|
Plagegeister aller Art und deren Bekämpfung: "rvzr-a.akamaihd.net" entfernenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
23.11.2013, 08:52 | #1 |
| "rvzr-a.akamaihd.net" entfernen Hallo! Bei mir gehen ständig Seiten auf, deren Adresse mit "rvzr-a.akamaihd.net" beginnt. Ich habe gelesen, dass auch andere schon dieses Problem haben. Ich weiß allerdings nicht, ob ich das 1:1 übernehmen kann. Ich habe einen Virenscan gemacht, der nichts ergab. Auch der Durchlauf mit Malwarebytes Anti-Malware ergab nichts. Ich habe hier mal die Datei eingefügt. Ich hoffe, ihr könnt mir helfen, ich habe nämlich absolut keine Ahnung von Computern und bin ein bißchen verzweifelt. Vielen Dank! Physcia Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.11.22.04 Windows 8 x64 NTFS Internet Explorer 11.0.9600.16438 :: [Administrator] 23.11.2013 07:57:52 mbam-log-2013-11-23 (07-57-52).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 221856 Laufzeit: 4 Minute(n), 19 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) |
23.11.2013, 08:58 | #2 |
/// the machine /// TB-Ausbilder | "rvzr-a.akamaihd.net" entfernen hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
23.11.2013, 09:23 | #3 |
| "rvzr-a.akamaihd.net" entfernen Hallo Schrauber!
__________________Vielen Dank für die schnelle Antwort. Hier die beiden FRST Dateien FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-11-2013 Ran by (administrator) on R on 23-11-2013 09:11:13 Running from C:\Users\\Downloads Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe (AMD) C:\Windows\System32\atieclxx.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe (Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Dropbox, Inc.) C:\Users\jokrause\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe (CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HotKeysCmds] - "C:\WINDOWS\system32\hkcmd.exe" HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2890640 2013-04-22] (ELAN Microelectronics Corp.) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13427784 2013-03-18] (Realtek Semiconductor) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-04-15] ( (Atheros Communications)) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-14] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-23] (Apple Inc.) HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-08-30] (Cisco Systems, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) Startup: C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\jokrause\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com SearchScopes: HKLM - DefaultScope {023890F6-8E1E-4E6B-9445-8303DF902AEA} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS SearchScopes: HKLM - {023890F6-8E1E-4E6B-9445-8303DF902AEA} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {023890F6-8E1E-4E6B-9445-8303DF902AEA} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS SearchScopes: HKLM-x32 - {023890F6-8E1E-4E6B-9445-8303DF902AEA} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKCU - DefaultScope {023890F6-8E1E-4E6B-9445-8303DF902AEA} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {023890F6-8E1E-4E6B-9445-8303DF902AEA} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {A2021B17-EA17-44CC-B7A0-4A2B846F1F23} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3317893&CUI=UN77561317948995333&UM=2 SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} BHO: Plus-HD-3.8 - {11111111-1111-1111-1111-110311901130} - C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bho64.dll No File BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft) BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\..\Interfaces\{4CF73BC3-13D4-4768-9887-A6B3AE941E68}: [NameServer]62.109.121.2 62.109.121.1 FireFox: ======== FF ProfilePath: C:\Users\jokrause\AppData\Roaming\Mozilla\Firefox\Profiles\jweuep0p.default FF DefaultSearchEngine: RadioTotal4 Customized Web Search FF SelectedSearchEngine: RadioTotal4 Customized Web Search FF Homepage: hxxp://www.google.de/ FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317893&SearchSource=2&CUI=UN30420036142443115&UM=2&q= FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\jokrause\AppData\Roaming\Mozilla\Firefox\Profiles\jweuep0p.default\searchplugins\conduit.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Plus-HD-3.8 - C:\Users\jokrause\AppData\Roaming\Mozilla\Firefox\Profiles\jweuep0p.default\Extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com FF Extension: vis - C:\Users\jokrause\AppData\Roaming\Mozilla\Firefox\Profiles\jweuep0p.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM FF Extension: RadioTotal4 - C:\Users\jokrause\AppData\Roaming\Mozilla\Firefox\Profiles\jweuep0p.default\Extensions\{61f0d019-b016-4d56-9dae-7b7706cd6755} FF HKLM-x32\...\Firefox\Extensions: [{ee8cd9f6-dae3-4889-816b-99fe80dae284}] - C:\Program Files (x86)\WinSecurity\winsecurity.xpi FF Extension: No Name - C:\Program Files (x86)\WinSecurity\winsecurity.xpi FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK ==================== Services (Whitelisted) ================= R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [228480 2013-04-15] (Qualcomm Atheros Commnucations) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO) R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-19] (Acer Incorporated) S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-16] (Acer Incorporated) R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated) R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-08] (Intel Corporation) R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-03-15] (Acer Incorporate) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-11-12] () S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation) S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-10-08] (Microsoft Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-23] (Kaspersky Lab ZAO) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2012-07-27] (Kaspersky Lab) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-11-23] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-10-17] (Kaspersky Lab ZAO) S3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO) S3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [64608 2013-05-07] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178784 2013-06-06] (Kaspersky Lab ZAO) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-11-12] () R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99800 2013-05-08] (Intel Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [52080 2013-08-30] (Cisco Systems, Inc.) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [x] U5 klflt; C:\Windows\System32\Drivers\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-23 09:11 - 2013-11-23 09:11 - 00020960 _____ C:\Users\jokrause\Downloads\FRST.txt 2013-11-23 09:11 - 2013-11-23 09:11 - 00000000 ____D C:\FRST 2013-11-23 09:10 - 2013-11-23 09:10 - 01957916 _____ (Farbar) C:\Users\jokrause\Downloads\FRST64.exe 2013-11-22 20:57 - 2013-11-22 20:57 - 00002354 _____ C:\Users\jokrause\Desktop\Sicherer Zahlungsverkehr.lnk 2013-11-22 20:57 - 2013-11-22 20:57 - 00001349 _____ C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk 2013-11-22 20:56 - 2013-11-22 20:56 - 00001144 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2013-11-22 20:56 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll 2013-11-22 20:55 - 2013-11-23 09:06 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-11-22 20:55 - 2013-11-23 07:16 - 00626272 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klif.sys 2013-11-22 20:55 - 2013-11-22 20:55 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-11-22 20:55 - 2013-06-08 20:18 - 00112224 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klflt.sys 2013-11-22 10:50 - 2013-11-22 16:50 - 00000000 ____D C:\AdwCleaner 2013-11-22 10:50 - 2013-11-22 10:50 - 01085542 _____ C:\Users\jokrause\Downloads\adwcleaner_3012.exe 2013-11-21 09:48 - 2013-11-21 09:48 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Malwarebytes 2013-11-21 09:46 - 2013-11-21 09:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\jokrause\Downloads\mbam-setup-1.75.0.1300(1).exe 2013-11-21 09:46 - 2013-11-21 09:46 - 00001129 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-21 09:46 - 2013-11-21 09:46 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-21 09:46 - 2013-11-21 09:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-21 09:46 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2013-11-21 09:44 - 2013-11-21 09:45 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\jokrause\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-21 09:01 - 2013-11-21 09:01 - 00000000 _____ C:\autoexec.bat 2013-11-21 09:00 - 2013-11-21 09:00 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-11-21 08:59 - 2013-11-21 09:42 - 00000000 ____D C:\WINDOWS\72AAF4551E54475BB0AB5413C78D0E63.TMP 2013-11-21 08:57 - 2013-11-21 08:57 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\jokrause\Downloads\SpyHunter-Installer.exe 2013-11-20 21:40 - 2013-11-20 21:40 - 00001056 _____ C:\Users\Public\Desktop\R i386 3.0.2.lnk 2013-11-20 21:40 - 2013-11-20 21:40 - 00001049 _____ C:\Users\Public\Desktop\R x64 3.0.2.lnk 2013-11-20 21:40 - 2013-11-20 21:40 - 00000000 ____D C:\Tinn-R 2013-11-20 21:39 - 2013-11-20 21:39 - 00000000 ____D C:\Program Files\R 2013-11-20 21:33 - 2013-11-20 21:33 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe 2013-11-20 21:33 - 2013-11-20 21:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe 2013-11-20 21:33 - 2013-11-20 21:33 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe 2013-11-20 21:33 - 2013-11-20 21:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2013-11-20 21:33 - 2013-11-20 21:33 - 00000000 ____D C:\ProgramData\Sun 2013-11-20 21:33 - 2013-11-20 21:33 - 00000000 ____D C:\ProgramData\Oracle 2013-11-20 21:33 - 2013-11-20 21:33 - 00000000 ____D C:\Program Files (x86)\Java 2013-11-20 21:31 - 2013-11-20 21:31 - 00915368 _____ (Oracle Corporation) C:\Users\jokrause\Downloads\jxpiinstall.exe 2013-11-20 21:29 - 2013-11-20 21:29 - 00000000 ____D C:\Users\jokrause\Documents\R 2013-11-20 21:27 - 2013-11-20 22:28 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Tinn-R 2013-11-17 11:07 - 2013-11-05 21:21 