
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Netzwerkumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Lokale Einstellungen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Eigene Dateien
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Druckumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Musik
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Bilder
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Verlauf
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Anwendungsdaten
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Anwendungsdaten
2013-09-19 02:40 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-19 02:40 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-19 02:40 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-19 02:40 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-19 02:39 - 2013-09-19 02:39 - 00001355 _____ C:\Windows\TSSysprep.log
2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf
2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf
2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____D C:\Program Files\AuthenTec
2013-09-19 02:38 - 2013-09-21 13:00 - 01623939 _____ C:\Windows\WindowsUpdate.log
2013-09-19 02:38 - 2013-09-19 02:38 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-19 02:38 - 2012-12-29 10:40 - 06382008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-09-19 02:38 - 2012-12-29 10:40 - 03455416 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-09-19 02:38 - 2012-12-29 10:40 - 02923201 _____ C:\Windows\system32\nvcoproc.bin
2013-09-19 02:38 - 2012-12-29 10:40 - 02558392 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-09-19 02:38 - 2012-12-29 10:40 - 00997816 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2013-09-19 02:38 - 2012-12-29 10:40 - 00884152 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-09-19 02:38 - 2012-12-29 10:40 - 00118712 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-09-19 02:38 - 2012-12-29 10:40 - 00063928 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-09-19 02:38 - 2012-12-29 10:40 - 00055736 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2013-09-19 02:37 - 2013-09-19 02:50 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-19 02:37 - 2013-09-19 02:44 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files\Realtek
2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____D C:\Program Files\Synaptics
2013-09-19 01:32 - 2013-09-19 03:34 - 00006125 _____ C:\Windows\comsetup.log
2013-09-19 00:51 - 2013-09-19 01:17 - 00003376 _____ C:\Users\****\Desktop\Windows-Kompatibilitätsbericht.htm
2013-09-19 00:43 - 2013-09-19 01:14 - 00002544 _____ C:\Windows\diagwrn.xml
2013-09-19 00:43 - 2013-09-19 01:14 - 00001890 _____ C:\Windows\diagerr.xml
2013-09-18 22:06 - 2013-09-19 14:19 - 01831285 _____ C:\Users\****\Desktop\gutschein_flicflac.cdr
2013-09-18 21:48 - 2013-09-18 21:55 - 423572207 _____ C:\Users\****\Downloads\Windows6.1-KB947821-v28-x64.msu
2013-09-18 19:16 - 2013-02-23 01:16 - 552209689 _____ C:\Users\****\Desktop\IMG_2059.MOV
2013-09-18 13:15 - 2013-09-19 03:29 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-09-18 13:15 - 2013-09-19 02:56 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-18 13:14 - 2013-09-19 02:54 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-09-18 13:14 - 2013-09-18 13:14 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-09-18 13:14 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2013-09-18 13:12 - 2013-09-18 13:12 - 00614816 _____ C:\Users\****\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe
2013-09-17 12:59 - 2013-09-17 12:59 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\****\Downloads\jDownloaderWebInstaller09581.exe
2013-09-17 12:09 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Weltreise
2013-09-17 11:48 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker -  Böhmische
2013-09-17 11:48 - 2013-09-17 12:00 - 71710551 _____ C:\Users\****\Downloads\DIBwe.rar
2013-09-17 11:40 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Tip-Top WEB
2013-09-17 11:31 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Perfectum est!
2013-09-16 17:10 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Windows XP Professional with Service Pack 3 (x86) - CD (German)
2013-09-16 16:30 - 2013-09-16 16:30 - 00003179 _____ C:\Users\****\Desktop\Secure Download Manager.lnk
2013-09-12 22:43 - 2013-09-12 23:36 - 00010089 _____ C:\Users\****\AppData\Roaming\Durch Trennzeichen getrennte Werte.CAL
2013-09-06 10:33 - 2013-09-19 02:45 - 00000000 ____D C:\Program Files\Western Digital
2013-09-06 08:50 - 2013-09-06 08:50 - 00367200 _____ (Acronis) C:\Windows\system32\Drivers\afcdp.sys
2013-09-06 08:49 - 2013-09-19 03:16 - 00000000 ____D C:\Users\****\AppData\Roaming\17DB5932-922E-412B-B4F0-CDE14C9D6793
2013-09-06 08:49 - 2013-09-06 08:49 - 01120032 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 00183224 _____ (Acronis) C:\Windows\system32\Drivers\tib_mounter.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 00161568 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vididr.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 00001205 _____ C:\Users\Public\Desktop\True Image 2013.lnk
2013-09-05 12:57 - 2013-09-19 03:20 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung Printers
2013-09-05 12:56 - 2013-09-19 03:15 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Samsung
2013-09-05 12:56 - 2013-09-19 02:43 - 00000000 ____D C:\Program Files\Common Files\Common Desktop Agent
2013-09-05 12:42 - 2013-09-19 02:54 - 00000000 ____D C:\Program Files (x86)\Samsung Printers
2013-09-03 13:37 - 2013-09-19 02:56 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-03 13:37 - 2013-09-19 02:50 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-03 13:37 - 2013-09-19 02:43 - 00000000 ____D C:\Program Files\iTunes
2013-09-03 13:37 - 2013-09-19 02:43 - 00000000 ____D C:\Program Files\iPod
2013-09-03 13:37 - 2013-09-03 13:37 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-09-02 12:56 - 2013-09-02 13:01 - 00000000 ____D C:\Windows\pss
2013-09-02 12:10 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Documents\Ubisoft
2013-09-02 12:00 - 2013-09-02 12:00 - 00002490 _____ C:\Users\Public\Desktop\Tom Clancy's Splinter Cell® Blacklist™.lnk
2013-09-01 21:22 - 2013-09-19 03:20 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-09-01 21:22 - 2013-09-19 03:16 - 00000000 ____D C:\Users\****\AppData\Local\Ubisoft Game Launcher
2013-09-01 21:22 - 2013-09-19 02:55 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-09-01 21:22 - 2013-09-01 21:22 - 00001205 _____ C:\Users\****\Desktop\Uplay.lnk
2013-08-22 08:16 - 2013-08-22 08:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf

e.rico · 21.09.2013, 12:12

FRST (Teil 2)

Code:

