|
Log-Analyse und Auswertung: Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
02.11.2013, 18:50 | #1 |
| Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner? Hallo, ich bitte um Hilfe. Ich habe Win 8.1 und unter Systemsteuerung/Verwaltung keine Dienste mehr. Kann es ein Trojaner sein? Hier die hijack This logfile. Danke schonmal im vorraus. HiJackthis Logfile: Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.5 Scan saved at 18:43:31, on 02.11.2013 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.9600.16384) FIREFOX: 24.0 (de) Boot mode: Normal Running processes: C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe C:\Program Files (x86)\ASUS\Splendid\ACMON.exe C:\Users\Daniel\AppData\Local\Pokki\Engine\pokki.exe C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe C:\Users\Daniel\AppData\Local\Pokki\Engine\pokki.exe C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe C:\Users\Daniel\AppData\Local\Pokki\Engine\pokki.exe C:\Program Files (x86)\Internet Explorer\IELowutil.exe C:\Users\Daniel\Downloads\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=DE&userid=2a87a9ac-aab4-f6cf-e8e6-f514be695113&searchtype=ds&q={searchTerms}&installDate=12/09/2013 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=DE&userid=2a87a9ac-aab4-f6cf-e8e6-f514be695113&searchtype=ds&q={searchTerms}&installDate=12/09/2013 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=DE&userid=2a87a9ac-aab4-f6cf-e8e6-f514be695113&searchtype=ds&q={searchTerms}&installDate=12/09/2013 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=DE&userid=2a87a9ac-aab4-f6cf-e8e6-f514be695113&searchtype=ds&q={searchTerms}&installDate=12/09/2013 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O4 - HKLM\..\Run: [GDFirewallTray] C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe O4 - HKLM\..\Run: [G Data AntiVirus Tray] C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - (no file) O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe O23 - Service: G Data AntiVirus Proxy (AVKProxy) - G Data Software AG - C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe O23 - Service: G Data Scheduler (AVKService) - G Data Software AG - C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe O23 - Service: G Data Dateisystem Wächter (AVKWCtl) - G Data Software AG - C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe O23 - Service: @oem10.inf,%WIN32_DPTF_PARTICIPANT_PROC_SERVICE_DISPLAY_NAME%;Intel(R) Dynamic Platform and Thermal Framework Processor Participant Service Application (DptfParticipantProcessorService) - Unknown owner - C:\WINDOWS\system32\DptfParticipantProcessorService.exe (file missing) O23 - Service: @oem10.inf,%WIN32_DPTF_POLICY_CONFIGTDP_SERVICE_DISPLAY_NAME%;Intel(R) Dynamic Platform and Thermal Framework Config TDP Service Application (DptfPolicyConfigTDPService) - Unknown owner - C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: G Data Personal Firewall (GDFwSvc) - G Data Software AG - C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe O23 - Service: G Data Scanner (GDScan) - G Data Software AG - C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: System Store (SystemStoreService) - Unknown owner - C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 9770 bytes Geändert von Mikrobi (02.11.2013 um 18:59 Uhr) |
02.11.2013, 23:06 | #2 |
/// the machine /// TB-Ausbilder | Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner? hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
03.11.2013, 20:33 | #3 |
| Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner? FRST Logfile:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013 Ran by Daniel (administrator) on PCDANIEL on 03-11-2013 20:28:01 Running from C:\Users\Daniel\Desktop Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (Intel Corporation) C:\WINDOWS\system32\DptfParticipantProcessorService.exe (Microsoft Corporation) C:\WINDOWS\system32\dashost.exe (Intel Corporation) C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe () C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20279_x64__8wekyb3d8bbwe\LiveComm.exe (Pokki) C:\Users\Daniel\AppData\Local\Pokki\Engine\pokki.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (Pokki) C:\Users\Daniel\AppData\Local\Pokki\Engine\pokki.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (Microsoft Corporation) C:\Windows\System32\skydrive.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe (Pokki) C:\Users\Daniel\AppData\Local\Pokki\Engine\pokki.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\System32\WWAHost.exe (Microsoft Corporation) C:\WINDOWS\WinStore\WSHost.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVK.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HotKeysCmds] - "C:\WINDOWS\system32\hkcmd.exe" HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13267016 2013-01-23] (Realtek Semiconductor) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028896 2013-09-19] (NVIDIA Corporation) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) MountPoints2: {89687731-0fa8-11e3-be83-74d02b1d7fcf} - "F:\PMCsetup.exe" HKLM-x32\...\Run: [GDFirewallTray] - C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG) HKLM-x32\...\Run: [G Data AntiVirus Tray] - C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG) AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll [168616 2013-10-16] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-10-16] (NVIDIA Corporation) IMEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\excel.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\msoxmled.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\mstore.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\offdiag.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\tubebox.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\winword.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=DE&userid=2a87a9ac-aab4-f6cf-e8e6-f514be695113&searchtype=ds&q={searchTerms}&installDate=12/09/2013 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=DE&userid=2a87a9ac-aab4-f6cf-e8e6-f514be695113&searchtype=ds&q={searchTerms}&installDate=12/09/2013 SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=DE&userid=2a87a9ac-aab4-f6cf-e8e6-f514be695113&searchtype=ds&q={searchTerms}&installDate=12/09/2013 SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=DE&userid=2a87a9ac-aab4-f6cf-e8e6-f514be695113&searchtype=ds&q={searchTerms}&installDate=12/09/2013 SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {02818974-95E8-4BA4-B42C-5A7325F96661} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10447 SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0CFC4C07-694D-4152-80D2-C40C9B8A2F4E} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10447 SearchScopes: HKCU - {F3694D8B-6F74-4907-90BD-477FF8ACFF04} URL = hxxp://search.us.com/serp?guid={071A517C-2D40-4FE8-B7E9-AE9096168B40}&action=default_search&serpv=5&k={searchTerms} BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default FF user.js: detected! => C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\user.js FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll No File FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: pokki.com/PokkiDownloadHelper - C:\Users\Daniel\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.2.0.78.dll (Pokki) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: PrefBar - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\{8A6C82A1-F6C9-481a-AAE7-C96444C9A754} FF Extension: DownloadHelper - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: elemhidehelper - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\elemhidehelper@adblockplus.org.xpi FF Extension: jid1-F9UJ2thwoAm5gQ - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\jid1-F9UJ2thwoAm5gQ@jetpack.xpi FF Extension: Noia4Options - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\Noia4Options@ArisT2.xpi FF Extension: NoiaFoxoption - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\NoiaFoxoption@davidvincent.tld.xpi FF Extension: No Name - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\{7b90e860-5d61-11e0-80e3-0800200c9a66}.xpi FF Extension: No Name - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\{c0c588b6-b11d-4898-af00-079fed05aa32}.xpi FF Extension: Adblock Plus - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: No Name - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\{faf13420-5e24-11e0-80e3-0800200c9a66}.xpi Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION ==================== Services (Whitelisted) ================= S3 AppReadiness; C:\Windows\system32\AppReadiness.dll [533504 2013-09-30] (Microsoft Corporation) R3 AppXSvc; C:\Windows\system32\appxdeploymentserver.dll [1302016 2013-09-30] (Microsoft Corporation) S4 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe [2562208 2013-10-15] (G Data Software AG) R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [31632 2013-01-18] (Intel Corporation) R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [33168 2013-01-18] (Intel Corporation) R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2942808 2013-10-17] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG) S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [111616 2013-08-22] (Microsoft Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) S3 lfsvc; C:\Windows\System32\GeofenceMonitorService.dll [491520 2013-09-30] (Microsoft Corporation) R3 NcbService; C:\Windows\System32\ncbservice.dll [151040 2013-08-22] (Microsoft Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-09-19] (NVIDIA Corporation) S3 ScDeviceEnum; C:\Windows\System32\ScDeviceEnum.dll [130560 2013-08-22] (Microsoft Corporation) S3 smphost; C:\Windows\System32\smphost.dll [13312 2013-08-22] (Microsoft Corporation) S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [296448 2013-10-24] () S3 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-12] (TuneUp Software) S3 vmicguestinterface; C:\Windows\System32\ICSvc.dll [517120 2013-08-22] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) S3 WEPHOSTSVC; C:\Windows\system32\wephostsvc.dll [24576 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) S3 workfolderssvc; C:\Windows\system32\workfolderssvc.dll [1581568 2013-09-30] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R1 ahcache; C:\Windows\System32\DRIVERS\ahcache.sys [76800 2013-08-22] (Microsoft Corporation) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-01-16] (ASUS Corporation) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [107920 2013-01-18] (Intel Corporation) R3 DptfDevFan; C:\Windows\system32\DRIVERS\DptfDevFan.sys [43408 2013-01-18] (Intel Corporation) R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [65424 2013-01-18] (Intel Corporation) R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [229776 2013-01-18] (Intel Corporation) R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [363920 2013-01-18] (Intel Corporation) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-10-11] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-10-11] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [64856 2013-10-11] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [68440 2013-10-22] (G Data Software AG) R1 GRD; C:\WINDOWS\system32\drivers\GRD.sys [106272 2013-11-01] (G Data Software) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-10-11] (G Data Software AG) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-09-30] (Microsoft Corporation) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [56672 2013-08-22] (Microsoft Corporation) S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2013-08-22] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== NETSVC: lfsvc -> C:\Windows\System32\GeofenceMonitorService.dll (Microsoft Corporation) ==================== One Month Created Files and Folders ======== 2013-11-02 19:19 - 2013-11-02 19:19 - 00087496 _____ C:\Users\Daniel\Downloads\FRST.txt 2013-11-02 19:19 - 2013-11-02 19:19 - 00022063 _____ C:\Users\Daniel\Downloads\Addition.txt 2013-11-02 19:18 - 2013-11-02 19:18 - 00000000 ____D C:\FRST 2013-11-02 19:17 - 2013-11-02 19:17 - 01957098 _____ (Farbar) C:\Users\Daniel\Desktop\FRST64.exe 2013-11-02 19:14 - 2013-11-02 19:14 - 05143186 _____ (Swearware) C:\Users\Daniel\Downloads\ComboFix.exe 2013-11-02 19:06 - 2013-11-02 19:06 - 02690376 _____ (Pokki) C:\Users\Daniel\Downloads\PokkiInstaller.exe 2013-11-02 19:06 - 2013-11-02 19:06 - 00822608 _____ (Pokki) C:\Users\Daniel\Downloads\Pokki_Start_MenuSetup.exe 2013-11-02 18:43 - 2013-11-02 18:43 - 00009771 _____ C:\Users\Daniel\Downloads\hijackthis.log 2013-11-02 18:42 - 2013-11-02 18:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Daniel\Downloads\HijackThis.exe 2013-11-02 18:25 - 2013-11-02 18:26 - 00000000 ____D C:\Users\Daniel\Desktop\Broken Social Scene - Forgiveness Rock Records (2010) 2013-11-02 18:23 - 2013-11-02 18:23 - 01791272 _____ (Express Install ) C:\Users\Daniel\Downloads\Setup(2).exe 2013-11-02 18:16 - 2013-11-02 18:24 - 92255472 _____ C:\Users\Daniel\Downloads\Broken_Social_Scene_-_Forgiveness_Rock_Records_(2010).rar 2013-11-01 21:14 - 2013-11-01 21:14 - 00106272 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GRD.sys 2013-11-01 21:14 - 2013-11-01 21:14 - 00019016 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GdPhyMem.sys 2013-11-01 20:59 - 2013-11-01 20:59 - 00000000 __SHD C:\Users\Daniel\Desktop\ts 2013-10-31 08:34 - 2013-10-31 08:34 - 00001368 _____ C:\Users\Daniel\Desktop\autoruns.lnk 2013-10-30 20:33 - 2013-10-30 20:34 - 00000000 ____D C:\Users\Daniel\Desktop\Fieldhead 2013-10-30 18:57 - 2013-10-30 18:58 - 00000000 ____D C:\Users\Daniel\Desktop\Neuer Ordner 2013-10-29 18:19 - 2013-10-29 18:20 - 56188145 _____ C:\Users\Daniel\Downloads\ane_brun_-_changing_of_the_seasons__2008_.rar 2013-10-28 23:49 - 2013-10-28 23:49 - 00000000 ____D C:\Program Files\7-Zip 2013-10-28 23:48 - 2013-10-28 23:48 - 01376768 _____ C:\Users\Daniel\Downloads\7z920-x64.msi 2013-10-28 23:46 - 2013-10-28 23:46 - 16313920 _____ (SWE Sven Ritter) C:\Users\Daniel\Downloads\nw_9386_scxexe.exe 2013-10-28 23:32 - 2013-10-28 23:41 - 110670290 _____ C:\Users\Daniel\Downloads\Wildlife-Strike_Hard_Young_Diamond-WEB-2010-k4(1).rar 2013-10-28 23:13 - 2013-10-28 23:16 - 110670290 _____ C:\Users\Daniel\Downloads\Wildlife-Strike_Hard_Young_Diamond-WEB-2010-k4.rar 2013-10-28 22:44 - 2013-10-28 22:44 - 00001396 _____ C:\Users\Daniel\Desktop\Mp3tag.lnk 2013-10-28 20:43 - 2013-10-28 22:15 - 00000179 ____H C:\Users\Daniel\Desktop\Neues Textdokument.txt 2013-10-28 19:43 - 2013-10-28 20:28 - 138023117 _____ C:\Users\Daniel\Downloads\Arcade_Fire-The_Suburbs-(Deluxe_Edition)-2011-C4.rar 2013-10-28 19:09 - 2013-10-28 19:21 - 70982363 _____ C:\Users\Daniel\Downloads\Good News For People Who Love Bad News.zip 2013-10-28 18:49 - 2013-10-28 18:49 - 00001688 _____ C:\Users\Daniel\Desktop\WORD.lnk 2013-10-28 18:49 - 2013-10-23 12:01 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2013-10-28 18:49 - 2013-10-23 09:59 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2013-10-28 18:48 - 2013-10-28 18:48 - 00001668 _____ C:\Users\Daniel\Desktop\EXCEL.lnk 2013-10-28 18:46 - 2013-10-28 18:46 - 00001699 _____ C:\Users\Daniel\Desktop\POWERPOINT.lnk 2013-10-28 18:40 - 2013-10-28 18:40 - 00001306 _____ C:\Users\Daniel\Desktop\Steam.lnk 2013-10-28 18:39 - 2013-10-28 18:39 - 00001380 _____ C:\Users\Daniel\Desktop\Sonic & SEGA All-Stars Racing.lnk 2013-10-28 18:38 - 2013-10-28 18:38 - 00001574 _____ C:\Users\Daniel\Desktop\TubeBox.lnk 2013-10-28 18:38 - 2013-10-28 18:38 - 00001506 _____ C:\Users\Daniel\Desktop\firefox.lnk 2013-10-28 18:37 - 2013-10-28 18:37 - 00001352 _____ C:\Users\Daniel\Desktop\CDex.lnk 2013-10-28 18:13 - 2013-10-28 18:13 - 00002104 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-10-28 18:12 - 2013-10-28 18:12 - 21976752 _____ (Mozilla) C:\Users\Daniel\Downloads\Thunderbird Setup 24.0.1.exe 2013-10-28 17:46 - 2013-10-28 19:04 - 00000081 _____ C:\Users\Daniel\Downloads\Modest_Mouse-Good_News_for_People_Who_Love_Bad_News.rar 