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2013-11-17 11:07 - 2013-11-05 19:51 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2013-11-17 11:07 - 2013-11-05 17:20 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2013-11-17 11:07 - 2013-11-05 17:11 - 18577408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2013-11-17 11:07 - 2013-11-05 15:30 - 11674112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2013-11-17 11:07 - 2013-11-05 15:29 - 13176320 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2013-11-17 11:07 - 2013-10-10 12:26 - 02801664 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2013-11-17 11:07 - 2013-10-10 12:05 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2013-11-17 11:07 - 2013-10-10 11:34 - 01085952 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2013-11-17 11:07 - 2013-10-10 11:27 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2013-11-17 11:06 - 2013-10-23 12:29 - 00044936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll 2013-11-17 11:06 - 2013-10-23 12:21 - 00155480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys 2013-11-17 11:06 - 2013-10-23 12:13 - 00171864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_8086.dll 2013-11-17 11:06 - 2013-10-23 06:27 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2013-11-17 11:06 - 2013-10-23 06:09 - 04104704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2013-11-17 11:06 - 2013-10-23 06:04 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2013-11-17 11:06 - 2013-10-23 05:55 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2013-11-17 11:06 - 2013-10-23 05:46 - 00700928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2013-11-17 11:06 - 2013-10-22 09:18 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2013-11-17 11:06 - 2013-10-22 08:55 - 02328872 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2013-11-17 11:06 - 2013-10-22 07:03 - 02065448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2013-11-17 11:06 - 2013-10-22 06:15 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll 2013-11-17 11:06 - 2013-10-22 05:04 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll 2013-11-17 11:06 - 2013-10-22 05:02 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2013-11-17 11:06 - 2013-10-22 04:56 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2013-11-17 11:06 - 2013-10-22 04:44 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2013-11-17 11:06 - 2013-10-22 03:38 - 01362944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2013-11-17 11:06 - 2013-10-22 03:22 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2013-11-17 11:06 - 2013-10-22 03:13 - 01704448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2013-11-17 11:06 - 2013-10-22 03:07 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2013-11-17 11:06 - 2013-10-22 02:53 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2013-11-17 11:06 - 2013-10-22 02:47 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2013-11-17 11:06 - 2013-10-19 10:13 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2013-11-17 11:06 - 2013-10-19 09:51 - 00481392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2013-11-17 11:06 - 2013-10-19 08:12 - 00380656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2013-11-17 11:06 - 2013-10-19 07:24 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2013-11-17 11:06 - 2013-10-19 05:48 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2013-11-17 11:06 - 2013-10-19 05:03 - 00531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2013-11-17 11:06 - 2013-10-19 04:57 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2013-11-17 11:06 - 2013-10-19 04:28 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2013-11-17 11:06 - 2013-10-19 04:26 - 01231360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2013-11-17 11:06 - 2013-10-19 04:14 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2013-11-17 11:06 - 2013-10-17 16:42 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2013-11-17 11:06 - 2013-10-17 16:42 - 01373872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2013-11-17 11:06 - 2013-10-17 15:04 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2013-11-17 11:06 - 2013-10-16 10:34 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2013-11-17 11:06 - 2013-10-16 10:33 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2013-11-17 11:06 - 2013-10-13 04:06 - 00258904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys 2013-11-17 11:06 - 2013-10-13 03:43 - 00708616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll 2013-11-17 11:06 - 2013-10-11 16:11 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2013-11-17 11:06 - 2013-10-11 15:22 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2013-11-17 11:06 - 2013-10-11 14:24 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2013-11-17 11:06 - 2013-10-11 14:04 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2013-11-17 11:06 - 2013-10-11 14:03 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2013-11-17 11:06 - 2013-10-10 17:44 - 00031064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2013-11-17 11:06 - 2013-10-10 17:26 - 00317616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2013-11-17 11:06 - 2013-10-10 17:26 - 00104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll 2013-11-17 11:06 - 2013-10-10 17:23 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll 2013-11-17 11:06 - 2013-10-10 15:53 - 00235960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2013-11-17 11:06 - 2013-10-10 15:53 - 00088272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll 2013-11-17 11:06 - 2013-10-10 12:53 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2013-11-17 11:06 - 2013-10-10 12:38 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2013-11-17 11:06 - 2013-10-10 12:21 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2013-11-17 11:06 - 2013-10-10 11:40 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2013-11-17 11:06 - 2013-10-10 11:19 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2013-11-17 11:06 - 2013-10-09 06:40 - 00385528 _____ C:\WINDOWS\system32\ApnDatabase.xml 2013-11-17 11:06 - 2013-10-08 12:07 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2013-11-17 11:06 - 2013-10-08 11:28 - 00523096 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys 2013-11-17 11:06 - 2013-10-08 11:13 - 02551640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2013-11-17 11:06 - 2013-10-08 07:46 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll 2013-11-17 11:06 - 2013-10-08 06:58 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll 2013-11-17 11:06 - 2013-10-08 06:50 - 00656384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2013-11-17 11:06 - 2013-10-08 06:48 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2013-11-17 11:06 - 2013-10-08 06:15 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2013-11-17 11:06 - 2013-10-08 06:09 - 01160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll 2013-11-17 11:06 - 2013-10-08 05:50 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2013-11-17 11:06 - 2013-10-08 05:50 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll 2013-11-17 11:06 - 2013-10-07 08:21 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2013-11-17 11:06 - 2013-10-07 08:21 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2013-11-17 11:06 - 2013-10-07 03:13 - 03532288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2013-11-17 11:06 - 2013-10-05 16:25 - 00371032 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2013-11-17 11:06 - 2013-10-05 16:25 - 00057176 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys 2013-11-17 11:06 - 2013-10-05 15:21 - 00699840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll 2013-11-17 11:06 - 2013-10-05 13:05 - 00578952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll 2013-11-17 11:06 - 2013-10-05 12:01 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2013-11-17 11:06 - 2013-10-05 10:36 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe 2013-11-17 11:06 - 2013-10-05 10:18 - 01011712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2013-11-17 11:06 - 2013-10-05 10:07 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2013-11-17 11:06 - 2013-10-05 09:56 - 01147904 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2013-11-17 11:06 - 2013-10-05 09:55 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\miutils.dll 2013-11-17 11:06 - 2013-10-05 09:40 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll 2013-11-17 11:06 - 2013-10-05 09:24 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miutils.dll 2013-11-17 11:06 - 2013-10-05 09:21 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2013-11-17 11:06 - 2013-10-05 09:15 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll 2013-11-17 11:06 - 2013-10-05 08:43 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2013-11-17 11:06 - 2013-10-05 08:39 - 06639616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2013-11-17 11:06 - 2013-10-05 08:35 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2013-11-17 11:06 - 2013-10-05 08:32 - 05769728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2013-11-17 11:06 - 2013-10-04 09:10 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2013-11-17 11:06 - 2013-09-19 06:04 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2013-11-17 11:06 - 2013-09-17 10:06 - 01067080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2013-11-17 11:06 - 2013-09-17 10:06 - 00465960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2013-11-17 11:06 - 2013-09-17 07:31 - 00883184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2013-11-17 11:06 - 2013-09-17 07:31 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2013-11-17 11:06 - 2013-09-17 05:37 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll 2013-11-17 11:06 - 2013-09-14 15:07 - 02134120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2013-11-17 11:06 - 2013-09-14 15:00 - 00391512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll 2013-11-17 11:06 - 2013-09-14 13:39 - 01799944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2013-11-17 11:06 - 2013-09-14 13:33 - 00345552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll 2013-11-17 11:06 - 2013-09-14 