ATTFilter

==================== One Month Modified Files and Folders =======

2013-09-21 13:00 - 2013-09-19 02:38 - 01623939 _____ C:\Windows\WindowsUpdate.log
2013-09-21 12:57 - 2013-05-20 18:12 - 00008192 _____ C:\Windows\SysWOW64\WDPABKP.dat
2013-09-21 12:56 - 2013-09-20 10:46 - 00042624 _____ C:\Windows\setupact.log
2013-09-21 12:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-21 12:55 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Outlook-Dateien
2013-09-21 12:54 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-21 12:54 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-21 12:53 - 2013-09-21 12:53 - 01956670 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe
2013-09-21 12:53 - 2011-04-12 09:43 - 00702852 _____ C:\Windows\system32\perfh007.dat
2013-09-21 12:53 - 2011-04-12 09:43 - 00150460 _____ C:\Windows\system32\perfc007.dat
2013-09-21 12:53 - 2009-07-14 07:13 - 01627884 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-21 12:47 - 2013-05-22 18:11 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-20 23:42 - 2013-08-04 21:23 - 00000000 ____D C:\Users\****\AppData\Roaming\Skype
2013-09-20 23:27 - 2013-09-20 23:26 - 00016514 _____ C:\Users\****\Desktop\SystemLook.txt
2013-09-20 23:26 - 2013-09-20 23:26 - 00165376 _____ C:\Users\****\Desktop\SystemLook_x64.exe
2013-09-20 23:26 - 2013-09-20 23:24 - 00035577 _____ C:\Users\****\Desktop\Addition_alt1.txt
2013-09-20 23:25 - 2013-09-20 23:24 - 00153316 _____ C:\Users\****\Desktop\FRST_alt1.txt
2013-09-20 19:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-20 19:06 - 2013-09-19 12:31 - 00001413 _____ C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-20 18:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-09-20 18:56 - 2013-04-30 22:29 - 00618400 _____ C:\Windows\IE10_main.log
2013-09-20 18:52 - 2013-09-20 18:52 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-20 18:52 - 2013-09-20 18:52 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-20 18:52 - 2013-09-20 18:52 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-09-20 18:52 - 2013-09-20 18:52 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-09-20 18:52 - 2013-09-20 18:52 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-09-20 18:52 - 2013-09-20 18:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-09-20 18:52 - 2013-09-20 18:52 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-09-20 18:52 - 2013-09-20 18:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-09-20 18:52 - 2013-09-20 18:52 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-09-20 18:52 - 2013-09-20 18:52 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-09-20 14:47 - 2013-05-22 18:11 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-20 14:47 - 2012-04-05 08:24 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 14:47 - 2012-03-26 20:22 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK
2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-09-20 10:46 - 2013-09-20 10:46 - 00000000 _____ C:\Windows\setuperr.log
2013-09-20 10:31 - 2013-09-19 17:55 - 00000000 ____D C:\Windows\Minidump
2013-09-20 01:45 - 2013-09-20 01:45 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Users\****\AppData\Roaming\Malwarebytes
2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-20 01:44 - 2013-09-20 01:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\****\Desktop\mbam-setup-1.75.0.1300.exe
2013-09-20 01:43 - 2013-09-20 01:43 - 00002403 _____ C:\Users\****\Desktop\JRT.txt
2013-09-20 01:37 - 2013-09-20 01:37 - 01029675 _____ (Thisisu) C:\Users\****\Desktop\JRT.exe
2013-09-20 01:37 - 2013-09-20 01:37 - 00000000 ____D C:\Windows\ERUNT
2013-09-20 01:34 - 2013-09-20 01:34 - 00002861 _____ C:\Users\****\Desktop\AdwCleaner[S0].txt
2013-09-20 01:31 - 2013-09-20 01:31 - 00000000 ____D C:\AdwCleaner
2013-09-20 01:30 - 2013-09-20 01:30 - 01039554 _____ C:\Users\****\Desktop\adwcleaner.exe
2013-09-19 17:55 - 2010-11-21 05:47 - 00017810 _____ C:\Windows\PFRO.log
2013-09-19 17:11 - 2013-09-19 17:08 - 00033957 _____ C:\Users\****\Desktop\ComboFix.txt
2013-09-19 17:09 - 2013-09-19 16:39 - 00000000 ____D C:\Qoobox
2013-09-19 17:03 - 2013-09-19 16:39 - 00000000 ____D C:\Windows\erdnt
2013-09-19 16:52 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-09-19 16:37 - 2013-09-19 16:37 - 05128554 ____R (Swearware) C:\Users\****\Desktop\ComboFix.exe
2013-09-19 16:29 - 2013-09-19 16:29 - 00032900 _____ C:\Users\****\Desktop\logfiles.zip
2013-09-19 14:58 - 2013-09-19 14:54 - 00012112 _____ C:\Users\****\Desktop\Gmer.txt
2013-09-19 14:58 - 2013-09-19 14:45 - 00142885 _____ C:\Users\****\Desktop\FRST_alt.txt
2013-09-19 14:55 - 2013-09-19 14:44 - 00039322 _____ C:\Users\****\Desktop\Addition_alt.txt
2013-09-19 14:54 - 2013-09-19 14:42 - 00000474 _____ C:\Users\****\Desktop\defogger_disable.log
2013-09-19 14:43 - 2013-09-19 14:43 - 00000000 ____D C:\FRST
2013-09-19 14:42 - 2013-09-19 14:42 - 00000000 _____ C:\Users\****\defogger_reenable
2013-09-19 14:42 - 2013-09-19 02:40 - 00000000 ____D C:\Users\****
2013-09-19 14:41 - 2013-09-19 14:41 - 00377856 _____ C:\Users\****\Desktop\5txgbuj5.exe
2013-09-19 14:41 - 2013-09-19 14:41 - 00050477 _____ C:\Users\****\Desktop\Defogger.exe
2013-09-19 14:27 - 2013-09-19 12:31 - 00146616 _____ C:\Users\****\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-19 14:27 - 2012-03-25 21:47 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-19 14:27 - 2012-03-25 21:47 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-19 14:22 - 2009-07-14 06:45 - 05158952 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-19 14:20 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2013-09-19 14:20 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-09-19 14:20 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-09-19 14:20 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-09-19 14:19 - 2013-09-18 22:06 - 01831285 _____ C:\Users\****\Desktop\gutschein_flicflac.cdr
2013-09-19 14:02 - 2013-07-18 17:57 - 00000000 ____D C:\Windows\system32\MRT
2013-09-19 13:48 - 2013-09-19 13:48 - 00000134 _____ C:\Users\****\Desktop\Internet Explorer-Problembehebung.url
2013-09-19 13:39 - 2012-03-25 22:54 - 00013178 _____ C:\Windows\IE9_main.log
2013-09-19 12:35 - 2013-09-19 12:35 - 01602164 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-19 12:33 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-09-19 12:30 - 2013-09-19 12:30 - 00000020 ___SH C:\Users\****\ntuser.ini
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-09-19 12:30 - 2013-09-19 03:32 - 00000000 ____D C:\Windows\Panther
2013-09-19 12:30 - 2012-03-25 21:47 - 00000000 ____D C:\Recovery
2013-09-19 12:30 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-09-19 12:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery
2013-09-19 12:30 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-09-19 03:50 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2013-09-19 03:34 - 2013-09-19 01:32 - 00006125 _____ C:\Windows\comsetup.log
2013-09-19 03:32 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-09-19 03:32 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-09-19 03:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe
2013-09-19 03:30 - 2013-09-19 03:30 - 00022960 _____ C:\Windows\system32\emptyregdb.dat
2013-09-19 03:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration
2013-09-19 03:29 - 2013-09-18 13:15 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-09-19 03:29 - 2013-05-20 18:15 - 00000000 ____D C:\Windows\System32\Tasks\Western Digital
2013-09-19 03:29 - 2012-08-30 00:25 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-09-19 03:29 - 2012-03-25 22:28 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2013-09-19 03:29 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media
2013-09-19 03:27 - 2013-09-19 03:27 - 00262144 _____ C:\Windows\system32\config\userdiff
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2008
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2008
2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-09-19 03:24 - 2009-07-14 06:46 - 00005157 _____ C:\Windows\DtcInstall.log
2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-19 03:21 - 2013-09-17 12:09 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Weltreise
2013-09-19 03:21 - 2013-09-17 11:48 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker -  Böhmische
2013-09-19 03:21 - 2013-09-17 11:40 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Tip-Top WEB
2013-09-19 03:21 - 2013-09-17 11:31 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Perfectum est!
2013-09-19 03:21 - 2013-09-16 17:10 - 00000000 ____D C:\Users\****\Downloads\Windows XP Professional with Service Pack 3 (x86) - CD (German)
2013-09-19 03:21 - 2013-09-02 12:10 - 00000000 ____D C:\Users\****\Documents\Ubisoft
2013-09-19 03:21 - 2013-05-04 23:01 - 00000000 ____D C:\Users\****\eTeks
2013-09-19 03:21 - 2013-04-10 09:01 - 00000000 ____D C:\Users\****\Documents\Wohnung Eisenbach
2013-09-19 03:21 - 2013-03-27 21:02 - 00000000 ____D C:\Users\****\Documents\SimCity
2013-09-19 03:21 - 2012-12-26 13:41 - 00000000 ____D C:\Users\****\Documents\My Games