2013-10-28 17:46 - 2013-10-28 18:27 - 58686380 _____ C:\Users\Daniel\Downloads\Modest_Mouse-Good_News_for_People_Who_Love_Bad_News.rar.part 2013-10-27 22:40 - 2013-10-27 22:40 - 00000000 ____D C:\Users\Daniel\AppData\Local\BonanzaDealsLive 2013-10-27 22:40 - 2013-10-27 22:40 - 00000000 ____D C:\ProgramData\BonanzaDealsLive 2013-10-27 22:40 - 2013-10-27 22:39 - 01069568 _____ (Solid State Networks) C:\Users\Daniel\Downloads\Adobe_Reader_setup [1].exe 2013-10-27 22:38 - 2013-10-27 22:38 - 00683016 _____ C:\Users\Daniel\Downloads\Adobe_Reader_setup.exe 2013-10-27 22:32 - 2013-10-27 22:32 - 00000000 ____D C:\Users\Daniel\SystemRequirementsLab 2013-10-27 22:32 - 2013-10-27 22:32 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab 2013-10-27 22:30 - 2013-10-27 22:30 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe 2013-10-27 22:30 - 2013-10-27 22:30 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe 2013-10-27 22:30 - 2013-10-27 22:30 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe 2013-10-27 22:30 - 2013-10-27 22:30 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2013-10-27 22:30 - 2013-10-27 22:30 - 00000000 ____D C:\ProgramData\Sun 2013-10-27 22:30 - 2013-10-27 22:30 - 00000000 ____D C:\ProgramData\Oracle 2013-10-27 22:30 - 2013-10-27 22:30 - 00000000 ____D C:\Program Files (x86)\Java 2013-10-27 22:28 - 2013-10-27 22:28 - 00915368 _____ (Oracle Corporation) C:\Users\Daniel\Downloads\jxpiinstall.exe 2013-10-27 22:28 - 2013-10-27 22:28 - 00915368 _____ (Oracle Corporation) C:\Users\Daniel\Downloads\jxpiinstall(1).exe 2013-10-27 22:25 - 2013-10-27 22:25 - 02816072 _____ (LionSea SoftWare ) C:\Users\Daniel\Downloads\setup(1).exe 2013-10-27 22:12 - 2013-10-27 22:12 - 00000000 ____D C:\Users\Daniel\AppData\Local\DriverTuner 2013-10-27 22:10 - 2013-10-27 22:10 - 02816072 _____ (LionSea SoftWare ) C:\Users\Daniel\Downloads\setup.exe 2013-10-27 22:05 - 2013-10-27 22:05 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-10-27 22:04 - 2013-10-27 22:04 - 00000000 ____D C:\WINDOWS\SysWOW64\NV 2013-10-27 22:04 - 2013-10-27 22:04 - 00000000 ____D C:\WINDOWS\system32\NV 2013-10-27 22:02 - 2013-10-16 01:48 - 30344992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 25256224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 22933280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 18290536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 18243632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 17560352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 15858664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 15244272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 12537632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2013-10-27 22:02 - 2013-10-16 01:48 - 11415232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 11362672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 09516872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 09472600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 03131680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 03124512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 02946848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 02747168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 02694664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433158.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433158.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00696096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00655136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00560416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00479520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00405280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00317472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00266984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2013-10-27 22:01 - 2013-10-27 22:01 - 00000000 ____D C:\NVIDIA 2013-10-27 21:52 - 2013-10-27 21:58 - 258366720 _____ (NVIDIA Corporation) C:\Users\Daniel\Downloads\331.58-notebook-win8-win7-64bit-international-whql.exe 2013-10-27 17:59 - 2013-10-28 18:20 - 00000000 ____D C:\Program Files (x86)\HDCleaner 2013-10-27 17:59 - 2013-10-28 18:15 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDCleaner 2013-10-27 17:59 - 2013-10-27 17:59 - 00001185 _____ C:\Users\Daniel\Desktop\HDCleaner.lnk 2013-10-25 20:24 - 2013-10-28 18:43 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\FLV and Media Player 2013-10-25 20:24 - 2013-10-25 20:24 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\vlc 2013-10-25 20:23 - 2013-10-25 20:23 - 00000000 ____D C:\Program Files (x86)\Applian Technologies 2013-10-25 20:21 - 2013-10-25 20:21 - 01838376 _____ (Express Install ) C:\Users\Daniel\Downloads\FLVPlayer_Setup.exe 2013-10-25 12:15 - 2013-10-25 12:15 - 00000000 ____D C:\Users\Daniel\AppData\Local\Avg2014 2013-10-24 20:48 - 2013-10-24 21:18 - 92180320 _____ C:\Users\Daniel\Downloads\www.NewAlbumReleases.net_Arcade_Fire_-_Reflektor_CD2_(2013).rar 2013-10-24 20:46 - 2013-10-24 21:22 - 109378882 _____ C:\Users\Daniel\Downloads\www.NewAlbumReleases.net_Arcade Fire - Reflektor CD1 (2013).rar 2013-10-24 19:43 - 2013-10-19 06:38 - 23213056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2013-10-24 19:43 - 2013-10-19 05:52 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2013-10-24 19:43 - 2013-10-19 05:33 - 02763776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2013-10-24 19:43 - 2013-10-19 04:59 - 17143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2013-10-24 19:43 - 2013-10-19 04:42 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2013-10-24 19:43 - 2013-10-19 04:19 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2013-10-24 19:43 - 2013-10-19 03:42 - 12995072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2013-10-24 19:43 - 2013-10-19 03:27 - 11222016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2013-10-24 17:38 - 2013-10-24 17:38 - 00000000 ____D C:\Users\Daniel\AppData\Local\TubeBox 2013-10-24 17:32 - 2013-10-24 18:07 - 00000000 ____D C:\Users\Daniel\Documents\TubeBox 2013-10-24 17:32 - 2013-10-24 17:32 - 00000000 ____D C:\Users\Daniel\AppData\Local\Freetec 2013-10-24 17:31 - 2013-10-24 17:31 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Dealply 2013-10-24 17:31 - 2013-10-24 17:31 - 00000000 ____D C:\Users\Daniel\AppData\Local\Google 2013-10-24 17:31 - 2013-10-24 17:31 - 00000000 ____D C:\Users\Daniel\AppData\Local\DealPlyLive 2013-10-24 17:31 - 2013-10-24 17:31 - 00000000 ____D C:\ProgramData\DealPlyLive 2013-10-24 17:27 - 2013-10-24 17:48 - 00000898 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog 2013-10-24 17:26 - 2013-10-28 18:24 - 00004208 _____ C:\WINDOWS\System32\Tasks\Software Updater 2013-10-24 17:26 - 2013-10-24 17:26 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Windows Net Data 2013-10-24 17:26 - 2013-10-24 17:26 - 00000000 ____D C:\ProgramData\Package Cache 2013-10-24 17:26 - 2013-10-24 17:26 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater 2013-10-24 17:26 - 2013-10-24 17:26 - 00000000 ____D C:\Program Files (x86)\Freetec 2013-10-24 17:23 - 2013-10-24 17:24 - 00000000 ____D C:\Users\Daniel\AppData\Local\DownloadGuide 2013-10-24 17:22 - 2013-10-24 17:22 - 00733192 _____ C:\Users\Daniel\Downloads\tubebox_4.4_de-DE.exe 2013-10-24 14:42 - 2013-10-28 23:34 - 00000000 ____D C:\Users\Daniel\Desktop\The Suburbs 2013-10-23 21:41 - 2013-10-23 21:41 - 00002300 _____ C:\WINDOWS\logboot_23.10.2013.tureg.log 2013-10-23 20:49 - 2013-10-23 20:49 - 00002770 _____ C:\WINDOWS\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-10-23 19:31 - 2013-10-30 18:16 - 00000000 ____D C:\Users\Daniel\dwhelper 2013-10-23 07:48 - 2013-10-23 07:48 - 00000000 ____D C:\Program Files (x86)\SEGA 2013-10-20 17:39 - 2013-10-20 17:44 - 17654491 _____ C:\Users\Daniel\Downloads\www.NewAlbumReleases.net_Arcade_Fire_-_Culture_War_Speaking_in_Tongues_(2011).rar 2013-10-19 10:52 - 2013-10-28 18:03 - 00000000 ___RD C:\WINDOWS\BrowserChoice 2013-10-18 20:54 - 2013-11-02 18:07 - 00003934 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{783B4666-F899-4BDF-86B0-76111EDA3981} 2013-10-18 20:29 - 2013-10-12 01:28 - 00040760 _____ (TuneUp Software) C:\WINDOWS\system32\TURegOpt.exe 2013-10-18 20:29 - 2013-10-12 01:28 - 00029496 _____ (TuneUp Software) C:\WINDOWS\system32\authuitu.dll 2013-10-18 20:29 - 2013-10-12 01:28 - 00025400 _____ (TuneUp Software) C:\WINDOWS\SysWOW64\authuitu.dll 2013-10-18 20:28 - 2013-10-18 20:29 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-10-18 20:28 - 2013-10-18 20:28 - 00400760 _____ (Softonic ) C:\Users\Daniel\Downloads\SoftonicDownloader_fuer_ashampoo-winoptimizer-free.exe 2013-10-18 20:27 - 2013-10-18 20:35 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-10-18 20:20 - 2013-10-18 20:21 - 32522152 _____ (TuneUp Software) C:\Users\Daniel\Downloads\TuneUpUtilities2014_de-DE.exe 2013-10-18 17:23 - 2013-10-18 17:23 - 00000017 _____ C:\Users\Daniel\AppData\Local\resmon.resmoncfg 2013-10-18 17:18 - 2013-10-18 17:18 - 00000000 ____D C:\Users\Daniel\AppData\Local\Frameworkx.com 2013-10-18 17:16 - 2013-10-18 17:16 - 01733632 _____ C:\Users\Daniel\Downloads\FxVisor64.msi 2013-10-17 23:08 - 2013-10-18 20:09 - 00000000 ___DC C:\WINDOWS\Panther 2013-10-17 23:08 - 2013-10-17 23:08 - 00000000 __SHD C:\Recovery 2013-10-17 23:07 - 2013-10-17 23:07 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2013-10-17 23:07 - 2013-10-17 23:07 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2013-10-17 23:07 - 2013-10-17 23:07 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2013-10-17 23:06 - 2013-10-17 23:06 - 00262144 _____ C:\WINDOWS\system32\config\userdiff 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files\MSBuild 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-10-17 23:04 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2013-10-17 23:04 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-17 23:04 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2013-10-17 23:04 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2013-10-17 23:04 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-17 23:04 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2013-10-17 22:44 - 2013-10-17 22:44 - 00000000 ____D C:\Users\Daniel\AppData\Local\Intel_Corporation 2013-10-17 22:41 - 2013-11-03 20:24 - 00000000 __RDO C:\Users\Daniel\SkyDrive 2013-10-17 22:37 - 2013-10-17 22:37 - 00001456 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-10-17 22:36 - 2013-10-17 22:36 - 00000020 ___SH C:\Users\Daniel\ntuser.ini 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Programme 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-10-17 22:33 - 2013-10-17 22:33 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat 2013-10-17 22:21 - 2013-10-17 22:21 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2013-10-17 22:21 - 2013-10-17 22:21 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2013-10-17 22:18 - 2013-10-17 22:18 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2013-10-17 22:17 - 2013-10-28 18:15 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-10-17 22:17 - 2013-10-28 18:15 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-17 22:17 - 2013-10-28 18:15 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-10-17 22:17 - 2013-10-28 18:03 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-10-17 22:17 - 2013-10-28 18:03 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-17 22:17 - 2013-10-28 18:03 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-10-17 22:17 - 2013-10-27 22:32 - 00000000 ____D C:\Users\Daniel 2013-10-17 22:17 - 2013-10-17 22:33 - 00028578 _____ C:\WINDOWS\diagwrn.xml 2013-10-17 22:17 - 2013-10-17 22:33 - 00028578 _____ C:\WINDOWS\diagerr.xml 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Vorlagen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Startmenü 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Netzwerkumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Lokale Einstellungen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Eigene Dateien 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Druckumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Documents\Eigene Musik 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Documents\Eigene Bilder 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\AppData\Local\Verlauf 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\AppData\Local\Anwendungsdaten 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Anwendungsdaten 2013-10-17 22:17 - 2013-08-22 16:36 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-10-17 22:17 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevGen_01009.Wdf 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevFan_01009.Wdf 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____D C:\Program Files\Realtek 2013-10-17 22:12 - 2013-10-15 22:47 - 06665504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2013-10-17 22:12 - 2013-10-15 22:47 - 03489568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2013-10-17 22:12 - 2013-10-15 22:47 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2013-10-17 22:12 - 2013-10-15 22:47 - 01064224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2013-10-17 22:12 - 2013-10-15 22:47 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2013-10-17 22:12 - 2013-10-15 22:47 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2013-10-17 22:12 - 2013-10-15 22:47 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2013-10-17 22:12 - 2013-10-15 22:47 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2013-10-17 22:12 - 2013-10-08 20:14 - 03398914 _____ C:\WINDOWS\system32\nvcoproc.bin 2013-10-17 22:11 - 2013-11-02 19:31 - 01875974 _____ C:\WINDOWS\WindowsUpdate.log 2013-10-17 22:11 - 2013-10-17 22:20 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-10-17 22:10 - 2013-10-27 22:05 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-10-17 22:10 - 2013-10-17 22:20 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-10-17 22:10 - 2013-10-17 22:20 - 00000000 ____D C:\Program Files (x86)\Intel 2013-10-17 22:10 - 2013-10-17 22:10 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfManager_01009.Wdf 2013-10-17 22:10 - 2013-10-17 22:10 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevProc_01009.Wdf 2013-10-17 22:10 - 2013-10-17 22:10 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevDram_01009.Wdf 2013-10-17 22:10 - 2013-10-01 12:02 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2013-10-17 22:10 - 2013-10-01 12:02 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2013-10-17 21:48 - 2013-10-17 22:33 - 00006705 _____ C:\WINDOWS\comsetup.log 2013-10-12 18:52 - 2013-10-12 18:52 - 00000000 ____D C:\Users\Daniel\Documents\ASUS 2013-10-12 18:51 - 2013-10-12 18:51 - 00000000 ____D C:\ProgramData\ASUS 2013-10-12 18:50 - 2013-10-12 18:50 - 00000021 _____ C:\Users\Daniel\AppData\Roaming\my_intel.sys 2013-10-11 21:27 - 2013-10-11 21:27 - 02634152 _____ C:\Users\Daniel\Downloads\mp3tagv258setup.exe 2013-10-11 20:03 - 2013-10-11 20:41 - 124196923 _____ C:\Users\Daniel\Downloads\1972---Exile-On-Main-Street.rar 2013-10-11 19:42 - 2013-10-11 19:43 - 52897438 _____ C:\Users\Daniel\Downloads\Elliott Smith - Either Or.rar 2013-10-11 19:28 - 2013-10-11 19:32 - 102188233 _____ C:\Users\Daniel\Downloads\1997 Either.Or Cd 2.rar 2013-10-11 18:47 - 2013-10-11 19:27 - 121683242 _____ C:\Users\Daniel\Downloads\dh-lachen.rar 2013-10-09 08:52 - 2013-10-09 08:52 - 00020280 _____ (ASUS) C:\WINDOWS\system32\Drivers\AsHIDSwitch64.sys ==================== One Month Modified Files and Folders ======= 2013-11-03 20:24 - 2013-10-17 22:41 - 00000000 __RDO C:\Users\Daniel\SkyDrive 2013-11-03 20:24 - 2013-08-20 20:31 - 00000062 _____ C:\Users\Daniel\AppData\Roaming\sp_data.sys 2013-11-03 20:23 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-11-03 20:23 - 2013-08-21 17:26 - 00000000 ____D C:\Users\Daniel\AppData\Local\Pokki 