11:05 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe 2013-11-17 11:06 - 2013-09-14 10:11 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2013-11-17 11:06 - 2013-09-13 09:22 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ftp.exe 2013-11-17 11:06 - 2013-09-13 08:47 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ftp.exe 2013-11-17 11:06 - 2013-09-12 09:45 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll 2013-11-17 11:06 - 2013-09-12 09:08 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll 2013-11-17 11:06 - 2013-09-12 09:08 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2013-11-17 11:06 - 2013-09-12 09:02 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll 2013-11-17 11:06 - 2013-09-12 08:44 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll 2013-11-17 11:06 - 2013-09-12 08:37 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll 2013-11-17 11:06 - 2013-09-12 08:37 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll 2013-11-17 11:06 - 2013-09-12 08:21 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll 2013-11-17 11:06 - 2013-09-12 08:16 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll 2013-11-17 11:06 - 2013-09-12 08:01 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll 2013-11-17 11:06 - 2013-09-11 13:46 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2013-11-17 11:06 - 2013-09-10 06:26 - 04599808 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2013-11-17 11:06 - 2013-09-10 05:52 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\msched.dll 2013-11-17 11:06 - 2013-09-10 05:34 - 03934208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2013-11-16 06:12 - 2013-11-16 06:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-15 10:36 - 2013-11-15 10:36 - 00000000 ____D C:\Users\jokrause\Documents\OneNote-Notizbücher 2013-11-15 10:31 - 2013-11-15 10:31 - 00598304 _____ C:\Users\jokrause\Downloads\Workflowy_Allmyapps.exe 2013-11-15 09:31 - 2013-11-15 09:31 - 00005354 _____ C:\Users\jokrause\AppData\Local\recently-used.xbel 2013-11-15 09:27 - 2013-11-15 09:31 - 00000000 ____D C:\Users\jokrause\AppData\Local\gtk-2.0 2013-11-15 09:27 - 2013-11-15 09:27 - 00000000 ____D C:\Users\jokrause\.thumbnails 2013-11-14 11:16 - 2013-10-19 09:08 - 23212544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2013-11-14 11:16 - 2013-10-19 07:37 - 17142784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2013-11-14 11:16 - 2013-10-19 07:02 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2013-11-14 11:16 - 2013-10-19 06:37 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2013-11-14 11:16 - 2013-10-19 06:19 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2013-11-14 11:16 - 2013-10-19 06:10 - 05765120 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2013-11-14 11:16 - 2013-10-19 05:52 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2013-11-14 11:16 - 2013-10-19 05:44 - 04240384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2013-11-14 11:16 - 2013-10-19 05:37 - 12995584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2013-11-14 11:16 - 2013-10-19 05:31 - 01993728 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2013-11-14 11:16 - 2013-10-19 04:56 - 11220992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2013-11-14 11:16 - 2013-10-19 04:55 - 01926656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2013-11-14 11:16 - 2013-10-19 04:53 - 02332160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2013-11-14 11:16 - 2013-10-19 04:23 - 01394176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2013-11-14 11:16 - 2013-10-19 04:09 - 01818112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2013-11-14 11:16 - 2013-10-19 04:02 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2013-11-14 11:16 - 2013-10-13 03:48 - 00136536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2013-11-14 11:16 - 2013-10-12 22:48 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2013-11-14 11:16 - 2013-10-12 22:34 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2013-11-14 11:16 - 2013-10-05 15:21 - 01341288 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2013-11-14 11:16 - 2013-10-05 09:39 - 01067008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2013-11-14 11:14 - 2013-10-16 16:58 - 01943536 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2013-11-14 11:14 - 2013-10-16 14:54 - 01581968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2013-11-14 11:13 - 2013-11-14 11:13 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2013-11-14 11:13 - 2013-11-14 11:13 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2013-11-13 09:55 - 2013-11-13 09:55 - 03049560 _____ (Cisco Systems, Inc.) C:\Users\jokrause\Downloads\anyconnect-win-3.1.04066-web-deploy-k9.exe 2013-11-13 09:55 - 2013-11-13 09:55 - 00000000 ____D C:\Users\jokrause\AppData\Local\Cisco 2013-11-13 09:55 - 2013-11-13 09:55 - 00000000 ____D C:\ProgramData\Cisco 2013-11-13 09:55 - 2013-11-13 09:55 - 00000000 ____D C:\Program Files (x86)\Cisco 2013-11-13 09:55 - 2013-08-30 22:51 - 00112080 ____R (Cisco Systems, Inc.) C:\WINDOWS\system32\Drivers\acsock64.sys 2013-11-12 19:21 - 2013-11-12 19:21 - 00000000 ____D C:\Users\jokrause\Documents\ANNO 1404 Venedig 2013-11-12 18:45 - 2013-11-12 19:21 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Ubisoft 2013-11-12 18:44 - 2013-11-12 18:44 - 00000000 ____D C:\ProgramData\Solidshield 2013-11-12 18:33 - 2013-11-12 18:33 - 00314016 _____ C:\WINDOWS\system32\Drivers\atksgt.sys 2013-11-12 18:33 - 2013-11-12 18:33 - 00043680 _____ C:\WINDOWS\system32\Drivers\lirsgt.sys 2013-11-12 18:33 - 2013-11-12 18:33 - 00010123 _____ C:\WINDOWS\DirectX.log 2013-11-12 18:33 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll 2013-11-12 18:33 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll 2013-11-12 18:33 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll 2013-11-12 18:33 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll 2013-11-12 18:33 - 2009-03-16 14:18 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll 2013-11-12 18:33 - 2009-03-16 14:18 - 00069448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll 2013-11-12 18:33 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll 2013-11-12 18:33 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll 2013-11-12 18:33 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll 2013-11-12 18:33 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll 2013-11-12 18:33 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll 2013-11-12 18:33 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll 2013-11-12 18:33 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll 2013-11-12 18:33 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll 2013-11-12 18:33 - 2008-10-15 07:03 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll 2013-11-12 18:33 - 2008-10-15 07:03 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll 2013-11-12 18:33 - 2008-10-15 07:03 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll 2013-11-12 18:33 - 2008-10-15 07:03 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll 2013-11-12 18:33 - 2008-10-15 07:03 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll 2013-11-12 18:33 - 2008-10-15 07:03 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll 2013-11-12 18:33 - 2008-10-15 07:03 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll 2013-11-12 18:33 - 2008-10-15 07:03 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll 2013-11-12 18:33 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll 2013-11-12 18:33 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll 2013-11-12 18:33 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll 2013-11-12 18:33 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll 2013-11-12 18:33 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll 2013-11-12 18:33 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll 2013-11-12 18:33 - 2008-07-30 06:20 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll 2013-11-12 18:33 - 2008-07-30 06:20 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll 2013-11-12 18:33 - 2008-07-30 06:20 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll 2013-11-12 18:33 - 2008-07-30 06:20 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll 2013-11-12 18:33 - 2008-07-30 06:20 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll 2013-11-12 18:33 - 2008-07-30 06:20 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll 2013-11-12 18:33 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll 2013-11-12 18:33 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll 2013-11-12 18:33 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll 2013-11-12 18:33 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll 2013-11-12 18:33 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll 2013-11-12 18:33 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll 2013-11-12 18:33 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll 2013-11-12 18:33 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll 2013-11-12 18:33 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll 2013-11-12 18:33 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll 2013-11-12 18:33 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll 2013-11-12 18:33 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll 2013-11-12 18:33 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll 2013-11-12 18:33 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll 2013-11-12 18:33 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll 2013-11-12 18:33 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll 2013-11-12 18:33 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll 2013-11-12 18:33 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll 2013-11-12 18:33 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll 2013-11-12 18:33 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll 2013-11-12 18:33 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll 2013-11-12 18:33 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll 2013-11-12 18:33 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll 2013-11-12 18:33 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll 2013-11-12 18:33 