2013-09-19 03:21 - 2012-10-11 15:40 - 00000000 ____D C:\Users\****\Documents\My Kindle Content
2013-09-19 03:21 - 2012-08-14 22:32 - 00000000 ____D C:\Users\****\Documents\Telekom Deutschland GmbH
2013-09-19 03:21 - 2012-08-14 22:31 - 00000000 ____D C:\Users\****\Documents\Renate
2013-09-19 03:21 - 2012-06-17 19:05 - 00000000 ____D C:\Users\****\Documents\Retrieved Contents
2013-09-19 03:21 - 2012-06-08 21:29 - 00000000 ____D C:\Users\****\Documents\Mängelrüge Reise - Tanja + Madeleine
2013-09-19 03:21 - 2012-03-26 20:22 - 00000000 ____D C:\Users\****\Documents\Visual Studio 2008
2013-09-19 03:21 - 2012-03-26 08:25 - 00000000 ____D C:\Users\****\Documents\Wohnung
2013-09-19 03:21 - 2012-03-26 08:23 - 00000000 ____D C:\Users\****\Documents\Vereinsring
2013-09-19 03:21 - 2012-03-26 08:23 - 00000000 ____D C:\Users\****\Documents\Veranstaltungsfachwirt
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Uni Würzburg
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\TSV Olympia
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\tiere-infos.de (Pascal)-Dateien
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\StreamTransport
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Steuer-Sparbuch
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Steuer
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Sony Ericsson
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\snaps-****
2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Routenplaner-Service.de_1
2013-09-19 03:21 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Musikverein
2013-09-19 03:20 - 2013-09-05 12:57 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung Printers
2013-09-19 03:20 - 2013-09-01 21:22 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2013-09-19 03:20 - 2013-07-28 14:10 - 00000000 ____D C:\Users\****\Documents\Ausbildereigungsprüfung
2013-09-19 03:20 - 2013-07-01 23:12 - 00000000 ____D C:\Users\****\Desktop\CPU
2013-09-19 03:20 - 2013-07-01 13:52 - 00000000 ____D C:\Users\****\Desktop\Präsentation
2013-09-19 03:20 - 2013-06-16 22:26 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar
2013-09-19 03:20 - 2013-06-16 01:21 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quadriga Games
2013-09-19 03:20 - 2013-06-01 12:26 - 00000000 ____D C:\Users\****\AppData\Roaming\TerraTec
2013-09-19 03:20 - 2013-05-30 21:37 - 00000000 ____D C:\Users\****\Documents\Betriebswirt
2013-09-19 03:20 - 2013-03-23 12:54 - 00000000 ____D C:\Users\****\Documents\Armani
2013-09-19 03:20 - 2013-02-02 12:42 - 00000000 ____D C:\Users\****\Documents\Francisco Medina
2013-09-19 03:20 - 2013-01-29 00:56 - 00000000 ____D C:\Users\****\AppData\Roaming\Youtube Downloader HD
2013-09-19 03:20 - 2013-01-12 18:00 - 00000000 ____D C:\Users\****\Documents\Karl Jany
2013-09-19 03:20 - 2012-12-02 17:10 - 00000000 ____D C:\Users\****\AppData\Roaming\MusE
2013-09-19 03:20 - 2012-12-01 13:49 - 00000000 ____D C:\Users\****\AppData\Roaming\Samsung
2013-09-19 03:20 - 2012-11-13 00:16 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge
2013-09-19 03:20 - 2012-11-03 12:18 - 00000000 ____D C:\Users\****\Documents\FUSSBALL MANAGER 13
2013-09-19 03:20 - 2012-11-02 23:15 - 00000000 ____D C:\Users\****\AppData\Roaming\Origin
2013-09-19 03:20 - 2012-10-19 16:41 - 00000000 ____D C:\Users\****\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2013-09-19 03:20 - 2012-10-19 15:53 - 00000000 ____D C:\Users\****\AppData\Roaming\PDAppFlex
2013-09-19 03:20 - 2012-10-18 18:04 - 00000000 ____D C:\Users\****\Documents\Kirchenverwaltungswahl 2012
2013-09-19 03:20 - 2012-10-11 15:40 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-09-19 03:20 - 2012-10-07 22:35 - 00000000 ____D C:\Users\****\Documents\ML-2525W_Printd
2013-09-19 03:20 - 2012-10-07 03:32 - 00000000 ____D C:\Users\****\Documents\HVB
2013-09-19 03:20 - 2012-09-27 18:24 - 00000000 ___SD C:\Users\****\Documents\Meine Shapes
2013-09-19 03:20 - 2012-09-10 19:25 - 00000000 ____D C:\Users\****\AppData\Roaming\Mp3tag
2013-09-19 03:20 - 2012-08-04 16:33 - 00000000 ____D C:\Users\****\AppData\Roaming\TeamViewer
2013-09-19 03:20 - 2012-07-22 18:27 - 00000000 ____D C:\Users\****\AppData\Roaming\NVIDIA
2013-09-19 03:20 - 2012-07-22 18:26 - 00000000 ____D C:\Users\****\AppData\Roaming\ProtectDISC
2013-09-19 03:20 - 2012-06-19 18:31 - 00000000 __SHD C:\Users\****\Documents\cache
2013-09-19 03:20 - 2012-06-19 18:31 - 00000000 ____D C:\Users\****\AppData\Roaming\webex
2013-09-19 03:20 - 2012-05-28 21:11 - 00000000 ____D C:\Users\****\AppData\Roaming\SmartTools
2013-09-19 03:20 - 2012-05-06 19:11 - 00000000 ____D C:\Users\****\AppData\Roaming\WEB.DE
2013-09-19 03:20 - 2012-04-23 11:44 - 00000000 ____D C:\Users\****\Documents\ESM-Tools
2013-09-19 03:20 - 2012-04-23 11:43 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESM-Tools
2013-09-19 03:20 - 2012-04-01 14:27 - 00000000 ____D C:\Users\****\AppData\Roaming\vlc
2013-09-19 03:20 - 2012-04-01 11:38 - 00000000 ____D C:\Users\****\Documents\Beruf
2013-09-19 03:20 - 2012-03-26 20:24 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2013-09-19 03:20 - 2012-03-26 20:22 - 00000000 ____D C:\Users\****\Documents\Corel
2013-09-19 03:20 - 2012-03-26 16:51 - 00000000 ___SD C:\Users\****\Documents\Meine Datenquellen
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Mein Steuer-Sparbuch Heute
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Kontoauszüge
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Junge Union
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Hattrick Organizer
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Hattrick Logo
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Handy
2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Facharbeit Alle Dateien
2013-09-19 03:20 - 2012-03-26 08:20 - 00000000 ____D C:\Users\****\Documents\Daten vom P1i
2013-09-19 03:20 - 2012-03-26 08:17 - 00000000 ____D C:\Users\****\Documents\CSU
2013-09-19 03:20 - 2012-03-26 08:17 - 00000000 ____D C:\Users\****\Documents\Blasmusikfreunde Eisenbach
2013-09-19 03:20 - 2012-03-26 08:16 - 00000000 ____D C:\Users\****\Documents\Bewerbung
2013-09-19 03:20 - 2012-03-26 08:16 - 00000000 ____D C:\Users\****\Documents\Barclaycard
2013-09-19 03:20 - 2012-03-26 08:16 - 00000000 ____D C:\Users\****\Documents\Auslandskrankenversicherung
2013-09-19 03:20 - 2012-03-26 08:15 - 00000000 ____D C:\Users\****\Documents\50. Geburtstag Gerald
2013-09-19 03:20 - 2012-03-25 22:48 - 00000000 ____D C:\Users\****\AppData\Roaming\Protector Suite
2013-09-19 03:20 - 2012-03-25 22:25 - 00000000 ____D C:\Users\****\AppData\Roaming\WinRAR
2013-09-19 03:20 - 2012-03-25 22:25 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-09-19 03:20 - 2012-03-25 22:16 - 00000000 ____D C:\Users\****\AppData\Roaming\Mozilla
2013-09-19 03:19 - 2013-05-16 22:04 - 00000000 ____D C:\Users\****\AppData\Roaming\bol
2013-09-19 03:19 - 2013-02-15 20:15 - 00000000 ____D C:\Users\****\AppData\Roaming\BOM
2013-09-19 03:19 - 2013-01-27 17:18 - 00000000 ____D C:\Users\****\AppData\Roaming\e-academy Inc
2013-09-19 03:19 - 2012-10-19 14:17 - 00000000 ____D C:\Users\****\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2013-09-19 03:19 - 2012-10-07 22:56 - 00000000 ____D C:\Users\****\AppData\Roaming\FRITZ!
2013-09-19 03:19 - 2012-09-22 23:37 - 00000000 ____D C:\Users\****\AppData\Roaming\HandBrake
2013-09-19 03:19 - 2012-09-22 23:34 - 00000000 ____D C:\Users\****\AppData\Roaming\Free iPad Video Converter
2013-09-19 03:19 - 2012-04-23 11:44 - 00000000 ____D C:\Users\****\AppData\Roaming\ESM-Tools
2013-09-19 03:19 - 2012-04-13 20:25 - 00000000 ____D C:\Users\****\AppData\Roaming\FileZilla
2013-09-19 03:19 - 2012-04-09 21:56 - 00000000 ____D C:\Users\****\AppData\Roaming\Ashampoo
2013-09-19 03:19 - 2012-04-01 10:47 - 00000000 ____D C:\Users\****\AppData\Roaming\Buhl Data Service
2013-09-19 03:19 - 2012-03-31 14:20 - 00000000 ____D C:\Users\****\AppData\Roaming\Apple Computer
2013-09-19 03:19 - 2012-03-26 21:33 - 00000000 ____D C:\Users\****\AppData\Roaming\Corel
2013-09-19 03:19 - 2012-03-26 20:24 - 00000000 ____D C:\Users\****\AppData\Roaming\IrfanView
2013-09-19 03:19 - 2012-03-26 20:22 - 00000000 ____D C:\Users\****\AppData\Roaming\Macromedia
2013-09-19 03:19 - 2012-03-25 22:29 - 00000000 ____D C:\Users\****\AppData\Roaming\InstallShield
2013-09-19 03:19 - 2012-03-25 22:11 - 00000000 ____D C:\Users\****\AppData\Roaming\Intel
2013-09-19 03:16 - 2013-09-06 08:49 - 00000000 ____D C:\Users\****\AppData\Roaming\17DB5932-922E-412B-B4F0-CDE14C9D6793
2013-09-19 03:16 - 2013-09-01 21:22 - 00000000 ____D C:\Users\****\AppData\Local\Ubisoft Game Launcher
2013-09-19 03:16 - 2013-05-20 18:15 - 00000000 ____D C:\Users\****\AppData\Local\Western_Digital_Technolog
2013-09-19 03:16 - 2013-01-29 01:10 - 00000000 ____D C:\Users\****\AppData\Local\Windows Live
2013-09-19 03:16 - 2012-12-26 13:41 - 00000000 ____D C:\Users\****\AppData\Local\My Games
2013-09-19 03:16 - 2012-12-02 17:10 - 00000000 ____D C:\Users\****\AppData\Local\MusE
2013-09-19 03:16 - 2012-11-02 23:15 - 00000000 ____D C:\Users\****\AppData\Local\Origin