2013-11-02 19:31 - 2013-10-17 22:11 - 01875974 _____ C:\WINDOWS\WindowsUpdate.log 2013-11-02 19:31 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2013-11-02 19:19 - 2013-11-02 19:19 - 00087496 _____ C:\Users\Daniel\Downloads\FRST.txt 2013-11-02 19:19 - 2013-11-02 19:19 - 00022063 _____ C:\Users\Daniel\Downloads\Addition.txt 2013-11-02 19:18 - 2013-11-02 19:18 - 00000000 ____D C:\FRST 2013-11-02 19:17 - 2013-11-02 19:17 - 01957098 _____ (Farbar) C:\Users\Daniel\Desktop\FRST64.exe 2013-11-02 19:14 - 2013-11-02 19:14 - 05143186 _____ (Swearware) C:\Users\Daniel\Downloads\ComboFix.exe 2013-11-02 19:06 - 2013-11-02 19:06 - 02690376 _____ (Pokki) C:\Users\Daniel\Downloads\PokkiInstaller.exe 2013-11-02 19:06 - 2013-11-02 19:06 - 00822608 _____ (Pokki) C:\Users\Daniel\Downloads\Pokki_Start_MenuSetup.exe 2013-11-02 19:02 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru 2013-11-02 18:43 - 2013-11-02 18:43 - 00009771 _____ C:\Users\Daniel\Downloads\hijackthis.log 2013-11-02 18:43 - 2013-08-20 20:28 - 00000000 ____D C:\Users\Daniel\AppData\Local\VirtualStore 2013-11-02 18:42 - 2013-11-02 18:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Daniel\Downloads\HijackThis.exe 2013-11-02 18:26 - 2013-11-02 18:25 - 00000000 ____D C:\Users\Daniel\Desktop\Broken Social Scene - Forgiveness Rock Records (2010) 2013-11-02 18:24 - 2013-11-02 18:16 - 92255472 _____ C:\Users\Daniel\Downloads\Broken_Social_Scene_-_Forgiveness_Rock_Records_(2010).rar 2013-11-02 18:23 - 2013-11-02 18:23 - 01791272 _____ (Express Install ) C:\Users\Daniel\Downloads\Setup(2).exe 2013-11-02 18:07 - 2013-10-18 20:54 - 00003934 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{783B4666-F899-4BDF-86B0-76111EDA3981} 2013-11-01 21:53 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness 2013-11-01 21:50 - 2013-08-20 20:38 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3014575398-1375843394-1487085610-1002 2013-11-01 21:17 - 2013-08-25 16:06 - 00000000 ____D C:\Users\Daniel\AppData\Local\G DATA 2013-11-01 21:14 - 2013-11-01 21:14 - 00106272 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GRD.sys 2013-11-01 21:14 - 2013-11-01 21:14 - 00019016 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GdPhyMem.sys 2013-11-01 20:59 - 2013-11-01 20:59 - 00000000 __SHD C:\Users\Daniel\Desktop\ts 2013-11-01 19:27 - 2013-08-23 22:04 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Mp3tag 2013-10-31 21:01 - 2013-09-30 05:14 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-10-31 21:01 - 2013-09-30 04:56 - 00771640 _____ C:\WINDOWS\system32\perfh007.dat 2013-10-31 21:01 - 2013-09-30 04:56 - 00161916 _____ C:\WINDOWS\system32\perfc007.dat 2013-10-31 08:34 - 2013-10-31 08:34 - 00001368 _____ C:\Users\Daniel\Desktop\autoruns.lnk 2013-10-31 08:34 - 2013-09-20 16:26 - 00000000 ____D C:\Program Files (x86)\Autoruns 2013-10-30 20:34 - 2013-10-30 20:33 - 00000000 ____D C:\Users\Daniel\Desktop\Fieldhead 2013-10-30 18:58 - 2013-10-30 18:57 - 00000000 ____D C:\Users\Daniel\Desktop\Neuer Ordner 2013-10-30 18:16 - 2013-10-23 19:31 - 00000000 ____D C:\Users\Daniel\dwhelper 2013-10-29 18:20 - 2013-10-29 18:19 - 56188145 _____ C:\Users\Daniel\Downloads\ane_brun_-_changing_of_the_seasons__2008_.rar 2013-10-28 23:55 - 2013-09-29 20:04 - 00003146 _____ C:\WINDOWS\PFRO.log 2013-10-28 23:55 - 2013-08-20 20:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-10-28 23:49 - 2013-10-28 23:49 - 00000000 ____D C:\Program Files\7-Zip 2013-10-28 23:48 - 2013-10-28 23:48 - 01376768 _____ C:\Users\Daniel\Downloads\7z920-x64.msi 2013-10-28 23:46 - 2013-10-28 23:46 - 16313920 _____ (SWE Sven Ritter) C:\Users\Daniel\Downloads\nw_9386_scxexe.exe 2013-10-28 23:41 - 2013-10-28 23:32 - 110670290 _____ C:\Users\Daniel\Downloads\Wildlife-Strike_Hard_Young_Diamond-WEB-2010-k4(1).rar 2013-10-28 23:34 - 2013-10-24 14:42 - 00000000 ____D C:\Users\Daniel\Desktop\The Suburbs 2013-10-28 23:16 - 2013-10-28 23:13 - 110670290 _____ C:\Users\Daniel\Downloads\Wildlife-Strike_Hard_Young_Diamond-WEB-2010-k4.rar 2013-10-28 22:44 - 2013-10-28 22:44 - 00001396 _____ C:\Users\Daniel\Desktop\Mp3tag.lnk 2013-10-28 22:15 - 2013-10-28 20:43 - 00000179 ____H C:\Users\Daniel\Desktop\Neues Textdokument.txt 2013-10-28 20:28 - 2013-10-28 19:43 - 138023117 _____ C:\Users\Daniel\Downloads\Arcade_Fire-The_Suburbs-(Deluxe_Edition)-2011-C4.rar 2013-10-28 20:08 - 2013-08-20 20:28 - 00000000 ____D C:\Users\Daniel\AppData\Local\Packages 2013-10-28 19:21 - 2013-10-28 19:09 - 70982363 _____ C:\Users\Daniel\Downloads\Good News For People Who Love Bad News.zip 2013-10-28 19:04 - 2013-10-28 17:46 - 00000081 _____ C:\Users\Daniel\Downloads\Modest_Mouse-Good_News_for_People_Who_Love_Bad_News.rar 2013-10-28 18:49 - 2013-10-28 18:49 - 00001688 _____ C:\Users\Daniel\Desktop\WORD.lnk 2013-10-28 18:48 - 2013-10-28 18:48 - 00001668 _____ C:\Users\Daniel\Desktop\EXCEL.lnk 2013-10-28 18:46 - 2013-10-28 18:46 - 00001699 _____ C:\Users\Daniel\Desktop\POWERPOINT.lnk 2013-10-28 18:43 - 2013-10-25 20:24 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\FLV and Media Player 2013-10-28 18:40 - 2013-10-28 18:40 - 00001306 _____ C:\Users\Daniel\Desktop\Steam.lnk 2013-10-28 18:40 - 2013-08-29 16:01 - 00000000 ____D C:\Program Files (x86)\Steam 2013-10-28 18:39 - 2013-10-28 18:39 - 00001380 _____ C:\Users\Daniel\Desktop\Sonic & SEGA All-Stars Racing.lnk 2013-10-28 18:38 - 2013-10-28 18:38 - 00001574 _____ C:\Users\Daniel\Desktop\TubeBox.lnk 2013-10-28 18:38 - 2013-10-28 18:38 - 00001506 _____ C:\Users\Daniel\Desktop\firefox.lnk 2013-10-28 18:37 - 2013-10-28 18:37 - 00001352 _____ C:\Users\Daniel\Desktop\CDex.lnk 2013-10-28 18:36 - 2013-08-21 17:12 - 00000000 ____D C:\Program Files (x86)\CDex 2013-10-28 18:27 - 2013-10-28 17:46 - 58686380 _____ C:\Users\Daniel\Downloads\Modest_Mouse-Good_News_for_People_Who_Love_Bad_News.rar.part 2013-10-28 18:24 - 2013-10-24 17:26 - 00004208 _____ C:\WINDOWS\System32\Tasks\Software Updater 2013-10-28 18:20 - 2013-10-27 17:59 - 00000000 ____D C:\Program Files (x86)\HDCleaner 2013-10-28 18:15 - 2013-10-27 17:59 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDCleaner 2013-10-28 18:15 - 2013-10-17 22:17 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-10-28 18:15 - 2013-10-17 22:17 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-28 18:15 - 2013-10-17 22:17 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-10-28 18:15 - 2013-08-21 17:25 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in 2013-10-28 18:13 - 2013-10-28 18:13 - 00002104 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-10-28 18:12 - 2013-10-28 18:12 - 21976752 _____ (Mozilla) C:\Users\Daniel\Downloads\Thunderbird Setup 24.0.1.exe 2013-10-28 18:12 - 2013-08-21 15:49 - 00000000 ____D C:\Users\Daniel\AppData\Local\Thunderbird 2013-10-28 18:12 - 2013-08-21 15:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-10-28 18:03 - 2013-10-19 10:52 - 00000000 ___RD C:\WINDOWS\BrowserChoice 2013-10-28 18:03 - 2013-10-17 22:17 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-10-28 18:03 - 2013-10-17 22:17 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-28 18:03 - 2013-10-17 22:17 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-10-27 22:48 - 2013-08-20 22:06 - 00000000 ____D C:\Users\Daniel\AppData\Local\Adobe 2013-10-27 22:45 - 2012-11-27 05:08 - 00000000 ____D C:\ProgramData\Adobe 2013-10-27 22:45 - 2012-11-27 05:08 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-10-27 22:40 - 2013-10-27 22:40 - 00000000 ____D C:\Users\Daniel\AppData\Local\BonanzaDealsLive 2013-10-27 22:40 - 2013-10-27 22:40 - 00000000 ____D C:\ProgramData\BonanzaDealsLive 2013-10-27 22:39 - 2013-10-27 22:40 - 01069568 _____ (Solid State Networks) C:\Users\Daniel\Downloads\Adobe_Reader_setup [1].exe 2013-10-27 22:38 - 2013-10-27 22:38 - 00683016 _____ C:\Users\Daniel\Downloads\Adobe_Reader_setup.exe 2013-10-27 22:32 - 2013-10-27 22:32 - 00000000 ____D C:\Users\Daniel\SystemRequirementsLab 2013-10-27 22:32 - 2013-10-27 22:32 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab 2013-10-27 22:32 - 2013-10-17 22:17 - 00000000 ____D C:\Users\Daniel 2013-10-27 22:30 - 2013-10-27 22:30 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe 2013-10-27 22:30 - 2013-10-27 22:30 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe 2013-10-27 22:30 - 2013-10-27 22:30 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe 2013-10-27 22:30 - 2013-10-27 22:30 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2013-10-27 22:30 - 2013-10-27 22:30 - 00000000 ____D C:\ProgramData\Sun 2013-10-27 22:30 - 2013-10-27 22:30 - 00000000 ____D C:\ProgramData\Oracle 2013-10-27 22:30 - 2013-10-27 22:30 - 00000000 ____D C:\Program Files (x86)\Java 2013-10-27 22:28 - 2013-10-27 22:28 - 00915368 _____ (Oracle Corporation) C:\Users\Daniel\Downloads\jxpiinstall.exe 2013-10-27 22:28 - 2013-10-27 22:28 - 00915368 _____ (Oracle Corporation) C:\Users\Daniel\Downloads\jxpiinstall(1).exe 2013-10-27 22:25 - 2013-10-27 22:25 - 02816072 _____ (LionSea SoftWare ) C:\Users\Daniel\Downloads\setup(1).exe 2013-10-27 22:12 - 2013-10-27 22:12 - 00000000 ____D C:\Users\Daniel\AppData\Local\DriverTuner 2013-10-27 22:10 - 2013-10-27 22:10 - 02816072 _____ (LionSea SoftWare ) C:\Users\Daniel\Downloads\setup.exe 2013-10-27 22:05 - 2013-10-27 22:05 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-10-27 22:05 - 2013-10-17 22:10 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-10-27 22:05 - 2013-08-22 15:46 - 00336213 _____ C:\WINDOWS\setupact.log 2013-10-27 22:04 - 2013-10-27 22:04 - 00000000 ____D C:\WINDOWS\SysWOW64\NV 2013-10-27 22:04 - 2013-10-27 22:04 - 00000000 ____D C:\WINDOWS\system32\NV 2013-10-27 22:04 - 2013-05-11 02:30 - 00000000 ____D C:\ProgramData\NVIDIA 2013-10-27 22:01 - 2013-10-27 22:01 - 00000000 ____D C:\NVIDIA 2013-10-27 21:58 - 2013-10-27 21:52 - 258366720 _____ (NVIDIA Corporation) C:\Users\Daniel\Downloads\331.58-notebook-win8-win7-64bit-international-whql.exe 2013-10-27 21:50 - 2012-11-27 05:08 - 06615944 _____ C:\WINDOWS\AsDebug.log 2013-10-27 21:50 - 2012-11-27 05:08 - 01942842 _____ C:\WINDOWS\AsCDProc.log 2013-10-27 17:59 - 2013-10-27 17:59 - 00001185 _____ C:\Users\Daniel\Desktop\HDCleaner.lnk 2013-10-25 20:24 - 2013-10-25 20:24 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\vlc 2013-10-25 20:23 - 2013-10-25 20:23 - 00000000 ____D C:\Program Files (x86)\Applian Technologies 2013-10-25 20:21 - 2013-10-25 20:21 - 01838376 _____ (Express Install ) C:\Users\Daniel\Downloads\FLVPlayer_Setup.exe 2013-10-25 12:15 - 2013-10-25 12:15 - 00000000 ____D C:\Users\Daniel\AppData\Local\Avg2014 2013-10-24 21:22 - 2013-10-24 20:46 - 109378882 _____ C:\Users\Daniel\Downloads\www.NewAlbumReleases.net_Arcade Fire - Reflektor CD1 (2013).rar 2013-10-24 21:18 - 2013-10-24 20:48 - 92180320 _____ C:\Users\Daniel\Downloads\www.NewAlbumReleases.net_Arcade_Fire_-_Reflektor_CD2_(2013).rar 2013-10-24 18:07 - 2013-10-24 17:32 - 00000000 ____D C:\Users\Daniel\Documents\TubeBox 2013-10-24 17:48 - 2013-10-24 17:27 - 00000898 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog 2013-10-24 17:38 - 2013-10-24 17:38 - 00000000 ____D C:\Users\Daniel\AppData\Local\TubeBox 2013-10-24 17:32 - 2013-10-24 17:32 - 00000000 ____D C:\Users\Daniel\AppData\Local\Freetec 2013-10-24 17:31 - 2013-10-24 17:31 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Dealply 2013-10-24 17:31 - 2013-10-24 17:31 - 00000000 ____D C:\Users\Daniel\AppData\Local\Google 2013-10-24 17:31 - 2013-10-24 17:31 - 00000000 ____D C:\Users\Daniel\AppData\Local\DealPlyLive 2013-10-24 17:31 - 2013-10-24 17:31 - 00000000 ____D C:\ProgramData\DealPlyLive 2013-10-24 17:26 - 2013-10-24 17:26 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Windows Net Data 2013-10-24 17:26 - 2013-10-24 17:26 - 00000000 ____D C:\ProgramData\Package Cache 2013-10-24 17:26 - 2013-10-24 17:26 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater 2013-10-24 17:26 - 2013-10-24 17:26 - 00000000 ____D C:\Program Files (x86)\Freetec 2013-10-24 17:24 - 2013-10-24 17:23 - 00000000 ____D C:\Users\Daniel\AppData\Local\DownloadGuide 2013-10-24 17:22 - 2013-10-24 17:22 - 00733192 _____ C:\Users\Daniel\Downloads\tubebox_4.4_de-DE.exe 2013-10-23 21:41 - 2013-10-23 21:41 - 00002300 _____ C:\WINDOWS\logboot_23.10.2013.tureg.log 2013-10-23 21:41 - 2013-08-22 14:25 - 60030976 _____ C:\WINDOWS\system32\config\SOFTWARE_tureg_old 2013-10-23 21:41 - 2013-08-22 14:25 - 11534336 _____ C:\WINDOWS\system32\config\SYSTEM_tureg_old 2013-10-23 21:41 - 2013-08-22 14:25 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT_tureg_old 2013-10-23 21:41 - 2013-08-22 14:25 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY_tureg_old 2013-10-23 21:41 - 2013-08-22 14:25 - 00262144 _____ C:\WINDOWS\system32\config\SAM_tureg_old 2013-10-23 20:49 - 2013-10-23 20:49 - 00002770 _____ C:\WINDOWS\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-10-23 12:01 - 2013-10-28 18:49 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2013-10-23 09:59 - 2013-10-28 18:49 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2013-10-23 07:58 - 2012-11-27 05:09 - 00011155 _____ C:\WINDOWS\DirectX.log 2013-10-23 07:48 - 2013-10-23 07:48 - 00000000 ____D C:\Program Files (x86)\SEGA 2013-10-23 07:48 - 2013-05-11 02:23 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-10-23 07:45 - 2013-08-24 21:46 - 00000000 ____D C:\Users\Daniel\AppData\Local\Windows Live 2013-10-22 18:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache 2013-10-22 18:11 - 2013-08-21 20:09 - 00068440 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\gdwfpcd64.sys 2013-10-21 19:31 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF 2013-10-21 19:29 - 2013-08-21 17:12 - 00000000 ____D C:\Program Files (x86)\Mp3tag 2013-10-20 17:44 - 2013-10-20 17:39 - 17654491 _____ C:\Users\Daniel\Downloads\www.NewAlbumReleases.net_Arcade_Fire_-_Culture_War_Speaking_in_Tongues_(2011).rar 2013-10-19 06:38 - 2013-10-24 19:43 - 23213056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2013-10-19 05:52 - 2013-10-24 19:43 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2013-10-19 05:33 - 2013-10-24 19:43 - 02763776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2013-10-19 04:59 - 2013-10-24 19:43 - 17143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2013-10-19 04:42 - 2013-10-24 19:43 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2013-10-19 04:19 - 2013-10-24 19:43 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2013-10-19 03:42 - 2013-10-24 19:43 - 12995072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2013-10-19 03:27 - 2013-10-24 19:43 - 11222016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2013-10-18 20:49 - 2013-08-20 22:07 - 00003774 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2013-10-18 20:35 - 2013-10-18 20:27 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-10-18 20:30 - 2013-08-20 20:57 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-10-18 20:29 - 2013-10-18 20:28 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-10-18 20:29 - 2013-08-20 20:58 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\TuneUp Software 2013-10-18 20:28 - 2013-10-18 20:28 - 00400760 _____ (Softonic ) C:\Users\Daniel\Downloads\SoftonicDownloader_fuer_ashampoo-winoptimizer-free.exe 2013-10-18 20:21 - 2013-10-18 20:20 - 32522152 _____ (TuneUp Software) C:\Users\Daniel\Downloads\TuneUpUtilities2014_de-DE.exe 2013-10-18 20:09 - 2013-10-17 23:08 - 00000000 ___DC C:\WINDOWS\Panther 2013-10-18 17:23 - 2013-10-18 17:23 - 00000017 _____ C:\Users\Daniel\AppData\Local\resmon.resmoncfg 2013-10-18 17:18 - 2013-10-18 17:18 - 00000000 ____D C:\Users\Daniel\AppData\Local\Frameworkx.com 2013-10-18 17:16 - 2013-10-18 17:16 - 01733632 _____ C:\Users\Daniel\Downloads\FxVisor64.msi 2013-10-18 06:47 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore 2013-10-17 23:08 - 2013-10-17 23:08 - 00000000 __SHD C:\Recovery 2013-10-17 23:07 - 2013-10-17 23:07 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2013-10-17 