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll 2013-11-12 18:33 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll 2013-11-12 18:33 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll 2013-11-12 18:33 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll 2013-11-12 18:33 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll 2013-11-12 18:33 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll 2013-11-12 18:33 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll 2013-11-12 18:33 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll 2013-11-12 18:33 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll 2013-11-12 18:33 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll 2013-11-12 18:33 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll 2013-11-12 18:33 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll 2013-11-12 18:33 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll 2013-11-12 18:33 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll 2013-11-12 18:33 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll 2013-11-12 18:33 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll 2013-11-12 18:33 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll 2013-11-12 18:33 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll 2013-11-12 18:33 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll 2013-11-12 18:33 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll 2013-11-12 18:33 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll 2013-11-12 18:33 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll 2013-11-12 18:33 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll 2013-11-12 18:33 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll 2013-11-12 18:33 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll 2013-11-12 18:33 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll 2013-11-12 18:33 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll 2013-11-12 18:33 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll 2013-11-12 18:33 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll 2013-11-12 18:33 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll 2013-11-12 18:33 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll 2013-11-12 18:33 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll 2013-11-12 18:33 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll 2013-11-12 18:33 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll 2013-11-12 18:33 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll 2013-11-12 18:33 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll 2013-11-12 18:33 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll 2013-11-12 18:33 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll 2013-11-12 18:33 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll 2013-11-12 18:33 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll 2013-11-12 18:33 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll 2013-11-12 18:33 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll 2013-11-12 18:33 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll 2013-11-12 18:33 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll 2013-11-12 18:33 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll 2013-11-12 18:33 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll 2013-11-12 18:33 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll 2013-11-12 18:33 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll 2013-11-12 18:33 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll 2013-11-12 18:33 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll 2013-11-12 18:33 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll 2013-11-12 18:33 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll 2013-11-12 18:33 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll 2013-11-12 18:33 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll 2013-11-12 18:33 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll 2013-11-12 18:33 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll 2013-11-12 18:33 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll 2013-11-12 18:33 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll 2013-11-12 18:33 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll 2013-11-12 18:33 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll 2013-11-12 18:33 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll 2013-11-12 18:33 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll 2013-11-12 18:33 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll 2013-11-12 18:33 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll 2013-11-12 18:33 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll 2013-11-12 18:33 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll 2013-11-12 18:33 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll 2013-11-12 18:33 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll 2013-11-12 18:33 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll 2013-11-12 18:33 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll 2013-11-12 18:33 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll 2013-11-12 18:33 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll 2013-11-12 18:33 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll 2013-11-12 18:33 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll 2013-11-12 18:33 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll 2013-11-12 18:33 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll 2013-11-12 18:33 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll 2013-11-12 18:33 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll 2013-11-12 18:33 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll 2013-11-12 18:33 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll 2013-11-12 18:33 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll 2013-11-12 18:33 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll 2013-11-12 18:33 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll 2013-11-12 18:33 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll 2013-11-12 18:33 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll 2013-11-12 18:33 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll 2013-11-12 18:25 - 2013-11-12 18:25 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-11-12 17:12 - 2013-11-15 09:31 - 00000000 ____D C:\Users\jokrause\.gimp-2.8 2013-11-12 17:12 - 2013-11-12 17:12 - 00000000 ____D C:\Users\jokrause\AppData\Local\gegl-0.2 2013-11-12 17:10 - 2013-11-23 09:03 - 00003946 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D22DDD98-4022-4D59-B4F0-5DF20EC6EF68} 2013-11-12 17:08 - 2013-11-21 10:13 - 00000000 ____D C:\Program Files (x86)\WinSecurity 2013-11-12 17:08 - 2013-11-12 17:09 - 00000000 ____D C:\Program Files\GIMP 2 2013-11-12 17:08 - 2013-11-12 17:08 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Windows Net Data 2013-11-12 17:07 - 2013-11-12 18:38 - 00000898 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog 2013-11-12 17:05 - 2013-11-21 10:16 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2013-11-12 17:05 - 2013-11-21 10:13 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\SearchProtect 2013-11-12 17:05 - 2013-11-21 10:13 - 00000000 ____D C:\ProgramData\Conduit 2013-11-12 17:05 - 2013-11-12 17:05 - 00000000 ____D C:\Users\jokrause\AppData\Local\Conduit 2013-11-12 17:05 - 2013-11-12 17:05 - 00000000 ____D C:\Program Files (x86)\Conduit 2013-11-12 17:04 - 2013-11-12 17:05 - 00000009 _____ C:\END 2013-11-12 17:01 - 2013-11-12 17:01 - 00002236 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-11-12 17:00 - 2013-11-23 09:05 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-12 17:00 - 2013-11-23 07:12 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-12 17:00 - 2013-11-12 17:00 - 00004106 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2013-11-12 17:00 - 2013-11-12 17:00 - 00003870 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2013-11-12 16:59 - 2013-11-12 17:01 - 00000000 ____D C:\Users\jokrause\AppData\Local\Google 2013-11-12 16:59 - 2013-11-12 17:00 - 00000000 ____D C:\Program Files (x86)\Google 2013-11-12 16:59 - 2013-11-12 16:59 - 00819152 _____ (Google Inc.) C:\Users\jokrause\Downloads\GoogleEarthSetup.exe 2013-11-12 12:25 - 2013-11-23 07:13 - 00000000 ___RD C:\Users\jokrause\Dropbox 2013-11-12 12:25 - 2013-11-12 12:25 - 00001058 _____ C:\Users\jokrause\Desktop\Dropbox.lnk 2013-11-12 12:24 - 2013-11-12 12:24 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2013-11-12 12:23 - 2013-11-23 07:13 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Dropbox 2013-11-12 12:23 - 2013-11-12 12:23 - 35334016 _____ (Dropbox, Inc.) C:\Users\jokrause\Downloads\Dropbox 2.4.7.exe 2013-11-10 10:08 - 2013-11-10 10:08 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2013-11-10 10:08 - 2013-11-10 10:08 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2013-11-07 07:35 - 2013-11-07 07:35 - 00000000 ___RD C:\WINDOWS\BrowserChoice 2013-11-05 20:33 - 2013-11-17 15:35 - 00087520 _____ C:\Users\jokrause\AppData\Local\GDIPFONTCACHEV1.DAT 2013-11-05 20:31 - 2013-11-13 10:21 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\vlc 2013-11-05 20:31 - 2013-11-13 10:05 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\dvdcss 2013-11-05 17:49 - 2013-11-22 21:31 - 00002715 _____ C:\Users\Public\Desktop\Skype.lnk 2013-11-05 17:49 - 2013-11-19 18:50 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Skype 2013-11-05 17:49 - 2013-11-05 17:49 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-05 17:48 - 2013-11-22 21:31 - 00000000 ____D C:\ProgramData\Skype 2013-11-05 17:47 - 2013-11-05 17:48 - 35060384 _____ (Skype Technologies S.A.) C:\Users\jokrause\Downloads\SkypeSetupFull6.10.60.104.exe 2013-11-05 15:46 - 2013-11-05 15:46 - 02671854 _____ C:\Users\jokrause\Downloads\lightning-2.6.2-tb+sm-windows(1).xpi 2013-11-05 15:45 - 2013-11-05 15:45 - 02671854 _____ C:\Users\jokrause\Downloads\lightning-2.6.2-tb+sm-windows.xpi 2013-11-05 15:35 - 2013-11-05 15:35 - 04433586 _____ (Tinn-R Team ) C:\Users\jokrause\Downloads\Tinn-R_2.4.1.7_setup.exe 2013-11-05 15:30 - 2013-11-05 15:31 - 53957312 _____ (R Core Team ) C:\Users\jokrause\Downloads\R-3.0.2-win.exe 