2013-09-19 03:16 - 2012-09-06 17:54 - 00000000 ____D C:\Users\****\AppData\Roaming\Acronis
2013-09-19 03:16 - 2012-07-22 18:27 - 00000000 ____D C:\Users\****\AppData\Local\Quadriga Games
2013-09-19 03:16 - 2012-05-22 19:38 - 00000000 ____D C:\Users\****\AppData\Roaming\Amazon
2013-09-19 03:16 - 2012-04-23 13:50 - 00000000 ____D C:\Users\****\AppData\Local\PDF24
2013-09-19 03:16 - 2012-04-09 20:01 - 00000000 ____D C:\Users\****\AppData\Local\Western_Digital
2013-09-19 03:16 - 2012-04-09 20:00 - 00000000 ____D C:\Users\****\AppData\Local\Western Digital
2013-09-19 03:16 - 2012-03-25 23:12 - 00000000 ____D C:\Users\****\AppData\Roaming\Adobe
2013-09-19 03:16 - 2012-03-25 21:47 - 00000000 ____D C:\Users\****\AppData\Local\VirtualStore
2013-09-19 03:15 - 2013-09-05 12:56 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Samsung
2013-09-19 03:15 - 2013-04-28 12:59 - 00000000 ____D C:\Users\****\AppData\Local\e-academy Inc
2013-09-19 03:15 - 2013-03-22 19:57 - 00000000 ____D C:\Users\****\AppData\Local\Macromedia
2013-09-19 03:15 - 2013-02-14 12:09 - 00000000 ____D C:\Users\****\AppData\Local\Apps\2.0
2013-09-19 03:15 - 2012-12-02 20:35 - 00000000 ____D C:\Users\****\AppData\Local\gegl-0.2
2013-09-19 03:15 - 2012-12-02 20:35 - 00000000 ____D C:\Users\****\.gimp-2.8
2013-09-19 03:15 - 2012-11-13 00:21 - 00000000 ____D C:\Users\****\.pdfsam
2013-09-19 03:15 - 2012-10-11 15:40 - 00000000 ____D C:\Users\****\AppData\Local\Amazon
2013-09-19 03:15 - 2012-10-07 22:56 - 00000000 ____D C:\Users\****\AppData\Local\FRITZ!
2013-09-19 03:15 - 2012-10-04 22:58 - 00000000 ____D C:\Users\****\AppData\Local\Eraser 6
2013-09-19 03:15 - 2012-04-09 21:55 - 00000000 ____D C:\Users\****\AppData\Local\ashampoo
2013-09-19 03:15 - 2012-04-01 10:47 - 00000000 ____D C:\Users\****\AppData\Local\Buhl Data Service
2013-09-19 03:15 - 2012-04-01 10:25 - 00000000 ____D C:\Users\****\AppData\Local\Buhl
2013-09-19 03:15 - 2012-03-31 14:20 - 00000000 ____D C:\Users\****\AppData\Local\Apple Computer
2013-09-19 03:15 - 2012-03-31 14:18 - 00000000 ____D C:\Users\****\AppData\Local\Apple
2013-09-19 03:15 - 2012-03-25 23:12 - 00000000 ____D C:\Users\****\AppData\Local\Adobe
2013-09-19 03:15 - 2012-03-25 22:24 - 00000000 ____D C:\Users\****\AppData\Local\Microsoft Help
2013-09-19 03:15 - 2012-03-25 22:16 - 00000000 ____D C:\Users\****\AppData\Local\Mozilla
2013-09-19 03:00 - 2013-01-30 22:39 - 00000000 ____D C:\Windows\SysWOW64\spool
2013-09-19 03:00 - 2012-03-26 20:23 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2013-09-19 03:00 - 2012-03-26 20:22 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-09-19 03:00 - 2012-03-25 22:47 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-09-19 03:00 - 2012-03-25 22:26 - 00000000 ____D C:\Windows\SysWOW64\SDA
2013-09-19 03:00 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2013-09-19 02:59 - 2012-03-26 20:30 - 00000000 ____D C:\Windows\Samsung
2013-09-19 02:59 - 2012-03-26 20:22 - 00000000 ____D C:\Windows\system32\Macromed
2013-09-19 02:59 - 2012-03-25 22:47 - 00000000 ____D C:\Windows\system32\NV
2013-09-19 02:59 - 2011-04-12 09:54 - 00000000 ____D C:\Windows\ShellNew
2013-09-19 02:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-19 02:58 - 2013-01-29 01:15 - 00000000 ____D C:\Windows\de
2013-09-19 02:58 - 2012-08-23 17:05 - 00000000 ____D C:\Windows\CheckSur
2013-09-19 02:58 - 2012-07-22 18:18 - 00000000 ____D C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2013-09-19 02:58 - 2012-03-25 22:43 - 00000000 ____D C:\Windows\Downloaded Installations
2013-09-19 02:57 - 2013-01-30 22:20 - 00000000 ____D C:\Users\Public\Documents\Adobe PDF
2013-09-19 02:57 - 2012-10-02 18:25 - 00000000 ____D C:\Users\Gaeste
2013-09-19 02:57 - 2012-03-26 20:23 - 00000000 ____D C:\Users\Public\Documents\Corel
2013-09-19 02:56 - 2013-09-18 13:15 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-19 02:56 - 2013-09-03 13:37 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-19 02:56 - 2013-08-04 21:23 - 00000000 ____D C:\ProgramData\Skype
2013-09-19 02:56 - 2013-06-01 12:27 - 00000000 ____D C:\ProgramData\TerraTec
2013-09-19 02:56 - 2013-05-20 18:10 - 00000000 ____D C:\ProgramData\Package Cache
2013-09-19 02:56 - 2013-01-29 01:13 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-09-19 02:56 - 2013-01-21 22:51 - 00000000 ____D C:\ProgramData\SlySoft
2013-09-19 02:56 - 2012-11-02 23:07 - 00000000 ____D C:\ProgramData\Origin
2013-09-19 02:56 - 2012-11-02 23:07 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-09-19 02:56 - 2012-10-28 17:53 - 00000000 ____D C:\Users\Admin
2013-09-19 02:56 - 2012-10-19 15:45 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-09-19 02:56 - 2012-09-06 17:53 - 00000000 ____D C:\ProgramData\Acronis
2013-09-19 02:56 - 2012-09-02 13:31 - 00000000 ____D C:\ProgramData\Sun
2013-09-19 02:56 - 2012-06-19 18:30 - 00000000 ____D C:\ProgramData\WebEx
2013-09-19 02:56 - 2012-05-20 21:09 - 00000000 ____D C:\ProgramData\Bitstream
2013-09-19 02:56 - 2012-05-06 19:11 - 00000000 ____D C:\ProgramData\WEB.DE
2013-09-19 02:56 - 2012-05-06 12:53 - 00000000 ____D C:\ProgramData\Mozilla
2013-09-19 02:56 - 2012-04-09 21:55 - 00000000 ____D C:\ProgramData\ashampoo
2013-09-19 02:56 - 2012-04-09 20:00 - 00000000 ____D C:\ProgramData\Western Digital
2013-09-19 02:56 - 2012-04-01 10:23 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH
2013-09-19 02:56 - 2012-04-01 10:23 - 00000000 ____D C:\Program Files (x86)\WISO
2013-09-19 02:56 - 2012-03-31 17:48 - 00000000 ___HD C:\ProgramData\CanonBJ
2013-09-19 02:56 - 2012-03-31 14:19 - 00000000 ____D C:\ProgramData\Apple Computer
2013-09-19 02:56 - 2012-03-31 14:19 - 00000000 ____D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2013-09-19 02:56 - 2012-03-31 14:17 - 00000000 ____D C:\ProgramData\Apple
2013-09-19 02:56 - 2012-03-26 21:33 - 00000000 ____D C:\ProgramData\Protexis
2013-09-19 02:56 - 2012-03-26 20:30 - 00000000 ____D C:\ProgramData\Samsung
2013-09-19 02:56 - 2012-03-25 23:27 - 00000000 ____D C:\ProgramData\Corel
2013-09-19 02:56 - 2012-03-25 23:08 - 00000000 ____D C:\ProgramData\Adobe
2013-09-19 02:56 - 2012-03-25 22:37 - 00000000 ____D C:\ProgramData\FLEXnet
2013-09-19 02:56 - 2012-03-25 22:36 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-19 02:56 - 2012-03-25 22:33 - 00000000 ____D C:\ProgramData\Creative
2013-09-19 02:56 - 2012-03-25 22:24 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-19 02:56 - 2012-03-25 22:10 - 00000000 ____D C:\ProgramData\Intel
2013-09-19 02:55 - 2013-09-01 21:22 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-09-19 02:55 - 2013-06-01 12:27 - 00000000 ____D C:\Program Files (x86)\TerraTec
2013-09-19 02:55 - 2013-05-20 18:12 - 00000000 ____D C:\Program Files (x86)\Western Digital
2013-09-19 02:55 - 2012-12-25 20:48 - 00000000 ____D C:\Program Files (x86)\Steam
2013-09-19 02:55 - 2012-09-30 13:38 - 00000000 ____D C:\Program Files (x86)\StreamTransport
2013-09-19 02:55 - 2012-09-02 20:42 - 00000000 ____D C:\Program Files (x86)\Tools&More
2013-09-19 02:55 - 2012-09-02 15:10 - 00000000 ____D C:\Program Files (x86)\Western Digital Corporation
2013-09-19 02:55 - 2012-05-06 19:11 - 00000000 ____D C:\Program Files (x86)\WEB.DE
2013-09-19 02:55 - 2012-04-01 14:27 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-09-19 02:55 - 2012-03-25 22:54 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-09-19 02:54 - 2013-09-18 13:14 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-09-19 02:54 - 2013-09-05 12:42 - 00000000 ____D C:\Program Files (x86)\Samsung Printers
2013-09-19 02:54 - 2013-08-04 21:23 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-09-19 02:54 - 2013-06-16 23:05 - 00000000 ____D C:\Program Files (x86)\Smart PC Solutions
2013-09-19 02:54 - 2013-03-07 19:21 - 00000000 ____D C:\Program Files (x86)\SonyEditor
2013-09-19 02:54 - 2012-12-28 15:44 - 00000000 ____D C:\Program Files (x86)\SlySoft
2013-09-19 02:54 - 2012-03-26 20:30 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate
2013-09-19 02:54 - 2012-03-26 20:30 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-09-19 02:54 - 2012-03-25 22:29 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-09-19 02:54 - 2012-03-25 22:27 - 00000000 ____D C:\Program Files (x86)\Renesas Electronics
2013-09-19 02:51 - 2012-11-13 00:16 - 00000000 ____D C:\Program Files (x86)\pdfsam
2013-09-19 02:51 - 2012-11-02 23:15 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-09-19 02:51 - 2012-07-22 18:08 - 00000000 ____D C:\Program Files (x86)\Quadriga Games
2013-09-19 02:51 - 2012-03-25 23:13 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-09-19 02:50 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-09-19 02:50 - 2013-09-03 13:37 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-19 02:50 - 2013-08-18 13:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-19 02:50 - 2013-06-26 19:17 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-19 02:50 - 2013-03-14 23:18 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-09-19 02:50 - 2012-12-02 17:10 - 00000000 ____D C:\Program Files (x86)\MuseScore