23:07 - 2013-10-17 23:07 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2013-10-17 23:07 - 2013-10-17 23:07 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2013-10-17 23:07 - 2013-08-22 16:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template 2013-10-17 23:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore 2013-10-17 23:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera 2013-10-17 23:06 - 2013-10-17 23:06 - 00262144 _____ C:\WINDOWS\system32\config\userdiff 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files\MSBuild 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-10-17 22:44 - 2013-10-17 22:44 - 00000000 ____D C:\Users\Daniel\AppData\Local\Intel_Corporation 2013-10-17 22:37 - 2013-10-17 22:37 - 00001456 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-10-17 22:37 - 2013-08-20 20:30 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-10-17 22:37 - 2013-08-20 20:30 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-10-17 22:36 - 2013-10-17 22:36 - 00000020 ___SH C:\Users\Daniel\ntuser.ini 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Programme 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-10-17 22:34 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Registration 2013-10-17 22:34 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT 2013-10-17 22:34 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default 2013-10-17 22:33 - 2013-10-17 22:33 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat 2013-10-17 22:33 - 2013-10-17 22:17 - 00028578 _____ C:\WINDOWS\diagwrn.xml 2013-10-17 22:33 - 2013-10-17 22:17 - 00028578 _____ C:\WINDOWS\diagerr.xml 2013-10-17 22:33 - 2013-10-17 21:48 - 00006705 _____ C:\WINDOWS\comsetup.log 2013-10-17 22:27 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media 2013-10-17 22:27 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries 2013-10-17 22:24 - 2013-08-22 15:44 - 00406504 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-10-17 22:22 - 2013-09-30 04:59 - 00000000 ____D C:\WINDOWS\ShellNew 2013-10-17 22:22 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2013-10-17 22:22 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM 2013-10-17 22:22 - 2012-11-27 05:10 - 00000000 ____D C:\WINDOWS\nl 2013-10-17 22:22 - 2012-11-27 05:10 - 00000000 ____D C:\WINDOWS\it 2013-10-17 22:22 - 2012-11-27 05:10 - 00000000 ____D C:\WINDOWS\fr 2013-10-17 22:22 - 2012-11-27 05:10 - 00000000 ____D C:\WINDOWS\de 2013-10-17 22:22 - 2012-07-26 10:43 - 00000000 ____D C:\WINDOWS\en-GB 2013-10-17 22:21 - 2013-10-17 22:21 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2013-10-17 22:21 - 2013-10-17 22:21 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2013-10-17 22:21 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2013-10-17 22:21 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2013-10-17 22:21 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\WCN 2013-10-17 22:21 - 2013-08-22 16:37 - 00004893 _____ C:\WINDOWS\DtcInstall.log 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME 2013-10-17 22:21 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI 2013-10-17 22:21 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\oobe 2013-10-17 22:21 - 2013-05-11 02:36 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2013-10-17 22:21 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated 2013-10-17 22:20 - 2013-10-17 22:11 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-10-17 22:20 - 2013-10-17 22:10 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-10-17 22:20 - 2013-10-17 22:10 - 00000000 ____D C:\Program Files (x86)\Intel 2013-10-17 22:20 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Resources 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\System 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-10-17 22:20 - 2012-08-02 14:28 - 00000000 ____D C:\ProgramData\PRICache 2013-10-17 22:18 - 2013-10-17 22:18 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2013-10-17 22:18 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Vorlagen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Startmenü 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Netzwerkumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Lokale Einstellungen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Eigene Dateien 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Druckumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Documents\Eigene Musik 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Documents\Eigene Bilder 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\AppData\Local\Verlauf 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\AppData\Local\Anwendungsdaten 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Anwendungsdaten 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevGen_01009.Wdf 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevFan_01009.Wdf 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____D C:\Program Files\Realtek 2013-10-17 22:10 - 2013-10-17 22:10 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfManager_01009.Wdf 2013-10-17 22:10 - 2013-10-17 22:10 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevProc_01009.Wdf 2013-10-17 22:10 - 2013-10-17 22:10 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevDram_01009.Wdf 2013-10-17 21:55 - 2013-05-11 02:29 - 01895157 _____ C:\WINDOWS\WindowsUpdate (1).log 2013-10-17 21:43 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent 2013-10-16 01:48 - 2013-10-27 22:02 - 30344992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 25256224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 22933280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 18290536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 18243632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 17560352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 15858664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 15244272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 12537632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2013-10-16 01:48 - 2013-10-27 22:02 - 11415232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 11362672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 09516872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 09472600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 03131680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 03124512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 02946848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 02747168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 02694664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433158.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433158.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00696096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00655136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00560416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00479520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00405280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00317472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00266984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2013-10-16 01:48 - 2013-09-05 01:37 - 01435504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll 2013-10-16 01:48 - 2013-09-05 01:37 - 01241376 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll 2013-10-16 01:48 - 2013-09-05 01:36 - 00168616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2013-10-16 01:48 - 2013-09-05 01:36 - 00141336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2013-10-16 01:48 - 2013-09-05 01:36 - 00023287 _____ C:\WINDOWS\system32\nvinfo.pb 2013-10-16 01:48 - 2013-09-05 01:35 - 03067560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 06665504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 03489568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 01064224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2013-10-15 22:47 - 2013-10-17 22:12 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2013-10-15 18:10 - 2013-09-07 20:31 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-15 18:10 - 2013-09-07 20:31 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-10-15 17:56 - 2013-08-25 15:58 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-10-15 17:55 - 2013-08-21 07:03 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-10-15 17:54 - 2013-08-21 07:03 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-10-12 18:52 - 2013-10-12 18:52 - 00000000 ____D C:\Users\Daniel\Documents\ASUS 2013-10-12 18:51 - 2013-10-12 18:51 - 00000000 ____D C:\ProgramData\ASUS 2013-10-12 18:50 - 2013-10-12 18:50 - 00000021 _____ C:\Users\Daniel\AppData\Roaming\my_intel.sys 2013-10-12 01:28 - 2013-10-18 20:29 - 00040760 _____ (TuneUp Software) C:\WINDOWS\system32\TURegOpt.exe 2013-10-12 01:28 - 2013-10-18 20:29 - 00029496 _____ (TuneUp Software) C:\WINDOWS\system32\authuitu.dll 2013-10-12 01:28 - 2013-10-18 20:29 - 00025400 _____ (TuneUp Software) C:\WINDOWS\SysWOW64\authuitu.dll 2013-10-11 21:27 - 2013-10-11 21:27 - 02634152 _____ C:\Users\Daniel\Downloads\mp3tagv258setup.exe 2013-10-11 20:41 - 2013-10-11 20:03 - 124196923 _____ C:\Users\Daniel\Downloads\1972---Exile-On-Main-Street.rar 2013-10-11 19:43 - 2013-10-11 19:42 - 52897438 _____ C:\Users\Daniel\Downloads\Elliott Smith - Either Or.rar 2013-10-11 19:32 - 2013-10-11 19:28 - 102188233 _____ C:\Users\Daniel\Downloads\1997 Either.Or Cd 2.rar 2013-10-11 19:27 - 2013-10-11 18:47 - 121683242 _____ C:\Users\Daniel\Downloads\dh-lachen.rar 2013-10-11 18:00 - 2013-08-21 20:09 - 00130392 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\MiniIcpt.sys 2013-10-11 18:00 - 2013-08-21 20:09 - 00065368 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\HookCentre.sys 2013-10-11 18:00 - 2013-08-21 20:09 - 00064856 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\PktIcpt.sys 2013-10-11 18:00 - 2013-08-21 20:09 - 00060248 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDBehave.sys 2013-10-09 08:52 - 2013-10-09 08:52 - 00020280 _____ (ASUS) C:\WINDOWS\system32\Drivers\AsHIDSwitch64.sys 2013-10-08 20:14 - 2013-10-17 22:12 - 03398914 _____ C:\WINDOWS\system32\nvcoproc.bin Files to move or delete: ==================== C:\ProgramData\SetStretch.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys [2013-08-22 12:40] - [2013-08-22 13:39] - 0312160 ___AC (Microsoft Corporation) 9F9CE33B50611A1C61A46B8911E0B30B LastRegBack: 2013-11-01 21:50 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-10-2013 Ran by Daniel at 2013-11-03 20:29:01 Running from C:\Users\Daniel\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: G Data InternetSecurity 2014 (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: G Data InternetSecurity 2014 (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B} ==================== Installed Programs ====================== 2007 Microsoft Office Suite Service Pack 3 (SP3) (x32) 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117) Adobe Photoshop 7.0 (x32 Version: 7.0) Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04) ASUS Instant Connect (x32 Version: 1.2.8) ASUS InstantOn (x32 Version: 3.0.5) ASUS LifeFrame3 (x32 Version: 3.1.13) ASUS Live Update (x32 Version: 3.1.9) ASUS Power4Gear Hybrid (Version: 2.0.4) ASUS Screen Saver (Version: 1.0.1) ASUS Smart Gesture (x32 Version: 1.1.3) ASUS Splendid Video Enhancement Technology (x32 Version: 2.01.0002) ASUS Tutor (x32 Version: 1.0.8) ASUS WebStorage Sync Agent (x32 Version: 1.1.10.123) ASUSDVD (x32 Version: 10.0.4126.52) ATK Package (x32 Version: 1.0.0027) CDBurnerXP (Version: 4.5.2.4291) CDex - Open Source Digital Audio CD Extractor (x32 Version: 1.70.4.2009) D3DX10 (x32 Version: 15.4.2368.0902) FLV and Media Player (3.2.0.3) (x32 Version: 3.2.0.3) FLV Player 2.0 (build 25) (x32 Version: 2.0 (build 25)) Fotogalerie (x32 Version: 16.4.3505.0912) G Data InternetSecurity 2014 (x32 Version: 24.0.3.4) Galerie de photos (x32 Version: 16.4.3505.0912) GeForce Experience NvStream Client Components (Version: 0.1.87) Google Update Helper (x32 Version: 1.3.23.0) HDCleaner (x32) Intel(R) Dynamic Platform and Thermal Framework (x32 Version: 6.0.7.1084) Intel(R) Management Engine Components (x32 Version: 8.1.0.1252) Intel(R) Processor Graphics (x32 Version: 10.18.10.3308) Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149) Intel® Trusted Connect Service Client (Version: 1.24.388.1) Java 7 Update 45 (x32 Version: 7.0.450) Java Auto Updater (x32 Version: 2.1.9.8) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office (x32 Version: 15.0.4420.1017) Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Movie Maker (x32 Version: 16.4.3505.0912) Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0) Mozilla Maintenance Service (x32 Version: 24.0.1) Mozilla Thunderbird 24.0.1 (x86 de) (x32 Version: 24.0.1) Mp3tag v2.58 (x32 Version: v2.58) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT110 (x32 Version: 16.4.1108.0727) MSVCRT110_amd64 (Version: 16.4.1109.0912) MyBitCast 2.0 (x32 Version: 2.0) NVIDIA GeForce Experience 1.6.1.2 (Version: 1.6.1.2) NVIDIA Grafiktreiber 331.58 (Version: 331.58) NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4) NVIDIA Install Application (Version: 2.1002.133.902) NVIDIA Optimus 8.3.23 (Version: 8.3.23) NVIDIA PhysX (x32 Version: 9.13.0725) NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725) NVIDIA Systemsteuerung 331.58 (Version: 331.58) NVIDIA Update 8.3.23 (Version: 8.3.23) NVIDIA Update Components (Version: 8.3.23) NVIDIA Virtual Audio 1.2.5 (Version: 1.2.5) Photo Common (x32 Version: 16.4.3505.0912) Photo Gallery (x32 Version: 16.4.3505.0912) Pokki (HKCU Version: 0.263.13.325) Pokki Download Helper (HKCU Version: 1.3.1.282) Qualcomm Atheros Client Installation Program (x32 Version: 10.0) Raccolta foto (x32 Version: 16.4.3505.0912) Realtek Ethernet Controller Driver (x32 Version: 8.3.730.2012) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6829) Realtek PCIE Card Reader (x32 Version: 6.1.8400.27023) Shared C Run-time for x64 (Version: 10.0.0) SHIELD Streaming (Version: 1.05.42) Sonic & SEGA All-Stars Racing (x32 Version: 1.00.0000) Sonic Generations (x32) SpeedCommander 9 (x32) Steam (x32 Version: 1.0.0.0) System Requirements Lab for Intel (x32 Version: 4.5.15.0) TubeBox (x32 Version: 4.4.0.0) TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.143) TuneUp Utilities 2014 (x32 Version: 14.0.1000.143) Update for 2007 Microsoft Office System (KB967642) (x32) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2827325) 32-Bit Edition (x32) Update für Microsoft Office Excel 2007 Help (KB963678) (x32) Update für Microsoft Office Outlook 2007 Help (KB963677) (x32) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32) Update für Microsoft Office Word 2007 Help (KB963665) (x32) Winamp (x32 Version: 5.65 ) Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1) Windows Driver Package - ASUS (ATP) Mouse (01/10/2013 1.0.0.170) (Version: 01/10/2013 1.0.0.170) Windows Live (x32 Version: 16.4.3505.0912) Windows Live Communications Platform (x32 Version: 16.4.3505.0912) Windows Live Essentials (x32 Version: 16.4.3505.0912) Windows Live Installer (x32 Version: 16.4.3505.0912) Windows Live Photo Common (x32 Version: 16.4.3505.0912) Windows Live PIMT Platform (x32 Version: 16.4.3505.0912) Windows Live SOXE (x32 Version: 16.4.3505.0912) Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912) Windows Live UX Platform (x32 Version: 16.4.3505.0912) Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912) WinFlash (x32 Version: 2.41.1) Winsent Messenger 2.4.32 (x32) ==================== Restore Points ========================= 23-10-2013 14:13:51 Geplanter Prüfpunkt 24-10-2013 16:25:44 TubeBox 27-10-2013 21:29:48 Installed Java 7 Update 45 28-10-2013 22:48:50 Installed 7-Zip 9.20 (x64 edition) ==================== Hosts content: ========================== 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0E785EFC-A975-4345-BB9B-F3C43AAC5FF3} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2012-11-29] () Task: {17320339-C4DB-4970-AD97-D220A6930532} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-18] (Adobe Systems Incorporated) Task: {29FF0C13-A4F9-48A4-9B59-BBC869B46A2B} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-09-05] (Adobe Systems Incorporated) Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {2E42456F-E31C-4225-B033-D784D1D712E6} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2013-08-22] (Microsoft Corporation) Task: {33133C3B-6FB6-4F81-98CF-6C7CC1EBD05D} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS) Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation) Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\System32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {4008B213-1733-4C5A-A9C0-BF28074AB9FA} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-10-12] (TuneUp Software) Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {4EA2DF5C-E4C4-43E2-A109-951FBD251E97} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2012-08-22] (ASUSTeK Computer Inc.) Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => C:\Windows\System32\AppXDeploymentClient.dll [2013-09-30] (Microsoft Corporation) Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {C5E1090E-F1D7-491A-82C9-561537EEE392} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-11-29] (ASUS) Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE Task: {EA5B7482-58C3-4800-A5AB-CCDED855783A} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-10-21] () Task: {F10DBA37-F0D7-49D7-8E90-2E13C0AD4AE2} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-01-16] (AsusTek) ==================== Loaded Modules (whitelisted) ============= 2013-06-06 02:02 - 2013-06-06 02:02 - 01741080 _____ () C:\Users\Daniel\AppData\Local\Pokki\ocdeskband_0.dll 2012-08-24 17:26 - 2012-08-24 17:26 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll 2013-01-26 03:53 - 2013-01-26 03:53 - 00716288 _____ () C:\Users\Daniel\AppData\Local\Pokki\Engine\libglesv2.dll 2013-01-26 03:53 - 2013-01-26 03:53 - 00130048 _____ () C:\Users\Daniel\AppData\Local\Pokki\Engine\libegl.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll 2013-01-26 03:53 - 2013-01-26 03:53 - 00569856 _____ () C:\Users\Daniel\AppData\Local\Pokki\Engine\ppGoogleNaClPluginChrome.dll 2013-01-25 23:07 - 2013-01-25 23:07 - 01400846 _____ () C:\Users\Daniel\AppData\Local\Pokki\Engine\avcodec-54.dll 2013-01-25 23:07 - 2013-01-25 23:07 - 00151054 _____ () C:\Users\Daniel\AppData\Local\Pokki\Engine\avutil-51.dll 2013-01-25 23:07 - 2013-01-25 23:07 - 00222734 _____ () C:\Users\Daniel\AppData\Local\Pokki\Engine\avformat-54.dll 2013-09-19 20:29 - 2013-09-19 20:29 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-05-11 02:33 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Daniel\SkyDrive:ms-properties ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SystemEventsBroker => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SystemEventsBroker => ""="Service" ==================== Faulty Device Manager Devices ============= Name: Controller der Familie Realtek PCIe GBE Description: Controller der Familie Realtek PCIe GBE Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Realtek Service: RTL8168 Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (11/02/2013 07:07:07 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.3.9600.16408, Zeitstempel: 0x523d251b Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.16408, Zeitstempel: 0x523d5305 Ausnahmecode: 0xc000070a Fehleroffset: 0x00000000000feded ID des fehlerhaften Prozesses: 0xcb4 Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0 Pfad der fehlerhaften Anwendung: Explorer.EXE1 Pfad des fehlerhaften Moduls: Explorer.EXE2 Berichtskennung: Explorer.EXE3 Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5 Error: (10/31/2013 09:48:58 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT) Description: Der Ereignisfilter mit der Abfrage "select * from __InstanceModificationEvent where targetinstance isa '__ArbitratorConfiguration'" konnte im Namespace "//./root" aufgrund des Fehlers "0x80041033" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden. Error: (10/31/2013 09:48:58 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT) Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __TimerEvent" zu registrieren, deren Zielklasse "__TimerEvent" im Namespace "//./root/subscription" nicht vorhanden ist. Die Abfrage wird ignoriert. Error: (10/31/2013 09:48:58 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT) Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __TimerEvent" zu registrieren, deren Zielklasse "__TimerEvent" im Namespace "//./root/CIMV2" nicht vorhanden ist. Die Abfrage wird ignoriert. Error: (10/31/2013 09:48:58 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT) Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __TimerEvent" zu registrieren, deren Zielklasse "__TimerEvent" im Namespace "//./root" nicht vorhanden ist. Die Abfrage wird ignoriert. Error: (10/31/2013 09:48:58 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT) Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __SystemEvent" zu registrieren, deren Zielklasse "__SystemEvent" im Namespace "//./root/CIMV2" nicht vorhanden ist. Die Abfrage wird ignoriert. Error: (10/31/2013 09:48:58 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT) Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __SystemEvent" zu registrieren, deren Zielklasse "__SystemEvent" im Namespace "//./root/subscription" nicht vorhanden ist. Die Abfrage wird ignoriert. Error: (10/31/2013 09:48:58 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT) Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __SystemEvent" zu registrieren, deren Zielklasse "__SystemEvent" im Namespace "//./root" nicht vorhanden ist. Die Abfrage wird ignoriert. Error: (10/31/2013 09:48:58 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT) Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __NamespaceOperationEvent" zu registrieren, deren Zielklasse "__NamespaceOperationEvent" im Namespace "//./root/CIMV2" nicht vorhanden ist. Die Abfrage wird ignoriert. Error: (10/31/2013 09:48:58 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT) Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __NamespaceOperationEvent" zu registrieren, deren Zielklasse "__NamespaceOperationEvent" im Namespace "//./root/subscription" nicht vorhanden ist. Die Abfrage wird ignoriert. System errors: ============= Error: (11/02/2013 06:07:18 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (11/01/2013 10:02:15 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (11/01/2013 09:51:31 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d0a fehlgeschlagen: Microsoft.MicrosoftMahjong Error: (11/01/2013 05:44:21 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (10/31/2013 08:23:43 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (10/31/2013 08:38:51 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (10/31/2013 08:32:06 AM) (Source: DCOM) (User: PCDANIEL) Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}PCDanielDanielS-1-5-21-3014575398-1375843394-1487085610-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (10/31/2013 08:32:05 AM) (Source: DCOM) (User: PCDANIEL) Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}PCDanielDanielS-1-5-21-3014575398-1375843394-1487085610-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (10/30/2013 05:58:25 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (10/29/2013 05:54:48 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 28% Total physical RAM: 8077.54 MB Available physical RAM: 5777.96 MB Total Pagefile: 9357.54 MB Available Pagefile: 6711.1 MB Total Virtual: 131072 MB Available Virtual: 131071.84 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:279.11 GB) (Free:214.32 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (DATA) (Fixed) (Total:397.87 GB) (Free:295.04 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 699 GB) (Disk ID: 337AEAFE) Partition: GPT Partition Type ==================== End Of Log ============================ |
04.11.2013, 10:49 | #4 |
/// the machine /// TB-Ausbilder | Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner? Ich tippe ja auf System durch TuneUp zerballert, Logs sind sauber, aber shauen wir mal tiefer: Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
04.11.2013, 16:36 | #5 |
| Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner? na nicht Tuneup sondern HD Cleaner. Den Verdacht hatte ich auch, da Antivirusprogramm GData nicht ansprang. ComboFix funktioniert leider nicht. Es erfolgt die Meldung: ComboFix is not meant to run in 'Compatility Mode'. The program shall now exit. Kompatibiltätsproblembehandlung ausgeführt, keine Änderung. |
05.11.2013, 12:01 | #6 |
/// the machine /// TB-Ausbilder | Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner? Ach Mist, ist ja Win8.1. Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner? |
06.11.2013, 00:14 | #7 |
| Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner?Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.11.05.04 Windows 8 x64 NTFS Internet Explorer 11.0.9600.16384 Daniel :: PCDANIEL [Administrator] Schutz: Aktiviert 05.11.2013 17:53:31 mbam-log-2013-11-05 (17-53-31).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 378154 Laufzeit: 59 Minute(n), 17 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 8 HKCR\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} (PUP.Optional.BrowseFox.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DealPlyLive (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BonanzaDealsLive.exe (PUP.Optional.BonanzaDeals.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 1 HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0J1L2U1C1H1Q0R2X1L1R1P0B1P -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 4 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=DE&userid=2a87a9ac-aab4-f6cf-e8e6-f514be695113&searchtype=ds&q={searchTerms}&installDate=12/09/2013) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Bar (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=DE&userid=2a87a9ac-aab4-f6cf-e8e6-f514be695113&searchtype=ds&q={searchTerms}&installDate=12/09/2013) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=DE&userid=2a87a9ac-aab4-f6cf-e8e6-f514be695113&searchtype=ds&q={searchTerms}&installDate=12/09/2013) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|SearchAssistant (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=DE&userid=2a87a9ac-aab4-f6cf-e8e6-f514be695113&searchtype=ds&q={searchTerms}&installDate=12/09/2013) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 15 C:\Users\Daniel\AppData\Local\DownloadGuide (PUP.Optional.DownloadGuide.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\DealPlyLive (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\DealPlyLive\Update (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\DealPlyLive\Update\Log (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Roaming\Dealply (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Roaming\Dealply\UpdateProc (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Roaming\OpenCandy\F341D96C0A154131A439CB81A4A7BBAF (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\DealPlyLive (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\DealPlyLive\CrashReports (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\BonanzaDealsLive\Update (PUP.Optional.BonanzaDeals.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\BonanzaDealsLive\Update\Log (PUP.Optional.BonanzaDeals.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\BonanzaDealsLive\CrashReports (PUP.Optional.BonanzaDeals.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 20 C:\Users\Daniel\AppData\Local\DownloadGuide\dp.exe (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\DownloadGuide\iminent.exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\DownloadGuide\PallySoft_Snap.do.exe (PUP.Optional.Linkular.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\DownloadGuide\plus-hd-3-8.exe (PUP.Optional.CrossRider) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\IE\09ZE7LMB\iminent[1].msi (PUP.Optional.Iminent) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\IE\3DBDCQCH\MinibarChrome[1].exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\IE\E23SD7Y2\IminentMinibarIE[1].exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\IE\E23SD7Y2\Setup[1].exe (PUP.Optional.BatBrowse.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\IE\Q1U96FNX\MinibarFirefox[1].exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\Downloads\FLVPlayer_Setup.exe (PUP.Optional.ExpressInstall.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\Downloads\Setup(2).exe (PUP.Optional.ExpressInstall.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\Downloads\SoftonicDownloader_fuer_ashampoo-winoptimizer-free.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\DownloadGuide\amazon.ico (PUP.Optional.DownloadGuide.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Local\DownloadGuide\tubebox_Setup_product-website_de-DE.exe (PUP.Optional.DownloadGuide.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\DealPlyLive\Update\Log\DealPlyLive.log (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Roaming\Dealply\UpdateProc\config.dat (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Roaming\Dealply\UpdateProc\STTL.DAT (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Roaming\Dealply\UpdateProc\TTL.DAT (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Daniel\AppData\Roaming\OpenCandy\F341D96C0A154131A439CB81A4A7BBAF\PokkiInstaller.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\BonanzaDealsLive\Update\Log\BonanzaDealsLive.log (PUP.Optional.BonanzaDeals.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.011 - Bericht erstellt am 05/11/2013 um 19:24:52 # Updated 03/11/2013 von Xplode # Betriebssystem : Windows 8.1 (64 bits) # Benutzername : Daniel - PCDANIEL # Gestartet von : C:\Users\Daniel\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** [#] Dienst Gelöscht : SystemStoreService ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Windows Net Data Datei Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\foxydeal.sqlite Datei Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\user.js Datei Gelöscht : C:\WINDOWS\System32\Tasks\Software Updater ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateBatBrowse_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateBatBrowse_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dealplylive.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Schlüssel Gelöscht : HKCU\Software\FoxyDeal Schlüssel Gelöscht : HKCU\Software\Iminent Schlüssel Gelöscht : HKCU\Software\smartbar Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider Schlüssel Gelöscht : HKLM\Software\Iminent ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16384 -\\ Mozilla Firefox v24.0 (de) [ Datei : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\prefs.js ] ************************* AdwCleaner[R0].txt - [10906 octets] - [05/11/2013 19:21:27] AdwCleaner[S0].txt - [10384 octets] - [05/11/2013 19:24:52] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10445 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.7 (10.15.2013:3) OS: Windows 8.1 x64 Ran by Daniel on 05.11.2013 at 19:31:09,92 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL\\Default ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{F3694D8B-6F74-4907-90BD-477FF8ACFF04} ~~~ Files ~~~ Folders ~~~ FireFox Emptied folder: C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\f6n8l9jc.default\minidumps [5 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 05.11.2013 at 20:06:48,68 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
06.11.2013, 14:37 | #8 |