2013-11-05 14:10 - 2013-11-05 14:10 - 00010495 _____ C:\Users\jokrause\Downloads\jokrause_elster_2048.pfx 2013-11-05 13:56 - 2013-11-10 10:07 - 00000000 ____D C:\Program Files (x86)\Microsoft Works 2013-11-05 13:56 - 2013-11-05 13:56 - 00000000 ____D C:\WINDOWS\PCHEALTH 2013-11-05 13:53 - 2013-11-05 13:53 - 00000000 ____D C:\Program Files\Microsoft Office 2013-11-05 13:52 - 2013-11-05 13:52 - 00000000 __RHD C:\MSOCache 2013-11-05 13:08 - 2013-11-22 07:58 - 00000000 ____D C:\Users\jokrause\AppData\Local\Deployment 2013-11-05 13:08 - 2013-11-05 13:08 - 00000000 ____D C:\Users\jokrause\AppData\Local\Apps\2.0 2013-11-05 13:03 - 2013-11-14 12:48 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-05 13:03 - 2013-11-05 13:03 - 00000000 ____D C:\Users\jokrause\AppData\Local\Microsoft Help 2013-11-05 12:01 - 2013-11-05 12:01 - 00004868 _____ C:\Users\jokrause\Downloads\nat9.ani 2013-11-05 10:28 - 2013-11-14 10:45 - 00000000 ____D C:\Users\jokrause\Documents\Eigene Dokumente 2013-11-05 10:27 - 2013-11-05 10:27 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2013-11-05 10:17 - 2013-11-05 10:17 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\TreeCardGames 2013-11-05 10:17 - 2013-11-05 10:17 - 00000000 ____D C:\ProgramData\TreeCardGames 2013-11-05 10:14 - 2013-11-05 10:14 - 00000000 ____D C:\Users\Public\CyberLink 2013-11-05 10:14 - 2013-11-05 10:14 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\CyberLink 2013-11-05 10:14 - 2013-11-05 10:14 - 00000000 ____D C:\Users\jokrause\AppData\Local\Cyberlink 2013-11-05 10:11 - 2013-11-05 10:11 - 00000000 ____D C:\Program Files (x86)\123 Free Solitaire 2013-11-05 10:10 - 2013-11-05 10:10 - 07103672 _____ (TreeCardGames ) C:\Users\jokrause\Downloads\123freesolitaire-v100-setup.exe 2013-11-05 09:58 - 2013-11-23 07:13 - 00000000 __RDO C:\Users\jokrause\SkyDrive 2013-11-05 09:47 - 2013-11-05 14:20 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Apple Computer 2013-11-05 09:47 - 2013-11-05 09:47 - 00001799 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-11-05 09:47 - 2013-11-05 09:47 - 00000000 ____D C:\Users\jokrause\AppData\Local\Apple Computer 2013-11-05 09:47 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys 2013-11-05 09:46 - 2013-11-05 09:47 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-11-05 09:46 - 2013-11-05 09:47 - 00000000 ____D C:\Program Files\iTunes 2013-11-05 09:46 - 2013-11-05 09:47 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-11-05 09:46 - 2013-11-05 09:46 - 00000000 ____D C:\ProgramData\Apple Computer 2013-11-05 09:46 - 2013-11-05 09:46 - 00000000 ____D C:\Program Files\iPod 2013-11-05 09:45 - 2013-11-05 09:45 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple 2013-11-05 09:45 - 2013-11-05 09:45 - 00000000 ____D C:\Users\jokrause\AppData\Local\Apple 2013-11-05 09:45 - 2013-11-05 09:45 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2013-11-05 09:44 - 2013-11-05 09:45 - 00000000 ____D C:\ProgramData\Apple 2013-11-05 09:44 - 2013-11-05 09:44 - 00000000 ____D C:\Program Files\Common Files\Apple 2013-11-05 09:44 - 2013-11-05 09:44 - 00000000 ____D C:\Program Files\Bonjour 2013-11-05 09:44 - 2013-11-05 09:44 - 00000000 ____D C:\Program Files (x86)\Bonjour 2013-11-05 09:40 - 2013-11-05 09:42 - 100422480 _____ (Apple Inc.) C:\Users\jokrause\Downloads\iTunes64Setup.exe 2013-11-05 09:30 - 2013-11-05 09:30 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\WildTangent 2013-11-05 09:29 - 2013-11-05 09:29 - 00002043 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk 2013-11-05 09:28 - 2013-11-08 16:14 - 00000000 ____D C:\ProgramData\Adobe 2013-11-05 09:28 - 2013-11-05 09:28 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-11-05 09:24 - 2013-11-05 09:24 - 00000891 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-11-05 09:24 - 2013-11-05 09:24 - 00000000 ____D C:\Program Files\VideoLAN 2013-11-05 09:23 - 2013-11-05 09:23 - 23280480 _____ C:\Users\jokrause\Downloads\vlc-2.1.0-win64.exe 2013-11-05 09:21 - 2013-11-22 07:47 - 00000000 ____D C:\Users\jokrause\AppData\Local\Thunderbird 2013-11-05 09:21 - 2013-11-05 09:21 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Thunderbird 2013-11-05 09:20 - 2013-11-22 08:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-11-05 09:20 - 2013-11-05 09:20 - 00002106 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-11-05 09:19 - 2013-11-05 09:19 - 21981512 _____ (Mozilla) C:\Users\jokrause\Downloads\Thunderbird_Setup_24.1.0.exe 2013-11-05 08:58 - 2013-11-22 22:09 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\ClassicShell 2013-11-05 08:58 - 2013-11-05 08:54 - 00002174 _____ C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\startscreen.lnk 2013-11-05 08:54 - 2013-11-05 08:54 - 05629632 _____ (IvoSoft) C:\Users\jokrause\Downloads\ClassicShellSetup_4_0_2.exe 2013-11-05 08:54 - 2013-11-05 08:54 - 00000000 ____D C:\Program Files\Classic Shell 2013-11-05 08:13 - 2013-11-05 08:13 - 00000000 ____D C:\Users\jokrause\Documents\Bluetooth Folder 2013-11-05 08:13 - 2013-11-05 08:13 - 00000000 ____D C:\Users\jokrause\AppData\Local\BMExplorer 2013-11-05 08:11 - 2013-11-05 08:11 - 00001458 _____ C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-05 08:11 - 2013-11-05 08:11 - 00000020 ___SH C:\Users\jokrause\ntuser.ini 2013-11-05 08:08 - 2013-11-23 07:51 - 01503578 _____ C:\WINDOWS\WindowsUpdate.log 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-11-05 08:07 - 2013-11-05 08:07 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat 2013-11-05 07:57 - 2013-11-05 07:57 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2013-11-05 07:56 - 2013-11-15 09:27 - 00000000 ____D C:\Users\jokrause 2013-11-05 07:56 - 2013-11-05 08:08 - 00020958 _____ C:\WINDOWS\diagwrn.xml 2013-11-05 07:56 - 2013-11-05 08:08 - 00020958 _____ C:\WINDOWS\diagerr.xml 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Vorlagen 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Startmenü 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Netzwerkumgebung 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Lokale Einstellungen 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Eigene Dateien 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Druckumgebung 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Documents\Eigene Musik 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Documents\Eigene Bilder 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\AppData\Local\Verlauf 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\AppData\Local\Anwendungsdaten 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Anwendungsdaten 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-11-05 07:56 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-11-05 07:56 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-11-05 07:56 - 2013-08-22 16:36 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-11-05 07:52 - 2013-11-05 07:58 - 00000000 ____D C:\Program Files (x86)\Intel 2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\Realtek 2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\Elantech 2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies 2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\AMD 2013-11-05 07:51 - 2013-11-05 07:58 - 00000000 ____D C:\Program Files\Intel 2013-11-05 07:51 - 2013-11-05 07:51 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2013-11-05 07:50 - 2013-11-06 07:52 - 00000000 ___DC C:\WINDOWS\Panther 2013-11-05 07:50 - 2013-11-05 07:50 - 00000000 __SHD C:\Recovery 2013-11-05 07:48 - 2013-11-05 07:48 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2013-11-05 07:48 - 2013-11-05 07:48 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2013-11-05 07:47 - 2013-11-05 07:47 - 00262144 _____ C:\WINDOWS\system32\config\userdiff 2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files\MSBuild 2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-11-05 07:45 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2013-11-05 07:45 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2013-11-05 07:45 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2013-11-05 07:45 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2013-11-05 07:45 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-11-05 07:45 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2013-11-05 07:31 - 2013-11-05 08:08 - 00006532 _____ C:\WINDOWS\comsetup.log 2013-11-05 02:53 - 2013-11-05 02:53 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Macromedia 2013-11-05 02:25 - 2013-11-22 21:55 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1679506624-2517906247-3148078019-1001 2013-11-05 02:22 - 2013-11-05 02:22 - 00000000 ____D C:\Users\Public\OEM 2013-11-05 02:22 - 2013-11-05 02:22 - 00000000 ____D C:\Users\jokrause\PicStream 2013-11-05 02:22 - 2013-11-05 02:22 - 00000000 ____D C:\Users\jokrause\Documents\clear.fi 2013-11-05 02:21 - 2013-11-05 13:27 - 00000000 ____D C:\Users\jokrause\AppData\Local\clear.fi 2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Atheros 2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\ProgramData\OEM_YAHOO 2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Program Files\Preload 2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Program Files\Accessory Store 2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Program Files (x86)\OEM 2013-11-05 02:16 - 2013-11-20 21:01 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-05 02:16 - 2013-11-20 21:01 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-11-05 02:16 - 2013-11-05 10:43 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Adobe 2013-11-05 02:16 - 2013-11-05 03:01 - 00000000 ____D C:\Users\jokrause\AppData\Local\VirtualStore 2013-11-05 02:16 - 2013-11-05 02:16 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD 2013-11-05 02:15 - 2013-11-12 12:18 - 00000000 ____D C:\Users\jokrause\AppData\Local\Packages 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Vorlagen 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Startmenü 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Netzwerkumgebung 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Lokale Einstellungen 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Eigene Dateien 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Druckumgebung 