2013-09-19 02:50 - 2012-11-02 23:07 - 00000000 ____D C:\Program Files (x86)\Origin
2013-09-19 02:50 - 2012-09-10 19:25 - 00000000 ____D C:\Program Files (x86)\Mp3tag
2013-09-19 02:50 - 2012-05-06 12:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-19 02:50 - 2012-03-26 20:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 9.0
2013-09-19 02:50 - 2012-03-26 20:21 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2013-09-19 02:50 - 2012-03-25 22:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-09-19 02:50 - 2012-03-25 22:29 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-09-19 02:50 - 2012-03-25 22:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2013-09-19 02:50 - 2012-03-25 22:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-19 02:50 - 2012-03-25 22:00 - 00000000 ____D C:\Program Files (x86)\JMicron
2013-09-19 02:49 - 2013-06-16 22:26 - 00000000 ____D C:\Program Files (x86)\Convar
2013-09-19 02:49 - 2013-06-01 12:27 - 00000000 ____D C:\Program Files (x86)\Elgato
2013-09-19 02:49 - 2012-12-28 23:15 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client
2013-09-19 02:49 - 2012-12-20 13:45 - 00000000 ____D C:\Program Files (x86)\FreePDF_XP
2013-09-19 02:49 - 2012-09-14 18:31 - 00000000 ____D C:\Program Files (x86)\eXpress CheckSum Calculator
2013-09-19 02:49 - 2012-05-15 21:10 - 00000000 ____D C:\Program Files (x86)\eRightSoft
2013-09-19 02:49 - 2012-04-23 11:43 - 00000000 ____D C:\Program Files (x86)\ESM-Tools
2013-09-19 02:49 - 2012-03-26 20:24 - 00000000 ____D C:\Program Files (x86)\IrfanView
2013-09-19 02:49 - 2012-03-26 20:21 - 00000000 ____D C:\Program Files (x86)\gs
2013-09-19 02:49 - 2012-03-26 20:11 - 00000000 ____D C:\Program Files (x86)\Corel
2013-09-19 02:49 - 2012-03-25 22:32 - 00000000 ____D C:\Program Files (x86)\Creative
2013-09-19 02:49 - 2012-03-25 22:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-19 02:49 - 2012-03-25 22:27 - 00000000 ____D C:\Program Files (x86)\Hotkey
2013-09-19 02:49 - 2012-03-25 21:59 - 00000000 ____D C:\Program Files (x86)\Intel
2013-09-19 02:48 - 2013-02-15 20:15 - 00000000 ____D C:\Program Files (x86)\Biet-O-Matic
2013-09-19 02:48 - 2012-09-30 13:48 - 00000000 ____D C:\Program Files (x86)\AviSynth 2.5
2013-09-19 02:48 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-09-19 02:48 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-09-19 02:48 - 2012-05-22 19:37 - 00000000 ____D C:\Program Files (x86)\Amazon
2013-09-19 02:48 - 2012-04-09 21:55 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2013-09-19 02:48 - 2012-03-25 23:09 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-09-19 02:48 - 2012-03-25 22:30 - 00000000 ____D C:\Program Files (x86)\ChiconyCam
2013-09-19 02:48 - 2012-03-25 22:30 - 00000000 ____D C:\Program Files (x86)\BisonCam
2013-09-19 02:48 - 2012-03-25 22:10 - 00000000 ____D C:\Program Files (x86)\Cisco
2013-09-19 02:47 - 2012-09-06 17:53 - 00000000 ____D C:\Program Files (x86)\Acronis
2013-09-19 02:47 - 2012-03-25 22:25 - 00000000 ____D C:\Program Files\WinRAR
2013-09-19 02:45 - 2013-09-06 10:33 - 00000000 ____D C:\Program Files\Western Digital
2013-09-19 02:45 - 2012-10-21 17:54 - 00000000 ____D C:\Program Files\Recuva
2013-09-19 02:45 - 2012-03-25 22:43 - 00000000 ____D C:\Program Files\Protector Suite
2013-09-19 02:44 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-09-19 02:44 - 2013-03-14 23:18 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-09-19 02:44 - 2012-03-25 22:41 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-09-19 02:43 - 2013-09-05 12:56 - 00000000 ____D C:\Program Files\Common Files\Common Desktop Agent
2013-09-19 02:43 - 2013-09-03 13:37 - 00000000 ____D C:\Program Files\iTunes
2013-09-19 02:43 - 2013-09-03 13:37 - 00000000 ____D C:\Program Files\iPod
2013-09-19 02:43 - 2013-05-20 18:12 - 00000000 ____D C:\Program Files\Common Files\Western Digital
2013-09-19 02:43 - 2013-02-02 11:56 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-09-19 02:43 - 2012-09-22 23:37 - 00000000 ____D C:\Program Files\Handbrake
2013-09-19 02:43 - 2012-09-02 15:44 - 00000000 ____D C:\Program Files\A-FF Find and Mount
2013-09-19 02:43 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-09-19 02:43 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files\Bonjour
2013-09-19 02:43 - 2012-03-25 22:43 - 00000000 ____D C:\Program Files\Common Files\SPBA
2013-09-19 02:43 - 2012-03-25 22:25 - 00000000 ____D C:\Program Files\Microsoft Office
2013-09-19 02:43 - 2012-03-25 22:10 - 00000000 ____D C:\Program Files\Intel
2013-09-19 02:43 - 2012-03-25 22:10 - 00000000 ____D C:\Program Files\Common Files\Intel
2013-09-19 02:43 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Vorlagen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Startmenü
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Netzwerkumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Lokale Einstellungen
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Eigene Dateien
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Druckumgebung
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Musik
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Bilder
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Verlauf
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Anwendungsdaten
2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Anwendungsdaten
2013-09-19 02:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-09-19 02:39 - 2013-09-19 02:39 - 00001355 _____ C:\Windows\TSSysprep.log
2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf
2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf
2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____D C:\Program Files\AuthenTec
2013-09-19 02:39 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2013-09-19 02:38 - 2013-09-19 02:38 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-09-19 02:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files\Realtek
2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____D C:\Program Files\Synaptics
2013-09-19 01:54 - 2012-03-25 21:47 - 01939773 _____ C:\Windows\WindowsUpdate (1).log
2013-09-19 01:17 - 2013-09-19 00:51 - 00003376 _____ C:\Users\****\Desktop\Windows-Kompatibilitätsbericht.htm
2013-09-19 01:14 - 2013-09-19 00:43 - 00002544 _____ C:\Windows\diagwrn.xml
2013-09-19 01:14 - 2013-09-19 00:43 - 00001890 _____ C:\Windows\diagerr.xml
2013-09-18 22:06 - 2013-09-19 14:19 - 02850416 _____ C:\Users\****\Desktop\Sicherungskopie_von_flic.cdr
2013-09-18 21:55 - 2013-09-18 21:48 - 423572207 _____ C:\Users\****\Downloads\Windows6.1-KB947821-v28-x64.msu
2013-09-18 13:14 - 2013-09-18 13:14 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-09-18 13:12 - 2013-09-18 13:12 - 00614816 _____ C:\Users\****\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe
2013-09-17 13:36 - 2012-12-20 13:47 - 00000000 ____D C:\Users\****\AppData\Local\FreePDF_XP
2013-09-17 12:59 - 2013-09-17 12:59 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\****\Downloads\jDownloaderWebInstaller09581.exe
2013-09-17 12:00 - 2013-09-17 11:48 - 71710551 _____ C:\Users\****\Downloads\DIBwe.rar
2013-09-16 20:59 - 2012-03-26 20:31 - 00000099 _____ C:\Users\Public\LMDebug.log
2013-09-16 16:30 - 2013-09-16 16:30 - 00003179 _____ C:\Users\****\Desktop\Secure Download Manager.lnk
2013-09-12 23:36 - 2013-09-12 22:43 - 00010089 _____ C:\Users\****\AppData\Roaming\Durch Trennzeichen getrennte Werte.CAL
2013-09-06 10:33 - 2012-03-25 22:10 - 00108534 _____ C:\Windows\DPINST.LOG
2013-09-06 08:50 - 2013-09-06 08:50 - 00367200 _____ (Acronis) C:\Windows\system32\Drivers\afcdp.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 01120032 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 00183224 _____ (Acronis) C:\Windows\system32\Drivers\tib_mounter.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 00161568 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vididr.sys
2013-09-06 08:49 - 2013-09-06 08:49 - 00001205 _____ C:\Users\Public\Desktop\True Image 2013.lnk
2013-09-06 08:49 - 2012-10-23 18:28 - 01462560 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tdrpman.sys
2013-09-06 08:49 - 2012-10-23 17:45 - 00117024 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vidsflt.sys
2013-09-06 08:49 - 2012-10-23 17:44 - 00108832 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\fltsrv.sys
2013-09-06 08:49 - 2012-09-06 17:53 - 00233760 _____ (Acronis) C:\Windows\system32\Drivers\snapman.sys
2013-09-03 13:37 - 2013-09-03 13:37 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-09-02 13:01 - 2013-09-02 12:56 - 00000000 ____D C:\Windows\pss
2013-09-02 12:01 - 2012-07-22 18:19 - 00098951 _____ C:\Windows\DirectX.log
2013-09-02 12:00 - 2013-09-02 12:00 - 00002490 _____ C:\Users\Public\Desktop\Tom Clancy's Splinter Cell® Blacklist™.lnk
2013-09-01 21:22 - 2013-09-01 21:22 - 00001205 _____ C:\Users\****\Desktop\Uplay.lnk
2013-09-01 17:08 - 2013-09-19 13:59 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-22 17:48 - 2012-04-01 10:25 - 00000687 _____ C:\Windows\wiso.ini
2013-08-22 08:16 - 2013-08-22 08:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf

Some content of TEMP:
====================
C:\Users\****\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-19 04:49

==================== End Of Log ============================

Addition

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-09-2013
Ran by **** at 2013-09-21 13:01:56
Running from C:\Users\****\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs ======================

Acronis True Image WD*Edition (x32 Version: 13.0.14189)
Adobe Acrobat 7.0 Professional - English, Français, Deutsch (x32 Version: 7.1.0)
Adobe Acrobat 7.1.0 Professional - English, Français, Deutsch (x32 Version: 7.1.0)
Adobe Bridge 1.0 (x32 Version: 001.000.001)
Adobe Common File Installer (x32 Version: 1.00.002)
Adobe Creative Suite 2 (x32)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Help Center 1.0 (x32 Version: 001.000.0002)
Adobe Illustrator CS2 (x32 Version: 12.000.000)
Adobe InCopy CS2 (x32 Version: 004.000.000)
Adobe InDesign CS2 (x32 Version: 004.000.000)
Adobe Photoshop CS2 (x32 Version: 9.0)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.4.634)
Adobe SVG Viewer 3.0 (x32 Version:  3.0)
Adobe Version Cue CS2 (x32 Version: 2.0)
Amazon Kindle (HKCU)
Amazon MP3-Downloader 1.0.9 (x32)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Ashampoo Burning Studio 2012 CBE v.11.0.4 (x32 Version: 11.0.4)
AttachmentsManager 1.8.5 (x32 Version: 1.8.5)
BisonCam (x32 Version: 9.2.1.71.34)
Bonjour (Version: 3.0.0.10)
ChangeNames 5.0.4 (x32 Version: 5.0.4)
ChiconyCam (x32 Version: 1.0.43.1129)
Cisco WebEx Meetings (HKCU)
Common Desktop Agent (Version: 1.62.0)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.0.686)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686)
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686)
CorelDRAW Graphics Suite X5 - BR (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Capture (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Common (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Connect (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Custom Data (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - DE (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Draw (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - EN (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - ES (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Extra Content (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Extra Content (x32)
CorelDRAW Graphics Suite X5 - Filters (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - FontNav (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - FR (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - IPM (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - IT (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - NL (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - PHOTO-PAINT (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - Photozoom Plugin (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Redist (x32 Version: 15.0)
CorelDRAW Graphics Suite X5 - Setup Files (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - VBA (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - VideoBrowser (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - VSTA (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 - WT (x32 Version: 15.3)
CorelDRAW Graphics Suite X5 (x32 Version: 15.3)
CorelDRAW(R) Graphics Suite X5 (x32 Version: 15.2.0.686)
CustomAnniversaries 2.1.14 (x32 Version: 2.1.14)
CustomBirthdays 2.1.14 (x32 Version: 2.1.14)
D3DX10 (x32 Version: 15.4.2368.0902)
Data Lifeguard Diagnostic for Windows 1.24 (x32)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
EditContacts 2.0.14 (x32 Version: 2.0.14)
Emergency 2013 (x32)
ESM-Installer (x32)
EyeTV Netstream for Windows Media Center (x32 Version: 1.01.00.16)
FileZilla Client 3.7.3 (x32 Version: 3.7.3)
Find and Mount 2.32 (Version: 2.32)
FormatNumbers 7.5.0 (x32 Version: 7.5.0)
Fotogalerie (x32 Version: 16.4.3505.0912)
FreePDF (Remove only) (x32)
FUSSBALL MANAGER 13 (x32 Version: 1.0.3.0)
Ghostscript GPL 8.64 (Msi Setup) (x32 Version: 8.64)
HandBrake 0.9.8 (x32 Version: 0.9.8)
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (x32 Version: 1)
Hotkey 3.3017 (x32 Version: 3.3017)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1118)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2932)
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.2.0000)
IrfanView (remove only) (x32 Version: 4.32)
iTunes (Version: 11.0.5.5)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
JMicron Ethernet Adapter NDIS Driver (x32 Version: 6.0.24.7)
JMicron Flash Media Controller Driver (x32 Version: 1.0.54.1)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4.5
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4535.1004)
Microsoft Office Project MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Project Professional 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Visio 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Visio MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Project Professional 2010 (x32 Version: 14.0.7015.1000)
Microsoft Security Client (Version: 4.3.0215.0)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Security Essentials (Version: 4.3.215.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visio Premium 2010 (x32 Version: 14.0.7015.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (x32 Version: 9.0.30729)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Movie Maker (x32 Version: 16.4.3505.0912)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
Mp3tag v2.52 (x32 Version: v2.52)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MuseScore 1.2 MuseScore score typesetter (x32 Version: 1.2.0)
NVIDIA Grafiktreiber 310.90 (Version: 310.90)
NVIDIA Install Application (Version: 2.1002.95.599)
NVIDIA Optimus 1.11.3 (Version: 1.11.3)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Systemsteuerung 310.90 (Version: 310.90)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4535.1004)
Office 15 Click-to-Run Licensing Component (Version: 15.0.4535.1004)
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4535.1004)
Origin (x32 Version: 9.0.15.65)
PDF24 Creator 5.4.0 (x32)
pdfsam (HKCU Version: 2.2.1)
Photo Gallery (x32 Version: 16.4.3505.0912)
Protector Suite 2009 (Version: 5.9.3.6379)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6233)
Recuva (Version: 1.43)
RedMon - Redirection Port Monitor
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0)
Samsung Easy Printer Manager (x32 Version: 1.03.09.00(08.03.2013))
Samsung Easy Wireless Setup (x32 Version: 3.60.05)
Secure Download Manager (x32 Version: 3.1.10)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32)
SetIP (x32 Version: 1.04.01.00)
Sid Meier's Civilization V (x32)
SimCity™ (x32 Version: 1.0.0.0)
Skype™ 6.7 (x32 Version: 6.7.102)
Smart Data Recovery v4.3 (x32 Version: 4.3)
SonyEditor (remove only) (x32)
Spybot - Search & Destroy (x32 Version: 2.1.21)
Steam (x32 Version: 1.0.0.0)
StreamTransport version: 1.0.2.2171 (x32)
SUPER © v2012.build.51 (April 7, 2012) Version v2012.build.51 (x32 Version: v2012.build.51)
Synaptics Pointing Device Driver (Version: 15.0.8.0)
TeamViewer 8 (x32 Version: 8.0.20935)
TerraTec Home Cinema (x32 Version: 6.28.8)
THX TruStudio Pro (x32 Version: TAMB-CVS1D-1-LB R07)
Tom Clancy's Splinter Cell® Blacklist™ (x32 Version: 1.02)
True Image 2013 (x32 Version: 16.0.6514)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553157) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760758) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Uplay (x32 Version: 3.0)
Visual Basic for Applications (R) Core - English (x32 Version: 6.4.99.69)
Visual Basic for Applications (R) Core - German (x32 Version: 6.4.99.69)
Visual Basic for Applications (R) Core (x32 Version: 6.4.99.69)
VLC media player 2.0.1 (x32 Version: 2.0.1)
Wartung Samsung ML-2525W Series (x32)
WD Quick View (x32 Version: 2.2.0.8)
WD SmartWare (Version: 2.2.0.8)
WD SmartWare Installer (x32 Version: 2.2.0.8)
WEB.DE Club SmartFax (x32 Version: 2.00.223)
WebCam Installer (x32 Version: 3.32)
WebEx Schulungsmanager für Firefox oder Chrome (x32 Version: 5.29.3202)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)
WISO Steuer-Sparbuch 2013 (x32 Version: 20.00.8137)