/// the machine /// TB-Ausbilder | Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner?ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
07.11.2013, 16:31 | #9 |
| Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner? Hallo, ja. Meine Frau ist zickig. Ich suche einen Resetknopf und ein Update für die Audioausgabe. Der Rest ist in Arbeit, bin im Moment viel unterwegs. Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=16f9bb2e5407bb419b22ff74c3872c63 # engine=15784 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-11-06 09:04:13 # local_time=2013-11-06 10:04:13 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.2.9200 NT # compatibility_mode=5893 16776574 100 94 3257251 8653146 0 0 # scanned=160328 # found=0 # cleaned=0 # scan_time=5859 Code:
ATTFilter Results of screen317's Security Check version 0.99.74 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` G Data InternetSecurity 2014 Windows Defender Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 TuneUp Utilities 2014 TuneUp Utilities 2014 (de-DE) TuneUp Utilities 2014 HDCleaner Java 7 Update 45 Java version out of Date! Adobe Flash Player 11.9.900.117 Adobe Reader XI Mozilla Firefox (24.0) Mozilla Thunderbird (24.0.1) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes' Anti-Malware mbamscheduler.exe G Data InternetSecurity Firewall GDFwSvcx64.exe G Data InternetSecurity Firewall GDFirewallTray.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013 Ran by Daniel (administrator) on PCDANIEL on 07-11-2013 16:29:26 Running from C:\Users\Daniel\Desktop Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (Intel Corporation) C:\WINDOWS\system32\DptfParticipantProcessorService.exe (Microsoft Corporation) C:\WINDOWS\system32\dashost.exe (Intel Corporation) C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe () C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (Microsoft Corporation) C:\Windows\System32\skydrive.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\WWAHost.exe (Microsoft Corporation) C:\WINDOWS\WinStore\WSHost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HotKeysCmds] - "C:\WINDOWS\system32\hkcmd.exe" HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13267016 2013-01-23] (Realtek Semiconductor) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028896 2013-09-19] (NVIDIA Corporation) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) MountPoints2: {89687731-0fa8-11e3-be83-74d02b1d7fcf} - "F:\PMCsetup.exe" HKLM-x32\...\Run: [GDFirewallTray] - C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG) HKLM-x32\...\Run: [G Data AntiVirus Tray] - C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG) AppInit_DLLs: C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll [168616 2013-10-16] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-10-16] (NVIDIA Corporation) IMEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\excel.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\msoxmled.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\mstore.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\offdiag.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\tubebox.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\winword.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKCU - {02818974-95E8-4BA4-B42C-5A7325F96661} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10447 SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0CFC4C07-694D-4152-80D2-C40C9B8A2F4E} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10447 BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll No File FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: pokki.com/PokkiDownloadHelper - C:\Users\Daniel\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.2.0.78.dll (Pokki) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: PrefBar - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\{8A6C82A1-F6C9-481a-AAE7-C96444C9A754} FF Extension: DownloadHelper - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: elemhidehelper - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\elemhidehelper@adblockplus.org.xpi FF Extension: jid1-F9UJ2thwoAm5gQ - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\jid1-F9UJ2thwoAm5gQ@jetpack.xpi FF Extension: Noia4Options - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\Noia4Options@ArisT2.xpi FF Extension: NoiaFoxoption - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\NoiaFoxoption@davidvincent.tld.xpi FF Extension: No Name - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\{7b90e860-5d61-11e0-80e3-0800200c9a66}.xpi FF Extension: No Name - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\{c0c588b6-b11d-4898-af00-079fed05aa32}.xpi FF Extension: Adblock Plus - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: No Name - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\f6n8l9jc.default\Extensions\{faf13420-5e24-11e0-80e3-0800200c9a66}.xpi Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION ==================== Services (Whitelisted) ================= S3 AppReadiness; C:\Windows\system32\AppReadiness.dll [533504 2013-09-30] (Microsoft Corporation) S3 AppXSvc; C:\Windows\system32\appxdeploymentserver.dll [1302016 2013-09-30] (Microsoft Corporation) S4 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe [2562208 2013-10-15] (G Data Software AG) R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [31632 2013-01-18] (Intel Corporation) R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [33168 2013-01-18] (Intel Corporation) R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2942808 2013-10-17] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG) S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [111616 2013-08-22] (Microsoft Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) S3 lfsvc; C:\Windows\System32\GeofenceMonitorService.dll [491520 2013-09-30] (Microsoft Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R3 NcbService; C:\Windows\System32\ncbservice.dll [151040 2013-08-22] (Microsoft Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-09-19] (NVIDIA Corporation) S3 ScDeviceEnum; C:\Windows\System32\ScDeviceEnum.dll [130560 2013-08-22] (Microsoft Corporation) S3 smphost; C:\Windows\System32\smphost.dll [13312 2013-08-22] (Microsoft Corporation) S3 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-12] (TuneUp Software) S3 vmicguestinterface; C:\Windows\System32\ICSvc.dll [517120 2013-08-22] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) S3 WEPHOSTSVC; C:\Windows\system32\wephostsvc.dll [24576 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) S3 workfolderssvc; C:\Windows\system32\workfolderssvc.dll [1581568 2013-09-30] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R1 ahcache; C:\Windows\System32\DRIVERS\ahcache.sys [76800 2013-08-22] (Microsoft Corporation) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-01-16] (ASUS Corporation) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [107920 2013-01-18] (Intel Corporation) R3 DptfDevFan; C:\Windows\system32\DRIVERS\DptfDevFan.sys [43408 2013-01-18] (Intel Corporation) R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [65424 2013-01-18] (Intel Corporation) R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [229776 2013-01-18] (Intel Corporation) R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [363920 2013-01-18] (Intel Corporation) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-10-11] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-10-11] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [64856 2013-10-11] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [68440 2013-10-22] (G Data Software AG) R1 GRD; C:\WINDOWS\system32\drivers\GRD.sys [106272 2013-11-01] (G Data Software) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-10-11] (G Data Software AG) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-09-30] (Microsoft Corporation) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [56672 2013-08-22] (Microsoft Corporation) S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2013-08-22] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== NETSVC: lfsvc -> C:\Windows\System32\GeofenceMonitorService.dll (Microsoft Corporation) ==================== One Month Created Files and Folders ======== 2013-11-07 16:17 - 2013-11-07 16:17 - 00891167 _____ C:\Users\Daniel\Desktop\SecurityCheck.exe 2013-11-06 20:20 - 2013-11-06 20:20 - 00000000 ____D C:\Program Files (x86)\ESET 2013-11-05 19:30 - 2013-11-05 19:30 - 00000000 ____D C:\WINDOWS\ERUNT 2013-11-05 19:29 - 2013-11-05 19:29 - 01033335 _____ (Thisisu) C:\Users\Daniel\Desktop\JRT.exe 2013-11-05 19:20 - 2013-11-05 19:24 - 00000000 ____D C:\AdwCleaner 2013-11-05 19:19 - 2013-11-05 19:19 - 01073258 _____ C:\Users\Daniel\Desktop\adwcleaner.exe 2013-11-05 17:52 - 2013-11-05 17:52 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Malwarebytes 2013-11-05 17:51 - 2013-11-05 17:51 - 00001127 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-05 17:51 - 2013-11-05 17:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-05 17:51 - 2013-11-05 17:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-05 17:51 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2013-11-02 19:18 - 2013-11-02 19:18 - 00000000 ____D C:\FRST 2013-11-02 19:17 - 2013-11-02 19:17 - 01957098 _____ (Farbar) C:\Users\Daniel\Desktop\FRST64.exe 2013-11-01 21:14 - 2013-11-01 21:14 - 00106272 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GRD.sys 2013-11-01 21:14 - 2013-11-01 21:14 - 00019016 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GdPhyMem.sys 2013-11-01 20:59 - 2013-11-01 20:59 - 00000000 __SHD C:\Users\Daniel\Desktop\ts 2013-10-31 08:34 - 2013-10-31 08:34 - 00001368 _____ C:\Users\Daniel\Desktop\autoruns.lnk 2013-10-30 20:33 - 2013-10-30 20:34 - 00000000 ____D C:\Users\Daniel\Desktop\Fieldhead 2013-10-30 18:57 - 2013-10-30 18:58 - 00000000 ____D C:\Users\Daniel\Desktop\Neuer Ordner 2013-10-28 23:49 - 2013-10-28 23:49 - 00000000 ____D C:\Program Files\7-Zip 2013-10-28 22:44 - 2013-10-28 22:44 - 00001396 _____ C:\Users\Daniel\Desktop\Mp3tag.lnk 2013-10-28 20:43 - 2013-10-28 22:15 - 00000179 ____H C:\Users\Daniel\Desktop\Neues Textdokument.txt 2013-10-28 18:49 - 2013-10-28 18:49 - 00001688 _____ C:\Users\Daniel\Desktop\WORD.lnk 2013-10-28 18:49 - 2013-10-23 12:01 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2013-10-28 18:49 - 2013-10-23 09:59 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2013-10-28 18:48 - 2013-10-28 18:48 - 00001668 _____ C:\Users\Daniel\Desktop\EXCEL.lnk 2013-10-28 18:46 - 2013-10-28 18:46 - 00001699 _____ C:\Users\Daniel\Desktop\POWERPOINT.lnk 2013-10-28 18:40 - 2013-10-28 18:40 - 00001306 _____ C:\Users\Daniel\Desktop\Steam.lnk 2013-10-28 18:39 - 2013-10-28 18:39 - 00001380 _____ C:\Users\Daniel\Desktop\Sonic & SEGA All-Stars Racing.lnk 2013-10-28 18:38 - 2013-10-28 18:38 - 00001574 _____ C:\Users\Daniel\Desktop\TubeBox.lnk 2013-10-28 18:38 - 2013-10-28 18:38 - 00001506 _____ C:\Users\Daniel\Desktop\firefox.lnk 2013-10-28 18:37 - 2013-10-28 18:37 - 00001352 _____ C:\Users\Daniel\Desktop\CDex.lnk 2013-10-28 18:13 - 2013-10-28 18:13 - 00002104 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-10-27 22:32 - 2013-10-27 22:32 - 00000000 ____D C:\Users\Daniel\SystemRequirementsLab 2013-10-27 22:32 - 2013-10-27 22:32 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab 2013-10-27 22:30 - 2013-10-27 22:30 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe 2013-10-27 22:30 - 2013-10-27 22:30 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe 2013-10-27 22:30 - 2013-10-27 22:30 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe 2013-10-27 22:30 - 2013-10-27 22:30 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2013-10-27 22:30 - 2013-10-27 22:30 - 00000000 ____D C:\ProgramData\Sun 2013-10-27 22:30 - 2013-10-27 22:30 - 00000000 ____D C:\ProgramData\Oracle 2013-10-27 22:30 - 2013-10-27 22:30 - 00000000 ____D C:\Program Files (x86)\Java 2013-10-27 22:12 - 2013-10-27 22:12 - 00000000 ____D C:\Users\Daniel\AppData\Local\DriverTuner 2013-10-27 22:05 - 2013-10-27 22:05 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-10-27 22:04 - 2013-10-27 22:04 - 00000000 ____D C:\WINDOWS\SysWOW64\NV 2013-10-27 22:04 - 2013-10-27 22:04 - 00000000 ____D C:\WINDOWS\system32\NV 2013-10-27 22:02 - 2013-10-16 01:48 - 30344992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 25256224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 22933280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 18290536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 18243632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 17560352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 15858664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 15244272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 12537632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2013-10-27 22:02 - 2013-10-16 01:48 - 11415232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 11362672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 09516872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 09472600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 03131680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 03124512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 02946848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 02747168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 02694664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433158.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433158.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00696096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00655136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00560416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00479520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00405280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00317472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00266984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2013-10-27 22:02 - 2013-10-16 01:48 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2013-10-27 22:01 - 2013-10-27 22:01 - 00000000 ____D C:\NVIDIA 2013-10-27 17:59 - 2013-10-28 18:20 - 00000000 ____D C:\Program Files (x86)\HDCleaner 2013-10-27 17:59 - 2013-10-28 18:15 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDCleaner 2013-10-27 17:59 - 2013-10-27 17:59 - 00001185 _____ C:\Users\Daniel\Desktop\HDCleaner.lnk 2013-10-25 20:24 - 2013-10-28 18:43 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\FLV and Media Player 2013-10-25 20:24 - 2013-10-25 20:24 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\vlc 2013-10-25 20:23 - 2013-10-25 20:23 - 00000000 ____D C:\Program Files (x86)\Applian Technologies 2013-10-25 12:15 - 2013-10-25 12:15 - 00000000 ____D C:\Users\Daniel\AppData\Local\Avg2014 2013-10-24 19:43 - 2013-10-19 06:38 - 23213056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2013-10-24 19:43 - 2013-10-19 05:52 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2013-10-24 19:43 - 2013-10-19 05:33 - 02763776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2013-10-24 19:43 - 2013-10-19 04:59 - 17143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2013-10-24 19:43 - 2013-10-19 04:42 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2013-10-24 19:43 - 2013-10-19 04:19 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2013-10-24 19:43 - 2013-10-19 03:42 - 12995072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2013-10-24 19:43 - 2013-10-19 03:27 - 11222016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2013-10-24 17:38 - 2013-10-24 17:38 - 00000000 ____D C:\Users\Daniel\AppData\Local\TubeBox 2013-10-24 17:32 - 2013-10-24 18:07 - 00000000 ____D C:\Users\Daniel\Documents\TubeBox 2013-10-24 17:32 - 2013-10-24 17:32 - 00000000 ____D C:\Users\Daniel\AppData\Local\Freetec 2013-10-24 17:31 - 2013-10-24 17:31 - 00000000 ____D C:\Users\Daniel\AppData\Local\Google 2013-10-24 17:27 - 2013-10-24 17:48 - 00000898 