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Musik 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Bilder 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Verlauf 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Anwendungsdaten 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Anwendungsdaten 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Programme 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-11-04 23:09 - 2013-11-04 23:09 - 00000000 ____D C:\Users\jokrause\AppData\Local\Macromedia 2013-11-04 23:03 - 2013-11-05 10:43 - 00000000 ____D C:\Users\jokrause\AppData\Local\Adobe 2013-11-04 22:52 - 2013-11-15 20:33 - 00000000 ____D C:\Users\jokrause\AppData\Local\Mozilla 2013-11-04 22:52 - 2013-11-04 22:52 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Mozilla 2013-11-04 22:49 - 2013-11-22 20:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-04 22:49 - 2013-11-04 22:49 - 00001155 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-11-04 22:49 - 2013-11-04 22:49 - 00000000 ____D C:\ProgramData\Mozilla 2013-11-04 22:45 - 2013-11-04 22:45 - 00003558 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask 2013-11-04 22:24 - 2013-11-14 12:46 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-11-04 22:24 - 2013-11-14 12:41 - 82896128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-11-04 21:48 - 2013-11-04 21:48 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2013-11-04 21:44 - 2013-11-04 21:44 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\OpenOffice 2013-11-04 21:44 - 2013-05-04 05:51 - 00014848 ____N (Microsoft) C:\WINDOWS\system32\rars.rs 2013-11-04 21:44 - 2013-05-04 05:10 - 00014848 ____N (Microsoft) C:\WINDOWS\SysWOW64\rars.rs 2013-11-04 21:43 - 2013-11-04 21:43 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk 2013-11-04 21:43 - 2013-11-04 21:43 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4 ==================== One Month Modified Files and Folders ======= 2021-10-21 14:36 - 2013-07-23 22:55 - 00000852 _____ C:\WINDOWS\system32\Drivers\RTKHDRC.dat 2021-10-04 08:34 - 2013-07-23 22:55 - 00000712 _____ C:\WINDOWS\system32\Drivers\RTMICEQ0.dat 2013-11-23 09:11 - 2013-11-23 09:11 - 00020960 _____ C:\Users\jokrause\Downloads\FRST.txt 2013-11-23 09:11 - 2013-11-23 09:11 - 00000000 ____D C:\FRST 2013-11-23 09:10 - 2013-11-23 09:10 - 01957916 _____ (Farbar) C:\Users\jokrause\Downloads\FRST64.exe 2013-11-23 09:06 - 2013-11-22 20:55 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-11-23 09:05 - 2013-11-12 17:00 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-23 09:03 - 2013-11-12 17:10 - 00003946 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D22DDD98-4022-4D59-B4F0-5DF20EC6EF68} 2013-11-23 09:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru 2013-11-23 07:51 - 2013-11-05 08:08 - 01503578 _____ C:\WINDOWS\WindowsUpdate.log 2013-11-23 07:16 - 2013-11-22 20:55 - 00626272 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klif.sys 2013-11-23 07:16 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl1.sys 2013-11-23 07:13 - 2013-11-12 12:25 - 00000000 ___RD C:\Users\jokrause\Dropbox 2013-11-23 07:13 - 2013-11-12 12:23 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Dropbox 2013-11-23 07:13 - 2013-11-05 09:58 - 00000000 __RDO C:\Users\jokrause\SkyDrive 2013-11-23 07:12 - 2013-11-12 17:00 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-22 22:09 - 2013-11-05 08:58 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\ClassicShell 2013-11-22 21:55 - 2013-11-05 02:25 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1679506624-2517906247-3148078019-1001 2013-11-22 21:31 - 2013-11-05 17:49 - 00002715 _____ C:\Users\Public\Desktop\Skype.lnk 2013-11-22 21:31 - 2013-11-05 17:48 - 00000000 ____D C:\ProgramData\Skype 2013-11-22 20:57 - 2013-11-22 20:57 - 00002354 _____ C:\Users\jokrause\Desktop\Sicherer Zahlungsverkehr.lnk 2013-11-22 20:57 - 2013-11-22 20:57 - 00001349 _____ C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk 2013-11-22 20:57 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\tracing 2013-11-22 20:56 - 2013-11-22 20:56 - 00001144 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2013-11-22 20:56 - 2013-09-30 05:14 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-11-22 20:56 - 2013-09-30 04:56 - 00765582 _____ C:\WINDOWS\system32\perfh007.dat 2013-11-22 20:56 - 2013-09-30 04:56 - 00159366 _____ C:\WINDOWS\system32\perfc007.dat 2013-11-22 20:56 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM 2013-11-22 20:55 - 2013-11-22 20:55 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-11-22 20:55 - 2012-07-26 09:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2013-11-22 20:50 - 2013-11-04 22:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-22 20:50 - 2013-09-29 20:04 - 00051208 _____ C:\WINDOWS\PFRO.log 2013-11-22 20:50 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-11-22 20:49 - 2013-08-22 14:25 - 21233664 ___SH C:\WINDOWS\system32\config\BBI 2013-11-22 16:50 - 2013-11-22 10:50 - 00000000 ____D C:\AdwCleaner 2013-11-22 11:18 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache 2013-11-22 10:50 - 2013-11-22 10:50 - 01085542 _____ C:\Users\jokrause\Downloads\adwcleaner_3012.exe 2013-11-22 08:00 - 2013-11-05 09:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-11-22 07:58 - 2013-11-05 13:08 - 00000000 ____D C:\Users\jokrause\AppData\Local\Deployment 2013-11-22 07:47 - 2013-11-05 09:21 - 00000000 ____D C:\Users\jokrause\AppData\Local\Thunderbird 2013-11-21 10:42 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness 2013-11-21 10:16 - 2013-11-12 17:05 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2013-11-21 10:13 - 2013-11-12 17:08 - 00000000 ____D C:\Program Files (x86)\WinSecurity 2013-11-21 10:13 - 2013-11-12 17:05 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\SearchProtect 2013-11-21 10:13 - 2013-11-12 17:05 - 00000000 ____D C:\ProgramData\Conduit 2013-11-21 09:48 - 2013-11-21 09:48 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Malwarebytes 2013-11-21 09:46 - 2013-11-21 09:46 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\jokrause\Downloads\mbam-setup-1.75.0.1300(1).exe 2013-11-21 09:46 - 2013-11-21 09:46 - 00001129 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-21 09:46 - 2013-11-21 09:46 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-21 09:46 - 2013-11-21 09:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-21 09:45 - 2013-11-21 09:44 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\jokrause\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-21 09:42 - 2013-11-21 08:59 - 00000000 ____D C:\WINDOWS\72AAF4551E54475BB0AB5413C78D0E63.TMP 2013-11-21 09:01 - 2013-11-21 09:01 - 00000000 _____ C:\autoexec.bat 2013-11-21 09:00 - 2013-11-21 09:00 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-11-21 08:57 - 2013-11-21 08:57 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\jokrause\Downloads\SpyHunter-Installer.exe 2013-11-20 22:28 - 2013-11-20 21:27 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Tinn-R 2013-11-20 21:40 - 2013-11-20 21:40 - 00001056 _____ C:\Users\Public\Desktop\R i386 3.0.2.lnk 2013-11-20 21:40 - 2013-11-20 21:40 - 00001049 _____ C:\Users\Public\Desktop\R x64 3.0.2.lnk 2013-11-20 21:40 - 2013-11-20 21:40 - 00000000 ____D C:\Tinn-R 2013-11-20 21:39 - 2013-11-20 21:39 - 00000000 ____D C:\Program Files\R 2013-11-20 21:33 - 2013-11-20 21:33 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe 2013-11-20 21:33 - 2013-11-20 21:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe 2013-11-20 21:33 - 2013-11-20 21:33 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe 2013-11-20 21:33 - 2013-11-20 21:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2013-11-20 21:33 - 2013-11-20 21:33 - 00000000 ____D C:\ProgramData\Sun 2013-11-20 21:33 - 2013-11-20 21:33 - 00000000 ____D C:\ProgramData\Oracle 2013-11-20 21:33 - 2013-11-20 21:33 - 00000000 ____D C:\Program Files (x86)\Java 2013-11-20 21:31 - 2013-11-20 21:31 - 00915368 _____ (Oracle Corporation) C:\Users\jokrause\Downloads\jxpiinstall.exe 2013-11-20 21:29 - 2013-11-20 21:29 - 00000000 ____D C:\Users\jokrause\Documents\R 2013-11-20 21:01 - 2013-11-05 02:16 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-20 21:01 - 2013-11-05 02:16 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-11-20 21:00 - 2013-08-22 15:44 - 00397952 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-11-20 20:57 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData 2013-11-20 20:57 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore 2013-11-20 20:57 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\migwiz 2013-11-20 20:57 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2013-11-19 18:50 - 2013-11-05 17:49 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Skype 2013-11-17 15:35 - 2013-11-05 20:33 - 00087520 _____ C:\Users\jokrause\AppData\Local\GDIPFONTCACHEV1.DAT 2013-11-16 06:12 - 2013-11-16 06:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-15 20:33 - 2013-11-04 22:52 - 00000000 ____D C:\Users\jokrause\AppData\Local\Mozilla 2013-11-15 10:36 - 2013-11-15 10:36 - 00000000 ____D C:\Users\jokrause\Documents\OneNote-Notizbücher 2013-11-15 10:31 - 2013-11-15 10:31 - 00598304 _____ C:\Users\jokrause\Downloads\Workflowy_Allmyapps.exe 2013-11-15 09:31 - 2013-11-15 09:31 - 00005354 _____ C:\Users\jokrause\AppData\Local\recently-used.xbel 2013-11-15 09:31 - 2013-11-15 09:27 - 00000000 ____D C:\Users\jokrause\AppData\Local\gtk-2.0 2013-11-15 09:31 - 2013-11-12 17:12 - 00000000 ____D C:\Users\jokrause\.gimp-2.8 2013-11-15 09:27 - 2013-11-15 09:27 - 00000000 ____D C:\Users\jokrause\.thumbnails 2013-11-15 09:27 - 2013-11-05 07:56 - 00000000 ____D C:\Users\jokrause 2013-11-14 13:16 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF 2013-11-14 12:48 - 2013-11-05 13:03 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-14 12:46 - 2013-11-04 22:24 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-11-14 12:41 - 2013-11-04 22:24 - 82896128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-11-14 11:13 - 2013-11-14 11:13 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2013-11-14 11:13 - 2013-11-14 11:13 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2013-11-14 