==================== Restore Points  =========================

19-09-2013 01:50:47 Windows Update
19-09-2013 10:31:49 Windows Update
19-09-2013 11:20:18 Windows Update
19-09-2013 12:29:54 Windows Update
19-09-2013 12:33:52 Windows Update
20-09-2013 00:02:57 Windows Update
20-09-2013 08:27:29 Windows Update
20-09-2013 13:18:50 Windows Update
20-09-2013 16:50:17 Windows Update
20-09-2013 17:08:35 Windows Update
20-09-2013 22:08:44 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-09-19 16:51 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {05799850-53E8-4FF7-984B-B704CB7D3AA1} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-07-22] (Microsoft Corporation)
Task: {0831465C-3ACB-4CC8-A28E-3BC22A8D065B} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {2FD72F9A-DD9F-419E-BFA5-0C51A0C6BAC9} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-21] (Microsoft Corporation)
Task: {4BC35937-9FBA-47E4-A711-3E76DF30D221} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-09-13] (Microsoft Corporation)
Task: {5A0D0AB1-3FE5-46DE-B8C7-B34FB26005C5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {69D1F12C-F8F9-473A-AE1D-6DFB8B1EDC6D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {7020F111-57EE-4ED1-9284-7363A7B2CF84} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {A1D60D55-A6B8-401B-BC05-2938E02DF2F2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe
Task: {A8E2441C-4128-421A-A19B-5882F581EE33} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {AEE3A20F-B242-4771-AB4B-3A8F21AC69C5} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation)
Task: {BB9BDF00-B058-4B1F-8412-CD087AE2DF14} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)
Task: {C4E8B14A-4159-4C58-BDAD-281DBBFC97E8} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => d:\program files\windows defender\MpCmdRun.exe
Task: {FA4B8B2D-CCA2-45FD-948C-AE35EDBFB833} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {FCD0E786-5EF6-484D-AEA3-109B5CB90B08} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-09-13] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-03-27 22:39 - 2013-03-27 22:39 - 00021824 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\x64\ti_managers_proxy_stub.dll
2012-12-14 02:42 - 2012-12-14 02:42 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2011-04-06 00:26 - 2011-04-06 00:26 - 00261536 _____ (Corel Corporation) c:\Program Files (x86)\Common Files\Corel\Shared\Shell\Extension\x64\ShellXP.dll
2011-04-06 00:25 - 2011-04-06 00:25 - 00800160 _____ (Corel Corporation) c:\Program Files (x86)\Common Files\Corel\Shared\Shell\Extension\x64\FileInfoProvider.dll
2012-12-14 02:42 - 2012-12-14 02:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-03-25 22:29 - 2012-03-25 22:23 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2012-03-25 22:29 - 2012-03-25 22:23 - 02654824 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2012-03-09 09:58 - 2012-03-09 09:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2011-07-27 20:07 - 2011-07-27 20:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2012-03-25 22:32 - 2010-11-12 12:38 - 00241152 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2013-06-01 12:27 - 2012-08-30 14:17 - 00021504 _____ (eMPIA Technology, Inc.) C:\Program Files (x86)\Common Files\TerraTec\Remote\BDADLL.dll
2010-06-25 10:38 - 2010-06-25 10:38 - 00218112 _____ (TODO: <公司名稱>) C:\Program Files (x86)\Hotkey\GetProductdll.dll
2010-08-20 10:15 - 2010-08-20 10:15 - 00220160 _____ (TODO: <公司名稱>) C:\Program Files (x86)\Hotkey\powerlife.dll
2009-06-06 14:50 - 2009-06-06 14:50 - 00019968 _____ () C:\Program Files (x86)\Hotkey\Audiodll.dll
2013-01-30 23:05 - 2006-01-12 22:20 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\acrotray.deu
2013-01-30 23:05 - 2006-01-12 22:13 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\acrotray.FRA
2013-01-10 13:43 - 2013-01-10 13:43 - 00014360 _____ () C:\Program Files (x86)\Common Files\Acronis\TibMounter\icudt38.dll
2005-04-06 17:53 - 2005-04-06 17:53 - 00425984 _____ (Adobe Systems Incorporated) c:\Adobe\Adobe Version Cue CS2\bin\AdobeUpdater.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 00053608 _____ (Open Source Software community project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-03-25 22:20 - 2012-03-25 22:20 - 00096904 _____ (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll
2012-03-25 23:13 - 2013-03-20 14:38 - 00057384 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\Settings.dll
2012-03-25 23:13 - 2013-03-20 14:38 - 00395304 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\NotifyIcon.dll
2012-03-25 23:13 - 2013-03-20 14:38 - 00047144 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\Language.dll
2012-03-25 23:13 - 2013-03-20 14:38 - 00382504 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\About.dll
2013-09-18 13:14 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-09-18 13:14 - 2013-05-16 10:55 - 03643800 _____ (Project JEDI) C:\Program Files (x86)\Spybot - Search & Destroy 2\Jcl150.bpl
2013-09-18 13:14 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2012-03-25 22:32 - 2010-11-01 17:34 - 00159744 _____ () C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\de-DE\THXAudio.resources.dll
2013-03-28 00:37 - 2013-03-28 00:37 - 13627872 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers.dll
2012-11-21 20:16 - 2013-09-12 10:31 - 00362336 _____ (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Resource_de.dll
2012-11-21 20:16 - 2013-09-12 10:31 - 03031904 _____ (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_StaticRes.dll
2012-11-21 20:16 - 2013-09-12 10:22 - 00095584 _____ (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.dll

==================== Alternate Data Streams (whitelisted) ======


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/21/2013 00:58:03 PM) (Source: EyeTV Netstream) (User: )
Description: UPnpFindNetstreamDevices() FAILED

Error: (09/21/2013 00:58:03 PM) (Source: EyeTV Netstream) (User: )
Description: .NET EXCEPTION
System.Runtime.InteropServices.COMException (0x80070420): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80070420.
   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)

Error: (09/21/2013 00:57:50 PM) (Source: Bonjour Service) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   22 103.0.168.192.in-addr.arpa. PTR ****-PC.local.