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog 2013-10-24 17:26 - 2013-10-24 17:26 - 00000000 ____D C:\ProgramData\Package Cache 2013-10-24 17:26 - 2013-10-24 17:26 - 00000000 ____D C:\Program Files (x86)\Freetec 2013-10-24 14:42 - 2013-10-28 23:34 - 00000000 ____D C:\Users\Daniel\Desktop\The Suburbs 2013-10-23 21:41 - 2013-10-23 21:41 - 00002300 _____ C:\WINDOWS\logboot_23.10.2013.tureg.log 2013-10-23 20:49 - 2013-10-23 20:49 - 00002770 _____ C:\WINDOWS\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-10-23 19:31 - 2013-10-30 18:16 - 00000000 ____D C:\Users\Daniel\dwhelper 2013-10-23 07:48 - 2013-10-23 07:48 - 00000000 ____D C:\Program Files (x86)\SEGA 2013-10-19 10:52 - 2013-10-28 18:03 - 00000000 ___RD C:\WINDOWS\BrowserChoice 2013-10-18 20:54 - 2013-11-07 16:15 - 00003934 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{783B4666-F899-4BDF-86B0-76111EDA3981} 2013-10-18 20:29 - 2013-10-12 01:28 - 00040760 _____ (TuneUp Software) C:\WINDOWS\system32\TURegOpt.exe 2013-10-18 20:29 - 2013-10-12 01:28 - 00029496 _____ (TuneUp Software) C:\WINDOWS\system32\authuitu.dll 2013-10-18 20:29 - 2013-10-12 01:28 - 00025400 _____ (TuneUp Software) C:\WINDOWS\SysWOW64\authuitu.dll 2013-10-18 20:28 - 2013-10-18 20:29 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-10-18 20:27 - 2013-10-18 20:35 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-10-18 17:23 - 2013-10-18 17:23 - 00000017 _____ C:\Users\Daniel\AppData\Local\resmon.resmoncfg 2013-10-18 17:18 - 2013-10-18 17:18 - 00000000 ____D C:\Users\Daniel\AppData\Local\Frameworkx.com 2013-10-17 23:08 - 2013-10-18 20:09 - 00000000 ___DC C:\WINDOWS\Panther 2013-10-17 23:08 - 2013-10-17 23:08 - 00000000 __SHD C:\Recovery 2013-10-17 23:07 - 2013-10-17 23:07 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2013-10-17 23:07 - 2013-10-17 23:07 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2013-10-17 23:07 - 2013-10-17 23:07 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2013-10-17 23:06 - 2013-10-17 23:06 - 00262144 _____ C:\WINDOWS\system32\config\userdiff 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files\MSBuild 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-10-17 23:04 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2013-10-17 23:04 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-17 23:04 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2013-10-17 23:04 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2013-10-17 23:04 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-17 23:04 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2013-10-17 22:44 - 2013-10-17 22:44 - 00000000 ____D C:\Users\Daniel\AppData\Local\Intel_Corporation 2013-10-17 22:41 - 2013-11-07 16:11 - 00000000 __RDO C:\Users\Daniel\SkyDrive 2013-10-17 22:37 - 2013-10-17 22:37 - 00001456 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-10-17 22:36 - 2013-10-17 22:36 - 00000020 ___SH C:\Users\Daniel\ntuser.ini 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Programme 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-10-17 22:33 - 2013-10-17 22:33 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat 2013-10-17 22:21 - 2013-10-17 22:21 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2013-10-17 22:21 - 2013-10-17 22:21 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2013-10-17 22:18 - 2013-10-17 22:18 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2013-10-17 22:17 - 2013-10-28 18:15 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-10-17 22:17 - 2013-10-28 18:15 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-17 22:17 - 2013-10-28 18:15 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-10-17 22:17 - 2013-10-28 18:03 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-10-17 22:17 - 2013-10-28 18:03 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-17 22:17 - 2013-10-28 18:03 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-10-17 22:17 - 2013-10-27 22:32 - 00000000 ____D C:\Users\Daniel 2013-10-17 22:17 - 2013-10-17 22:33 - 00028578 _____ C:\WINDOWS\diagwrn.xml 2013-10-17 22:17 - 2013-10-17 22:33 - 00028578 _____ C:\WINDOWS\diagerr.xml 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Vorlagen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Startmenü 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Netzwerkumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Lokale Einstellungen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Eigene Dateien 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Druckumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Documents\Eigene Musik 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Documents\Eigene Bilder 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\AppData\Local\Verlauf 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\AppData\Local\Anwendungsdaten 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Anwendungsdaten 2013-10-17 22:17 - 2013-08-22 16:36 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-10-17 22:17 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevGen_01009.Wdf 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevFan_01009.Wdf 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____D C:\Program Files\Realtek 2013-10-17 22:12 - 2013-10-15 22:47 - 06665504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2013-10-17 22:12 - 2013-10-15 22:47 - 03489568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2013-10-17 22:12 - 2013-10-15 22:47 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2013-10-17 22:12 - 2013-10-15 22:47 - 01064224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2013-10-17 22:12 - 2013-10-15 22:47 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2013-10-17 22:12 - 2013-10-15 22:47 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2013-10-17 22:12 - 2013-10-15 22:47 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2013-10-17 22:12 - 2013-10-15 22:47 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2013-10-17 22:12 - 2013-10-08 20:14 - 03398914 _____ C:\WINDOWS\system32\nvcoproc.bin 2013-10-17 22:11 - 2013-11-07 16:14 - 01790096 _____ C:\WINDOWS\WindowsUpdate.log 2013-10-17 22:11 - 2013-10-17 22:20 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-10-17 22:10 - 2013-10-27 22:05 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-10-17 22:10 - 2013-10-17 22:20 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-10-17 22:10 - 2013-10-17 22:20 - 00000000 ____D C:\Program Files (x86)\Intel 2013-10-17 22:10 - 2013-10-17 22:10 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfManager_01009.Wdf 2013-10-17 22:10 - 2013-10-17 22:10 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevProc_01009.Wdf 2013-10-17 22:10 - 2013-10-17 22:10 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevDram_01009.Wdf 2013-10-17 22:10 - 2013-10-01 12:02 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2013-10-17 22:10 - 2013-10-01 12:02 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2013-10-17 21:48 - 2013-10-17 22:33 - 00006705 _____ C:\WINDOWS\comsetup.log 2013-10-12 18:52 - 2013-10-12 18:52 - 00000000 ____D C:\Users\Daniel\Documents\ASUS 2013-10-12 18:51 - 2013-10-12 18:51 - 00000000 ____D C:\ProgramData\ASUS 2013-10-12 18:50 - 2013-10-12 18:50 - 00000021 _____ C:\Users\Daniel\AppData\Roaming\my_intel.sys 2013-10-09 08:52 - 2013-10-09 08:52 - 00020280 _____ (ASUS) C:\WINDOWS\system32\Drivers\AsHIDSwitch64.sys ==================== One Month Modified Files and Folders ======= 2013-11-07 16:27 - 2013-08-20 20:38 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3014575398-1375843394-1487085610-1002 2013-11-07 16:23 - 2013-10-17 22:11 - 01790096 _____ C:\WINDOWS\WindowsUpdate.log 2013-11-07 16:17 - 2013-11-07 16:17 - 00891167 _____ C:\Users\Daniel\Desktop\SecurityCheck.exe 2013-11-07 16:15 - 2013-10-18 20:54 - 00003934 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{783B4666-F899-4BDF-86B0-76111EDA3981} 2013-11-07 16:14 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness 2013-11-07 16:11 - 2013-10-17 22:41 - 00000000 __RDO C:\Users\Daniel\SkyDrive 2013-11-07 16:10 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-11-07 16:10 - 2013-08-20 20:31 - 00000062 _____ C:\Users\Daniel\AppData\Roaming\sp_data.sys 2013-11-07 01:28 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2013-11-07 01:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru 2013-11-06 20:20 - 2013-11-06 20:20 - 00000000 ____D C:\Program Files (x86)\ESET 2013-11-05 19:30 - 2013-11-05 19:30 - 00000000 ____D C:\WINDOWS\ERUNT 2013-11-05 19:29 - 2013-11-05 19:29 - 01033335 _____ (Thisisu) C:\Users\Daniel\Desktop\JRT.exe 2013-11-05 19:24 - 2013-11-05 19:20 - 00000000 ____D C:\AdwCleaner 2013-11-05 19:19 - 2013-11-05 19:19 - 01073258 _____ C:\Users\Daniel\Desktop\adwcleaner.exe 2013-11-05 19:18 - 2013-08-21 17:26 - 00000000 ____D C:\Users\Daniel\AppData\Local\Pokki 2013-11-05 19:16 - 2013-09-29 20:04 - 00012242 _____ C:\WINDOWS\PFRO.log 2013-11-05 17:52 - 2013-11-05 17:52 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Malwarebytes 2013-11-05 17:51 - 2013-11-05 17:51 - 00001127 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-05 17:51 - 2013-11-05 17:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-05 17:51 - 2013-11-05 17:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-04 19:13 - 2013-08-23 22:04 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Mp3tag 2013-11-02 19:18 - 2013-11-02 19:18 - 00000000 ____D C:\FRST 2013-11-02 19:17 - 2013-11-02 19:17 - 01957098 _____ (Farbar) C:\Users\Daniel\Desktop\FRST64.exe 2013-11-02 18:43 - 2013-08-20 20:28 - 00000000 ____D C:\Users\Daniel\AppData\Local\VirtualStore 2013-11-01 21:17 - 2013-08-25 16:06 - 00000000 ____D C:\Users\Daniel\AppData\Local\G DATA 2013-11-01 21:14 - 2013-11-01 21:14 - 00106272 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GRD.sys 2013-11-01 21:14 - 2013-11-01 21:14 - 00019016 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GdPhyMem.sys 2013-11-01 20:59 - 2013-11-01 20:59 - 00000000 __SHD C:\Users\Daniel\Desktop\ts 2013-10-31 21:01 - 2013-09-30 05:14 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-10-31 21:01 - 2013-09-30 04:56 - 00771640 _____ C:\WINDOWS\system32\perfh007.dat 2013-10-31 21:01 - 2013-09-30 04:56 - 00161916 _____ C:\WINDOWS\system32\perfc007.dat 2013-10-31 08:34 - 2013-10-31 08:34 - 00001368 _____ C:\Users\Daniel\Desktop\autoruns.lnk 2013-10-31 08:34 - 2013-09-20 16:26 - 00000000 ____D C:\Program Files (x86)\Autoruns 2013-10-30 20:34 - 2013-10-30 20:33 - 00000000 ____D C:\Users\Daniel\Desktop\Fieldhead 2013-10-30 18:58 - 2013-10-30 18:57 - 00000000 ____D C:\Users\Daniel\Desktop\Neuer Ordner 2013-10-30 18:16 - 2013-10-23 19:31 - 00000000 ____D C:\Users\Daniel\dwhelper 2013-10-28 23:55 - 2013-08-20 20:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-10-28 23:49 - 2013-10-28 23:49 - 00000000 ____D C:\Program Files\7-Zip 2013-10-28 23:34 - 2013-10-24 14:42 - 00000000 ____D C:\Users\Daniel\Desktop\The Suburbs 2013-10-28 22:44 - 2013-10-28 22:44 - 00001396 _____ C:\Users\Daniel\Desktop\Mp3tag.lnk 2013-10-28 22:15 - 2013-10-28 20:43 - 00000179 ____H C:\Users\Daniel\Desktop\Neues Textdokument.txt 2013-10-28 20:08 - 2013-08-20 20:28 - 00000000 ____D C:\Users\Daniel\AppData\Local\Packages 2013-10-28 18:49 - 2013-10-28 18:49 - 00001688 _____ C:\Users\Daniel\Desktop\WORD.lnk 2013-10-28 18:48 - 2013-10-28 18:48 - 00001668 _____ C:\Users\Daniel\Desktop\EXCEL.lnk 2013-10-28 18:46 - 2013-10-28 18:46 - 00001699 _____ C:\Users\Daniel\Desktop\POWERPOINT.lnk 2013-10-28 18:43 - 2013-10-25 20:24 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\FLV and Media Player 2013-10-28 18:40 - 2013-10-28 18:40 - 00001306 _____ C:\Users\Daniel\Desktop\Steam.lnk 2013-10-28 18:40 - 2013-08-29 16:01 - 00000000 ____D C:\Program Files (x86)\Steam 2013-10-28 18:39 - 2013-10-28 18:39 - 00001380 _____ C:\Users\Daniel\Desktop\Sonic & SEGA All-Stars Racing.lnk 2013-10-28 18:38 - 2013-10-28 18:38 - 00001574 _____ C:\Users\Daniel\Desktop\TubeBox.lnk 2013-10-28 18:38 - 2013-10-28 18:38 - 00001506 _____ C:\Users\Daniel\Desktop\firefox.lnk 2013-10-28 18:37 - 2013-10-28 18:37 - 00001352 _____ C:\Users\Daniel\Desktop\CDex.lnk 2013-10-28 18:36 - 2013-08-21 17:12 - 00000000 ____D C:\Program Files (x86)\CDex 2013-10-28 18:20 - 2013-10-27 17:59 - 00000000 ____D C:\Program Files (x86)\HDCleaner 2013-10-28 18:15 - 2013-10-27 17:59 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDCleaner 2013-10-28 18:15 - 2013-10-17 22:17 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-10-28 18:15 - 2013-10-17 22:17 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-28 18:15 - 2013-10-17 22:17 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-10-28 18:15 - 2013-08-21 17:25 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in 2013-10-28 18:13 - 2013-10-28 18:13 - 00002104 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-10-28 18:12 - 2013-08-21 15:49 - 00000000 ____D C:\Users\Daniel\AppData\Local\Thunderbird 2013-10-28 18:12 - 2013-08-21 15:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-10-28 18:03 - 2013-10-19 10:52 - 00000000 ___RD C:\WINDOWS\BrowserChoice 2013-10-28 18:03 - 2013-10-17 22:17 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-10-28 18:03 - 2013-10-17 22:17 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-28 18:03 - 2013-10-17 22:17 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-10-28 18:03 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-10-27 22:48 - 2013-08-20 22:06 - 00000000 ____D C:\Users\Daniel\AppData\Local\Adobe 2013-10-27 22:45 - 2012-11-27 05:08 - 00000000 ____D C:\ProgramData\Adobe 2013-10-27 22:45 - 2012-11-27 05:08 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-10-27 22:32 - 2013-10-27 22:32 - 00000000 ____D C:\Users\Daniel\SystemRequirementsLab 2013-10-27 22:32 - 2013-10-27 22:32 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab 2013-10-27 22:32 - 2013-10-17 22:17 - 00000000 ____D C:\Users\Daniel 2013-10-27 22:30 - 2013-10-27 22:30 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe 2013-10-27 22:30 - 2013-10-27 22:30 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe 2013-10-27 22:30 - 2013-10-27 22:30 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe 2013-10-27 22:30 - 2013-10-27 22:30 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2013-10-27 22:30 - 2013-10-27 22:30 - 00000000 ____D C:\ProgramData\Sun 2013-10-27 22:30 - 2013-10-27 22:30 - 00000000 ____D C:\ProgramData\Oracle 2013-10-27 22:30 - 2013-10-27 22:30 - 00000000 ____D C:\Program Files (x86)\Java 2013-10-27 22:12 - 2013-10-27 22:12 - 00000000 ____D C:\Users\Daniel\AppData\Local\DriverTuner 2013-10-27 22:05 - 2013-10-27 22:05 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2013-10-27 22:05 - 2013-10-17 22:10 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-10-27 22:05 - 2013-08-22 15:46 - 00336213 _____ C:\WINDOWS\setupact.log 2013-10-27 22:04 - 2013-10-27 22:04 - 00000000 ____D C:\WINDOWS\SysWOW64\NV 2013-10-27 22:04 - 2013-10-27 22:04 - 00000000 ____D C:\WINDOWS\system32\NV 2013-10-27 22:04 - 2013-05-11 02:30 - 00000000 ____D C:\ProgramData\NVIDIA 2013-10-27 22:01 - 2013-10-27 22:01 - 00000000 ____D C:\NVIDIA 2013-10-27 21:50 - 2012-11-27 05:08 - 06615944 _____ C:\WINDOWS\AsDebug.log 2013-10-27 21:50 - 2012-11-27 05:08 - 01942842 _____ C:\WINDOWS\AsCDProc.log 2013-10-27 17:59 - 2013-10-27 17:59 - 00001185 _____ C:\Users\Daniel\Desktop\HDCleaner.lnk 2013-10-25 20:24 - 2013-10-25 20:24 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\vlc 2013-10-25 20:23 - 2013-10-25 20:23 - 00000000 ____D C:\Program Files (x86)\Applian Technologies 2013-10-25 12:15 - 2013-10-25 12:15 - 00000000 ____D C:\Users\Daniel\AppData\Local\Avg2014 2013-10-24 18:07 - 2013-10-24 17:32 - 00000000 ____D C:\Users\Daniel\Documents\TubeBox 2013-10-24 17:48 - 2013-10-24 17:27 - 00000898 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog 2013-10-24 17:38 - 2013-10-24 17:38 - 00000000 ____D C:\Users\Daniel\AppData\Local\TubeBox 