10:45 - 2013-11-05 10:28 - 00000000 ____D C:\Users\jokrause\Documents\Eigene Dokumente 2013-11-13 10:21 - 2013-11-05 20:31 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\vlc 2013-11-13 10:05 - 2013-11-05 20:31 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\dvdcss 2013-11-13 09:55 - 2013-11-13 09:55 - 03049560 _____ (Cisco Systems, Inc.) C:\Users\jokrause\Downloads\anyconnect-win-3.1.04066-web-deploy-k9.exe 2013-11-13 09:55 - 2013-11-13 09:55 - 00000000 ____D C:\Users\jokrause\AppData\Local\Cisco 2013-11-13 09:55 - 2013-11-13 09:55 - 00000000 ____D C:\ProgramData\Cisco 2013-11-13 09:55 - 2013-11-13 09:55 - 00000000 ____D C:\Program Files (x86)\Cisco 2013-11-12 19:21 - 2013-11-12 19:21 - 00000000 ____D C:\Users\jokrause\Documents\ANNO 1404 Venedig 2013-11-12 19:21 - 2013-11-12 18:45 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Ubisoft 2013-11-12 18:44 - 2013-11-12 18:44 - 00000000 ____D C:\ProgramData\Solidshield 2013-11-12 18:42 - 2013-05-29 08:07 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-11-12 18:38 - 2013-11-12 17:07 - 00000898 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog 2013-11-12 18:33 - 2013-11-12 18:33 - 00314016 _____ C:\WINDOWS\system32\Drivers\atksgt.sys 2013-11-12 18:33 - 2013-11-12 18:33 - 00043680 _____ C:\WINDOWS\system32\Drivers\lirsgt.sys 2013-11-12 18:33 - 2013-11-12 18:33 - 00010123 _____ C:\WINDOWS\DirectX.log 2013-11-12 18:25 - 2013-11-12 18:25 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-11-12 17:12 - 2013-11-12 17:12 - 00000000 ____D C:\Users\jokrause\AppData\Local\gegl-0.2 2013-11-12 17:09 - 2013-11-12 17:08 - 00000000 ____D C:\Program Files\GIMP 2 2013-11-12 17:08 - 2013-11-12 17:08 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Windows Net Data 2013-11-12 17:05 - 2013-11-12 17:05 - 00000000 ____D C:\Users\jokrause\AppData\Local\Conduit 2013-11-12 17:05 - 2013-11-12 17:05 - 00000000 ____D C:\Program Files (x86)\Conduit 2013-11-12 17:05 - 2013-11-12 17:04 - 00000009 _____ C:\END 2013-11-12 17:01 - 2013-11-12 17:01 - 00002236 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-11-12 17:01 - 2013-11-12 16:59 - 00000000 ____D C:\Users\jokrause\AppData\Local\Google 2013-11-12 17:00 - 2013-11-12 17:00 - 00004106 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2013-11-12 17:00 - 2013-11-12 17:00 - 00003870 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2013-11-12 17:00 - 2013-11-12 16:59 - 00000000 ____D C:\Program Files (x86)\Google 2013-11-12 16:59 - 2013-11-12 16:59 - 00819152 _____ (Google Inc.) C:\Users\jokrause\Downloads\GoogleEarthSetup.exe 2013-11-12 15:45 - 2013-08-22 15:46 - 00291782 _____ C:\WINDOWS\setupact.log 2013-11-12 12:25 - 2013-11-12 12:25 - 00001058 _____ C:\Users\jokrause\Desktop\Dropbox.lnk 2013-11-12 12:24 - 2013-11-12 12:24 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2013-11-12 12:23 - 2013-11-12 12:23 - 35334016 _____ (Dropbox, Inc.) C:\Users\jokrause\Downloads\Dropbox 2.4.7.exe 2013-11-12 12:18 - 2013-11-05 02:15 - 00000000 ____D C:\Users\jokrause\AppData\Local\Packages 2013-11-10 10:08 - 2013-11-10 10:08 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2013-11-10 10:08 - 2013-11-10 10:08 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2013-11-10 10:07 - 2013-11-05 13:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Works 2013-11-08 16:14 - 2013-11-05 09:28 - 00000000 ____D C:\ProgramData\Adobe 2013-11-07 07:35 - 2013-11-07 07:35 - 00000000 ___RD C:\WINDOWS\BrowserChoice 2013-11-06 07:52 - 2013-11-05 07:50 - 00000000 ___DC C:\WINDOWS\Panther 2013-11-06 00:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2013-11-06 00:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2013-11-05 21:21 - 2013-11-17 11:07 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2013-11-05 19:51 - 2013-11-17 11:07 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2013-11-05 17:49 - 2013-11-05 17:49 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-05 17:48 - 2013-11-05 17:47 - 35060384 _____ (Skype Technologies S.A.) C:\Users\jokrause\Downloads\SkypeSetupFull6.10.60.104.exe 2013-11-05 17:20 - 2013-11-17 11:07 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2013-11-05 17:11 - 2013-11-17 11:07 - 18577408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2013-11-05 15:46 - 2013-11-05 15:46 - 02671854 _____ C:\Users\jokrause\Downloads\lightning-2.6.2-tb+sm-windows(1).xpi 2013-11-05 15:45 - 2013-11-05 15:45 - 02671854 _____ C:\Users\jokrause\Downloads\lightning-2.6.2-tb+sm-windows.xpi 2013-11-05 15:35 - 2013-11-05 15:35 - 04433586 _____ (Tinn-R Team ) C:\Users\jokrause\Downloads\Tinn-R_2.4.1.7_setup.exe 2013-11-05 15:31 - 2013-11-05 15:30 - 53957312 _____ (R Core Team ) C:\Users\jokrause\Downloads\R-3.0.2-win.exe 2013-11-05 15:30 - 2013-11-17 11:07 - 11674112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2013-11-05 15:29 - 2013-11-17 11:07 - 13176320 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2013-11-05 14:20 - 2013-11-05 09:47 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Apple Computer 2013-11-05 14:10 - 2013-11-05 14:10 - 00010495 _____ C:\Users\jokrause\Downloads\jokrause_elster_2048.pfx 2013-11-05 13:56 - 2013-11-05 13:56 - 00000000 ____D C:\WINDOWS\PCHEALTH 2013-11-05 13:56 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-11-05 13:56 - 2013-07-23 23:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2013-11-05 13:53 - 2013-11-05 13:53 - 00000000 ____D C:\Program Files\Microsoft Office 2013-11-05 13:53 - 2013-09-30 04:59 - 00000000 ____D C:\WINDOWS\ShellNew 2013-11-05 13:52 - 2013-11-05 13:52 - 00000000 __RHD C:\MSOCache 2013-11-05 13:27 - 2013-11-05 02:21 - 00000000 ____D C:\Users\jokrause\AppData\Local\clear.fi 2013-11-05 13:08 - 2013-11-05 13:08 - 00000000 ____D C:\Users\jokrause\AppData\Local\Apps\2.0 2013-11-05 13:03 - 2013-11-05 13:03 - 00000000 ____D C:\Users\jokrause\AppData\Local\Microsoft Help 2013-11-05 12:01 - 2013-11-05 12:01 - 00004868 _____ C:\Users\jokrause\Downloads\nat9.ani 2013-11-05 10:43 - 2013-11-05 02:16 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Adobe 2013-11-05 10:43 - 2013-11-04 23:03 - 00000000 ____D C:\Users\jokrause\AppData\Local\Adobe 2013-11-05 10:27 - 2013-11-05 10:27 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2013-11-05 10:17 - 2013-11-05 10:17 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\TreeCardGames 2013-11-05 10:17 - 2013-11-05 10:17 - 00000000 ____D C:\ProgramData\TreeCardGames 2013-11-05 10:14 - 2013-11-05 10:14 - 00000000 ____D C:\Users\Public\CyberLink 2013-11-05 10:14 - 2013-11-05 10:14 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\CyberLink 2013-11-05 10:14 - 2013-11-05 10:14 - 00000000 ____D C:\Users\jokrause\AppData\Local\Cyberlink 2013-11-05 10:14 - 2013-07-23 23:18 - 00000000 ____D C:\ProgramData\CyberLink 2013-11-05 10:11 - 2013-11-05 10:11 - 00000000 ____D C:\Program Files (x86)\123 Free Solitaire 2013-11-05 10:10 - 2013-11-05 10:10 - 07103672 _____ (TreeCardGames ) C:\Users\jokrause\Downloads\123freesolitaire-v100-setup.exe 2013-11-05 09:47 - 2013-11-05 09:47 - 00001799 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-11-05 09:47 - 2013-11-05 09:47 - 00000000 ____D C:\Users\jokrause\AppData\Local\Apple Computer 2013-11-05 09:47 - 2013-11-05 09:46 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-11-05 09:47 - 2013-11-05 09:46 - 00000000 ____D C:\Program Files\iTunes 2013-11-05 09:47 - 2013-11-05 09:46 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-11-05 09:46 - 2013-11-05 09:46 - 00000000 ____D C:\ProgramData\Apple Computer 2013-11-05 09:46 - 2013-11-05 09:46 - 00000000 ____D C:\Program Files\iPod 2013-11-05 09:45 - 2013-11-05 09:45 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple 2013-11-05 09:45 - 2013-11-05 09:45 - 00000000 ____D C:\Users\jokrause\AppData\Local\Apple 2013-11-05 09:45 - 2013-11-05 09:45 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2013-11-05 09:45 - 2013-11-05 09:44 - 00000000 ____D C:\ProgramData\Apple 2013-11-05 09:44 - 2013-11-05 09:44 - 00000000 ____D C:\Program Files\Common Files\Apple 2013-11-05 09:44 - 2013-11-05 09:44 - 00000000 ____D C:\Program Files\Bonjour 2013-11-05 09:44 - 2013-11-05 09:44 - 00000000 ____D C:\Program Files (x86)\Bonjour 2013-11-05 09:42 - 2013-11-05 09:40 - 100422480 _____ (Apple Inc.) C:\Users\jokrause\Downloads\iTunes64Setup.exe 2013-11-05 09:30 - 2013-11-05 09:30 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\WildTangent 2013-11-05 09:30 - 2013-05-29 08:00 - 00000000 ____D C:\ProgramData\WildTangent 2013-11-05 09:30 - 2013-05-29 08:00 - 00000000 ____D C:\Program Files (x86)\WildTangent Games 2013-11-05 09:29 - 2013-11-05 09:29 - 00002043 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk 2013-11-05 09:28 - 2013-11-05 09:28 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-11-05 09:24 - 2013-11-05 09:24 - 00000891 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-11-05 09:24 - 2013-11-05 09:24 - 00000000 ____D C:\Program Files\VideoLAN 2013-11-05 09:23 - 2013-11-05 09:23 - 23280480 _____ C:\Users\jokrause\Downloads\vlc-2.1.0-win64.exe 2013-11-05 09:21 - 2013-11-05 09:21 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Thunderbird 2013-11-05 09:20 - 2013-11-05 09:20 - 00002106 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-11-05 09:19 - 2013-11-05 09:19 - 21981512 _____ (Mozilla) C:\Users\jokrause\Downloads\Thunderbird_Setup_24.1.0.exe 2013-11-05 08:54 - 2013-11-05 08:58 - 00002174 _____ C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\startscreen.lnk 2013-11-05 08:54 - 2013-11-05 08:54 - 05629632 _____ (IvoSoft) C:\Users\jokrause\Downloads\ClassicShellSetup_4_0_2.exe 2013-11-05 08:54 - 2013-11-05 08:54 - 00000000 ____D C:\Program Files\Classic Shell 2013-11-05 08:54 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore 2013-11-05 08:13 - 2013-11-05 08:13 - 00000000 ____D C:\Users\jokrause\Documents\Bluetooth Folder 2013-11-05 08:13 - 2013-11-05 08:13 - 00000000 ____D C:\Users\jokrause\AppData\Local\BMExplorer 2013-11-05 08:13 - 2013-07-23 23:06 - 00000000 ____D C:\ProgramData\Atheros 2013-11-05 08:11 - 2013-11-05 08:11 - 00001458 _____ C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-05 08:11 - 2013-11-05 08:11 - 00000020 ___SH C:\Users\jokrause\ntuser.ini 