Error: (09/21/2013 00:57:50 PM) (Source: Bonjour Service) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.103:5353   24 103.0.168.192.in-addr.arpa. PTR ****-PC-2.local.

Error: (09/21/2013 00:57:44 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/21/2013 00:57:42 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName1".
Die Einstellung "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName" ist nicht registriert.

Error: (09/21/2013 00:57:10 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: CECPLFKT.exe, Version: 0.9.1.1030, Zeitstempel: 0x4aefec4e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1072
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00039393
ID des fehlerhaften Prozesses: 0xab0
Startzeit der fehlerhaften Anwendung: 0xCECPLFKT.exe0
Pfad der fehlerhaften Anwendung: CECPLFKT.exe1
Pfad des fehlerhaften Moduls: CECPLFKT.exe2
Berichtskennung: CECPLFKT.exe3

Error: (09/21/2013 00:51:30 PM) (Source: EyeTV Netstream) (User: )
Description: UPnpFindNetstreamDevices() FAILED

Error: (09/21/2013 00:51:30 PM) (Source: EyeTV Netstream) (User: )
Description: .NET EXCEPTION
System.Runtime.InteropServices.COMException (0x80004005): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80004005.
   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)

Error: (09/21/2013 00:46:59 PM) (Source: EyeTV Netstream) (User: )
Description: UPnpFindNetstreamDevices() FAILED


System errors:
=============
Error: (09/21/2013 01:00:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (09/21/2013 01:00:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (09/21/2013 00:57:57 PM) (Source: Service Control Manager) (User: )
Description: Dienst "CECFLPKT" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/21/2013 00:57:42 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%14001

Error: (09/21/2013 00:48:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (09/21/2013 00:48:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (09/21/2013 00:46:57 PM) (Source: Service Control Manager) (User: )
Description: Dienst "CECFLPKT" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/21/2013 00:46:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%14001

Error: (09/21/2013 00:09:02 AM) (Source: DCOM) (User: )
Description: {C3D84F57-9904-4F7D-8D79-1D72DAD51ADC}

Error: (09/20/2013 07:12:46 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069


Microsoft Office Sessions:
=========================
Error: (09/21/2013 00:58:03 PM) (Source: EyeTV Netstream)(User: )
Description: UPnpFindNetstreamDevices() FAILED

Error: (09/21/2013 00:58:03 PM) (Source: EyeTV Netstream)(User: )
Description: .NET EXCEPTION
System.Runtime.InteropServices.COMException (0x80070420): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80070420.
   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)

Error: (09/21/2013 00:57:50 PM) (Source: Bonjour Service)(User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   22 103.0.168.192.in-addr.arpa. PTR ****-PC.local.

Error: (09/21/2013 00:57:50 PM) (Source: Bonjour Service)(User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.103:5353   24 103.0.168.192.in-addr.arpa. PTR ****-PC-2.local.

Error: (09/21/2013 00:57:44 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/21/2013 00:57:42 PM) (Source: SideBySide)(User: )
Description: hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayNameC:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

Error: (09/21/2013 00:57:10 PM) (Source: Application Error)(User: )
Description: CECPLFKT.exe0.9.1.10304aefec4entdll.dll6.1.7601.1822951fb1072c000000500039393ab001ceb6b9449aff65C:\Program Files (x86)\ChiconyCam\CECPLFKT.exeC:\Windows\SysWOW64\ntdll.dll8fcbfed5-22ac-11e3-b075-0090f5bcd228

Error: (09/21/2013 00:51:30 PM) (Source: EyeTV Netstream)(User: )
Description: UPnpFindNetstreamDevices() FAILED

Error: (09/21/2013 00:51:30 PM) (Source: EyeTV Netstream)(User: )
Description: .NET EXCEPTION
System.Runtime.InteropServices.COMException (0x80004005): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80004005.
   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)

Error: (09/21/2013 00:46:59 PM) (Source: EyeTV Netstream)(User: )
Description: UPnpFindNetstreamDevices() FAILED


CodeIntegrity Errors:
===================================
  Date: 2013-09-21 12:56:28.187
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-21 12:56:28.156
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-21 12:56:28.124
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-21 12:56:28.093
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-21 12:56:28.046
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-21 12:56:28.015
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-21 12:45:54.263
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-21 12:45:54.232
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-21 12:45:54.185
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-21 12:45:54.154
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 29%
Total physical RAM: 8099.07 MB
Available physical RAM: 5720.05 MB
Total Pagefile: 16196.32 MB
Available Pagefile: 13629.97 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:457.85 GB) (Free:238.57 GB) NTFS
Drive d: (DVDHERGOLSHUSER) (CDROM) (Total:2.69 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 7C4C6991)
Partition 1: (Not Active) - (Size=8 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=458 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Zitat:

Zitat von M-K-D-B

Gibt es noch Probleme mit LyriXeeker in einem Browser? Wenn ja, welche?

Ich habe jetzt 10 Minuten getestet und mir sind keine Problematiken mehr aufgefallen. Weder Spam-Links noch leere Seiten. Super, danke schonmal.

M-K-D-B · 21.09.2013, 15:15

Servus,

Schritt 1

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 2
Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Bitte poste mit deiner nächsten Antwort

die Logdatei von ESET,
die Logdatei von SecurityCheck.

e.rico · 23.09.2013, 05:17

ESET

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=cfe65ee4716dc7419302e1d51680ad8b
# engine=15219
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-22 09:07:11
# local_time=2013-09-22 11:07:11 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 290815 131513881 0 0
# scanned=292849
# found=0
# cleaned=0
# scan_time=12774

Security Check

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.73  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
Microsoft Security Essentials   
 Antivirus up to date!  
`````````Anti-malware/Other Utilities Check:````````` 
 Spybot - Search & Destroy 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 25  
 Adobe Flash Player 11.8.800.168  
 Adobe Reader 10.1.8 Adobe Reader out of Date!  
 Mozilla Firefox (23.0.1) 
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials MSMpEng.exe 
 Microsoft Security Essentials msseces.exe 
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Spybot Teatimer.exe is disabled! 
 Malwarebytes' Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

M-K-D-B · 23.09.2013, 13:05

Servus,

Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber.

Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

Schritt 1
Dein Java ist nicht mehr aktuell. Älter Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.

Downloade dir bitte die neueste Java-Version von hier:
Java Download (32 bit)
Java Download (64 bit)
Speichere die Datei auf deinem Desktop.
Schließe alle laufenden Programme. Speziell deinen Browser.
Starte die Datei. Diese wird die neueste Java Version ( Java 7 Update 40 ) installieren.
Entferne den Haken bei "Installieren Sie die Ask-Toolbar ..." während der Installation.
Wenn die Installation beendet wurde
Start --> Systemsteuerung --> Programme und deinstalliere alle älteren Java Versionen.
Starte deinen Rechner neu sobald alle älteren Versionen deinstalliert wurden.

schneller Plugin-Test: PluginCheck

Schritt 2
Deinstalliere bitte deine aktuelle Version von Adobe Reader
Start--> Systemsteuerung--> Software / Programme deinstallieren--> Adobe Reader
und lade dir die neue Version von Hier herunter-
Entferne den Hacken für den McAfee SecurityScan bzw. Google Chrome.

Schritt 3

Klicke auf > Hilfe > Über Firefox
Warte bis das Update geladen ist, klicke auf Update installieren und lasse Firefox neu starten.
Prüfe bitte, ob weitere Updates vorliegen oder ob Firefox aktuell ist.
Klicke nun auf > Add-ons > > Auf Updates überprüfen
Nach einem weiteren Neustart von Firefox sollte alles aktuell sein.

Prüfe bitte auch (regelmässig) ob folgende Links fehlende Updates bei deinen Plugins zeigen:

Schritt 4
Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Schritt 5
Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems.

Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher, dass du immer nur eine Anti-Viren Software installiert hast und dass diese auch up to date ist!

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion bietet zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
WOT (Web of trust)
Dieses AddOn warnt dich, bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt, wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC

Halte dich fern von Registry Cleanern.
Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link:
Miekemoes Blogspot ( MVP )

Was du vermeiden solltest:

Klicke nicht auf alles, nur weil es dich dazu auffordert und schön bunt ist.
Verwende keine P2P oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie z.B. deinFoto.jpg.exe.

Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen?

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.