2013-10-24 17:32 - 2013-10-24 17:32 - 00000000 ____D C:\Users\Daniel\AppData\Local\Freetec 2013-10-24 17:31 - 2013-10-24 17:31 - 00000000 ____D C:\Users\Daniel\AppData\Local\Google 2013-10-24 17:26 - 2013-10-24 17:26 - 00000000 ____D C:\ProgramData\Package Cache 2013-10-24 17:26 - 2013-10-24 17:26 - 00000000 ____D C:\Program Files (x86)\Freetec 2013-10-23 21:41 - 2013-10-23 21:41 - 00002300 _____ C:\WINDOWS\logboot_23.10.2013.tureg.log 2013-10-23 21:41 - 2013-08-22 14:25 - 60030976 _____ C:\WINDOWS\system32\config\SOFTWARE_tureg_old 2013-10-23 21:41 - 2013-08-22 14:25 - 11534336 _____ C:\WINDOWS\system32\config\SYSTEM_tureg_old 2013-10-23 21:41 - 2013-08-22 14:25 - 00524288 _____ C:\WINDOWS\system32\config\DEFAULT_tureg_old 2013-10-23 21:41 - 2013-08-22 14:25 - 00262144 _____ C:\WINDOWS\system32\config\SECURITY_tureg_old 2013-10-23 21:41 - 2013-08-22 14:25 - 00262144 _____ C:\WINDOWS\system32\config\SAM_tureg_old 2013-10-23 20:49 - 2013-10-23 20:49 - 00002770 _____ C:\WINDOWS\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-10-23 12:01 - 2013-10-28 18:49 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2013-10-23 09:59 - 2013-10-28 18:49 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2013-10-23 07:58 - 2012-11-27 05:09 - 00011155 _____ C:\WINDOWS\DirectX.log 2013-10-23 07:48 - 2013-10-23 07:48 - 00000000 ____D C:\Program Files (x86)\SEGA 2013-10-23 07:48 - 2013-05-11 02:23 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-10-23 07:45 - 2013-08-24 21:46 - 00000000 ____D C:\Users\Daniel\AppData\Local\Windows Live 2013-10-22 18:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache 2013-10-22 18:11 - 2013-08-21 20:09 - 00068440 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\gdwfpcd64.sys 2013-10-21 19:31 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF 2013-10-21 19:29 - 2013-08-21 17:12 - 00000000 ____D C:\Program Files (x86)\Mp3tag 2013-10-19 06:38 - 2013-10-24 19:43 - 23213056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2013-10-19 05:52 - 2013-10-24 19:43 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2013-10-19 05:33 - 2013-10-24 19:43 - 02763776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2013-10-19 04:59 - 2013-10-24 19:43 - 17143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2013-10-19 04:42 - 2013-10-24 19:43 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2013-10-19 04:19 - 2013-10-24 19:43 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2013-10-19 03:42 - 2013-10-24 19:43 - 12995072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2013-10-19 03:27 - 2013-10-24 19:43 - 11222016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2013-10-18 20:49 - 2013-08-20 22:07 - 00003774 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2013-10-18 20:35 - 2013-10-18 20:27 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-10-18 20:30 - 2013-08-20 20:57 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-10-18 20:29 - 2013-10-18 20:28 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2013-10-18 20:29 - 2013-08-20 20:58 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\TuneUp Software 2013-10-18 20:09 - 2013-10-17 23:08 - 00000000 ___DC C:\WINDOWS\Panther 2013-10-18 17:23 - 2013-10-18 17:23 - 00000017 _____ C:\Users\Daniel\AppData\Local\resmon.resmoncfg 2013-10-18 17:18 - 2013-10-18 17:18 - 00000000 ____D C:\Users\Daniel\AppData\Local\Frameworkx.com 2013-10-18 06:47 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore 2013-10-17 23:08 - 2013-10-17 23:08 - 00000000 __SHD C:\Recovery 2013-10-17 23:07 - 2013-10-17 23:07 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2013-10-17 23:07 - 2013-10-17 23:07 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2013-10-17 23:07 - 2013-10-17 23:07 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2013-10-17 23:07 - 2013-10-17 23:07 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2013-10-17 23:07 - 2013-08-22 16:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template 2013-10-17 23:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore 2013-10-17 23:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera 2013-10-17 23:06 - 2013-10-17 23:06 - 00262144 _____ C:\WINDOWS\system32\config\userdiff 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files\MSBuild 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2013-10-17 23:04 - 2013-10-17 23:04 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-10-17 22:44 - 2013-10-17 22:44 - 00000000 ____D C:\Users\Daniel\AppData\Local\Intel_Corporation 2013-10-17 22:37 - 2013-10-17 22:37 - 00001456 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-10-17 22:37 - 2013-08-20 20:30 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-10-17 22:37 - 2013-08-20 20:30 - 00000000 ___RD C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-10-17 22:36 - 2013-10-17 22:36 - 00000020 ___SH C:\Users\Daniel\ntuser.ini 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Programme 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-10-17 22:34 - 2013-10-17 22:34 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-10-17 22:34 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Registration 2013-10-17 22:34 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT 2013-10-17 22:34 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default 2013-10-17 22:33 - 2013-10-17 22:33 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat 2013-10-17 22:33 - 2013-10-17 22:17 - 00028578 _____ C:\WINDOWS\diagwrn.xml 2013-10-17 22:33 - 2013-10-17 22:17 - 00028578 _____ C:\WINDOWS\diagerr.xml 2013-10-17 22:33 - 2013-10-17 21:48 - 00006705 _____ C:\WINDOWS\comsetup.log 2013-10-17 22:27 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media 2013-10-17 22:27 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries 2013-10-17 22:24 - 2013-08-22 15:44 - 00406504 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-10-17 22:22 - 2013-09-30 04:59 - 00000000 ____D C:\WINDOWS\ShellNew 2013-10-17 22:22 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2013-10-17 22:22 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM 2013-10-17 22:22 - 2012-11-27 05:10 - 00000000 ____D C:\WINDOWS\nl 2013-10-17 22:22 - 2012-11-27 05:10 - 00000000 ____D C:\WINDOWS\it 2013-10-17 22:22 - 2012-11-27 05:10 - 00000000 ____D C:\WINDOWS\fr 2013-10-17 22:22 - 2012-11-27 05:10 - 00000000 ____D C:\WINDOWS\de 2013-10-17 22:22 - 2012-07-26 10:43 - 00000000 ____D C:\WINDOWS\en-GB 2013-10-17 22:21 - 2013-10-17 22:21 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2013-10-17 22:21 - 2013-10-17 22:21 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2013-10-17 22:21 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2013-10-17 22:21 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2013-10-17 22:21 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\WCN 2013-10-17 22:21 - 2013-08-22 16:37 - 00004893 _____ C:\WINDOWS\DtcInstall.log 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI 2013-10-17 22:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME 2013-10-17 22:21 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI 2013-10-17 22:21 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\oobe 2013-10-17 22:21 - 2013-05-11 02:36 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2013-10-17 22:21 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated 2013-10-17 22:20 - 2013-10-17 22:11 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-10-17 22:20 - 2013-10-17 22:10 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-10-17 22:20 - 2013-10-17 22:10 - 00000000 ____D C:\Program Files (x86)\Intel 2013-10-17 22:20 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Resources 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\System 2013-10-17 22:20 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-10-17 22:20 - 2012-08-02 14:28 - 00000000 ____D C:\ProgramData\PRICache 2013-10-17 22:18 - 2013-10-17 22:18 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2013-10-17 22:18 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Vorlagen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Startmenü 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Netzwerkumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Lokale Einstellungen 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Eigene Dateien 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Druckumgebung 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Documents\Eigene Musik 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Documents\Eigene Bilder 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\AppData\Local\Verlauf 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\AppData\Local\Anwendungsdaten 2013-10-17 22:17 - 2013-10-17 22:17 - 00000000 _SHDL C:\Users\Daniel\Anwendungsdaten 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevGen_01009.Wdf 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevFan_01009.Wdf 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2013-10-17 22:13 - 2013-10-17 22:13 - 00000000 ____D C:\Program Files\Realtek 2013-10-17 22:10 - 2013-10-17 22:10 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfManager_01009.Wdf 2013-10-17 22:10 - 2013-10-17 22:10 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevProc_01009.Wdf 2013-10-17 22:10 - 2013-10-17 22:10 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_DptfDevDram_01009.Wdf 2013-10-17 21:55 - 2013-05-11 02:29 - 01895157 _____ C:\WINDOWS\WindowsUpdate (1).log 2013-10-17 21:43 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent 2013-10-16 01:48 - 2013-10-27 22:02 - 30344992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 25256224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 22933280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 18290536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 18243632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 17560352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 15858664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 15244272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 12537632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2013-10-16 01:48 - 2013-10-27 22:02 - 11415232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 11362672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 09516872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 09472600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 03131680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 03124512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 02946848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 02747168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 02694664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433158.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433158.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00696096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00655136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00560416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00479520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00405280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00317472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00266984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2013-10-16 01:48 - 2013-10-27 22:02 - 00032544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2013-10-16 01:48 - 2013-09-05 01:37 - 01435504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll 2013-10-16 01:48 - 2013-09-05 01:37 - 01241376 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll 2013-10-16 01:48 - 2013-09-05 01:36 - 00168616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2013-10-16 01:48 - 2013-09-05 01:36 - 00141336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2013-10-16 01:48 - 2013-09-05 01:36 - 00023287 _____ C:\WINDOWS\system32\nvinfo.pb 2013-10-16 01:48 - 2013-09-05 01:35 - 03067560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 06665504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 03489568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 01064224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2013-10-15 22:47 - 2013-10-17 22:12 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2013-10-15 22:47 - 2013-10-17 22:12 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2013-10-15 18:10 - 2013-09-07 20:31 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-15 18:10 - 2013-09-07 20:31 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-10-15 17:56 - 2013-08-25 15:58 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-10-15 17:55 - 2013-08-21 07:03 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-10-15 17:54 - 2013-08-21 07:03 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-10-12 18:52 - 2013-10-12 18:52 - 00000000 ____D C:\Users\Daniel\Documents\ASUS 2013-10-12 18:51 - 2013-10-12 18:51 - 00000000 ____D C:\ProgramData\ASUS 2013-10-12 18:50 - 2013-10-12 18:50 - 00000021 _____ C:\Users\Daniel\AppData\Roaming\my_intel.sys 2013-10-12 01:28 - 2013-10-18 20:29 - 00040760 _____ (TuneUp Software) C:\WINDOWS\system32\TURegOpt.exe 2013-10-12 01:28 - 2013-10-18 20:29 - 00029496 _____ (TuneUp Software) C:\WINDOWS\system32\authuitu.dll 2013-10-12 01:28 - 2013-10-18 20:29 - 00025400 _____ (TuneUp Software) C:\WINDOWS\SysWOW64\authuitu.dll 2013-10-11 18:00 - 2013-08-21 20:09 - 00130392 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\MiniIcpt.sys 2013-10-11 18:00 - 2013-08-21 20:09 - 00065368 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\HookCentre.sys 2013-10-11 18:00 - 2013-08-21 20:09 - 00064856 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\PktIcpt.sys 2013-10-11 18:00 - 2013-08-21 20:09 - 00060248 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDBehave.sys 2013-10-09 08:52 - 2013-10-09 08:52 - 00020280 _____ (ASUS) C:\WINDOWS\system32\Drivers\AsHIDSwitch64.sys 2013-10-08 20:14 - 2013-10-17 22:12 - 03398914 _____ C:\WINDOWS\system32\nvcoproc.bin Files to move or delete: ==================== C:\ProgramData\SetStretch.exe Some content of TEMP: ==================== C:\Users\Daniel\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys [2013-08-22 12:40] - [2013-08-22 13:39] - 0312160 ___AC (Microsoft Corporation) 9F9CE33B50611A1C61A46B8911E0B30B LastRegBack: 2013-11-06 19:32 ==================== End Of Log ============================ --- --- --- Geändert von Mikrobi (07.11.2013 um 16:27 Uhr) |
08.11.2013, 10:07 | #10 | |
/// the machine /// TB-Ausbilder | Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner?Zitat:
Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
09.11.2013, 10:55 | #11 |
| Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner? Hallo, nein Frau ist fast immer zickig. Alles erledigt und Fragen habe ich auch keine mehr. Doch, kann man diesen Thread wieder löschen? Nun ja. Ist erledigt. Eine Frage hätte ich noch. Wie bekomme ich die Verwaltung unter Systemsteuerung wieder gefüllt? Habe schon überlegt neu aufzusetzen, finde aber die Funktion nicht mehr. Alle Sytemwiederherstellungspunkte sind mit DelFix weg. Ansonsten erstmal vielen Dank Schrauber, für die Hilfe. Habe jetzt wenigstens die Gewissheit keine Schädlinge auf meinem PC zu haben. |
09.11.2013, 18:08 | #12 |
/// the machine /// TB-Ausbilder | Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner? Mach einfach ein Inplace Upgrade mit der WIn 8 DVD. Das sollte funktionieren
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Dienste sind unter Systemsteuerung/Verwaltung verschwunden. Ein Trojaner? |
dienste, plug-in, pokki, pup.optional.batbrowse.a, pup.optional.bonanzadeals.a, pup.optional.browsefox.a, pup.optional.crossrider, pup.optional.dealply.a, pup.optional.downloadguide.a, pup.optional.expressinstall.a, pup.optional.iminent, pup.optional.iminent.a, pup.optional.installcore.a, pup.optional.linkular.a, pup.optional.opencandy, pup.optional.snapdo, pup.optional.softonic.a, systems, trojaner, win 8.1 |