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-11-05 08:08 - 2013-11-05 07:56 - 00020958 _____ C:\WINDOWS\diagwrn.xml 2013-11-05 08:08 - 2013-11-05 07:56 - 00020958 _____ C:\WINDOWS\diagerr.xml 2013-11-05 08:08 - 2013-11-05 07:31 - 00006532 _____ C:\WINDOWS\comsetup.log 2013-11-05 08:08 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Registration 2013-11-05 08:08 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT 2013-11-05 08:08 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default 2013-11-05 08:07 - 2013-11-05 08:07 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat 2013-11-05 08:04 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media 2013-11-05 08:04 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries 2013-11-05 08:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help 2013-11-05 08:00 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2013-11-05 07:58 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files (x86)\Intel 2013-11-05 07:58 - 2013-11-05 07:51 - 00000000 ____D C:\Program Files\Intel 2013-11-05 07:58 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2013-11-05 07:58 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2013-11-05 07:58 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\WCN 2013-11-05 07:58 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker 2013-11-05 07:58 - 2013-08-22 16:37 - 00004893 _____ C:\WINDOWS\DtcInstall.log 2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar 2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool 2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME 2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME 2013-11-05 07:58 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI 2013-11-05 07:58 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\oobe 2013-11-05 07:58 - 2013-05-29 07:46 - 00000000 ____D C:\ProgramData\PRICache 2013-11-05 07:58 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated 2013-11-05 07:57 - 2013-11-05 07:57 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2013-11-05 07:57 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Vorlagen 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Startmenü 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Netzwerkumgebung 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Lokale Einstellungen 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Eigene Dateien 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Druckumgebung 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Documents\Eigene Musik 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Documents\Eigene Bilder 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\AppData\Local\Verlauf 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\AppData\Local\Anwendungsdaten 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Anwendungsdaten 2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\Realtek 2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\Elantech 2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies 2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\AMD 2013-11-05 07:52 - 2013-08-22 15:46 - 00000084 _____ C:\WINDOWS\setuperr.log 2013-11-05 07:51 - 2013-11-05 07:51 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2013-11-05 07:50 - 2013-11-05 07:50 - 00000000 __SHD C:\Recovery 2013-11-05 07:49 - 2013-08-22 16:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template 2013-11-05 07:48 - 2013-11-05 07:48 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2013-11-05 07:48 - 2013-11-05 07:48 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2013-11-05 07:48 - 2013-11-05 07:48 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2013-11-05 07:48 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera 2013-11-05 07:47 - 2013-11-05 07:47 - 00262144 _____ C:\WINDOWS\system32\config\userdiff 2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files\MSBuild 2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-11-05 07:46 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2013-11-05 07:46 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI 2013-11-05 07:40 - 2013-07-23 22:44 - 01263822 _____ C:\WINDOWS\WindowsUpdate (1).log 2013-11-05 03:01 - 2013-11-05 02:16 - 00000000 ____D C:\Users\jokrause\AppData\Local\VirtualStore 2013-11-05 02:53 - 2013-11-05 02:53 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Macromedia 2013-11-05 02:22 - 2013-11-05 02:22 - 00000000 ____D C:\Users\Public\OEM 2013-11-05 02:22 - 2013-11-05 02:22 - 00000000 ____D C:\Users\jokrause\PicStream 2013-11-05 02:22 - 2013-11-05 02:22 - 00000000 ____D C:\Users\jokrause\Documents\clear.fi 2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Atheros 2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\ProgramData\OEM_YAHOO 2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Program Files\Preload 2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Program Files\Accessory Store 2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Program Files (x86)\OEM 2013-11-05 02:17 - 2013-05-29 08:26 - 00000000 ___HD C:\OEM 2013-11-05 02:16 - 2013-11-05 02:16 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Vorlagen 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Startmenü 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Netzwerkumgebung 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Lokale Einstellungen 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Eigene Dateien 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Druckumgebung 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Musik 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Bilder 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Verlauf 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Anwendungsdaten 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Anwendungsdaten 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Programme 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-11-04 23:09 - 2013-11-04 23:09 - 00000000 ____D C:\Users\jokrause\AppData\Local\Macromedia 2013-11-04 22:52 - 2013-11-04 22:52 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Mozilla 2013-11-04 22:49 - 2013-11-04 22:49 - 00001155 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-11-04 22:49 - 2013-11-04 22:49 - 00000000 ____D C:\ProgramData\Mozilla 2013-11-04 22:45 - 2013-11-04 22:45 - 00003558 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask 2013-11-04 22:42 - 2013-05-29 08:02 - 00000000 ____D C:\ProgramData\McAfee 2013-11-04 22:41 - 2013-07-23 23:15 - 00000000 ____D C:\ProgramData\Norton 2013-11-04 21:48 - 2013-11-04 21:48 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2013-11-04 21:44 - 2013-11-04 21:44 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\OpenOffice 2013-11-04 21:43 - 2013-11-04 21:43 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk 2013-11-04 21:43 - 2013-11-04 21:43 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4 Some content of TEMP: ==================== C:\Users\jokrause\AppData\Local\Temp\autorun.dll C:\Users\jokrause\AppData\Local\Temp\avgnt.exe C:\Users\jokrause\AppData\Local\Temp\ICReinstall_Workflowy_Allmyapps.exe C:\Users\jokrause\AppData\Local\Temp\ose00000.exe C:\Users\jokrause\AppData\Local\Temp\ose00002.exe C:\Users\jokrause\AppData\Local\Temp\SHSetup.exe C:\Users\jokrause\AppData\Local\Temp\ubiB303.tmp.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe [2013-11-17 11:06] - [2013-10-22 08:55] - 2328872 ____A (Microsoft Corporation) 63DC38C3E4564B2405D562855643ABA2 C:\Windows\SysWOW64\explorer.exe [2013-11-17 11:06] - [2013-10-22 07:03] - 2065448 ____A (Microsoft Corporation) 1A0BC9598E4A58FC84570FFF5A108E58 C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll [2013-11-17 11:06] - [2013-10-22 03:38] - 1362944 ____A (Microsoft Corporation) C72456BFFE941714CF05B0AA0BEE5B45 C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-19 06:59 ==================== End Of Log ============================ Vielen Dank! Physcia |
23.11.2013, 10:32 | #4 |
| "rvzr-a.akamaihd.net" entfernen und die Addition Datei: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-11-2013 Ran by at 2013-11-23 09:13:14 Running from C:\Users\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Installed Programs ====================== clear.fi SDK - Video 2 (x32 Version: 2.1.2606) clear.fi SDK- Movie 2 (x32 Version: 2.1.2606) 123 Free Solitaire v10.0 (x32) Acer Device Fast-lane (Version: 1.00.3011) Acer Launch Manager (Version: 8.00.3003) Acer Power Management (Version: 7.00.3013) Acer Recovery Management (Version: 6.00.3016) AcerCloud Docs (x32 Version: 1.01.2008) AcerCloud Portal (x32 Version: 2.02.2021) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117) Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05) AMD Accelerated Video Transcoding (Version: 12.10.100.30314) AMD APP SDK Runtime (Version: 10.0.1124.2) AMD Catalyst Install Manager (Version: 8.0.911.0) ANNO 1404 - Venedig (x32 Version: 2.0.5008.0) Anno 1404 (x32 Version: 1.00.0000) ANNO 1404 (x32 Version: 1.02.0000) Apple Application Support (x32 Version: 2.3.6) Apple Mobile Device Support (Version: 7.0.0.117) Apple Software Update (x32 Version: 2.1.3.127) Bejeweled 3 (x32 Version: 2.2.0.98) Bonjour (Version: 3.0.0.10) Broadcom Card Reader Driver Installer (Version: 16.0.2.3) Broadcom NetLink Controller (Version: 16.0.2.1) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center (x32 Version: 2013.0314.1033.17070) Catalyst Control Center InstallProxy (x32 Version: 2013.0314.1033.17070) Catalyst Control Center Localization All (x32 Version: 2013.0314.1033.17070) Catalyst Control Center Profiles Mobile (x32 Version: 2013.0314.1033.17070) CCC Help Chinese Standard (x32 Version: 2013.0314.1032.17070) CCC Help Chinese Traditional (x32 Version: 2013.0314.1032.17070) CCC Help Czech (x32 Version: 2013.0314.1032.17070) CCC Help Danish (x32 Version: 2013.0314.1032.17070) CCC Help Dutch (x32 Version: 2013.0314.1032.17070) CCC Help English (x32 Version: 2013.0314.1032.17070) CCC Help Finnish (x32 Version: 2013.0314.1032.17070) CCC Help French (x32 Version: 2013.0314.1032.17070) CCC Help German (x32 Version: 2013.0314.1032.17070) CCC Help Greek (x32 Version: 2013.0314.1032.17070) CCC Help Hungarian (x32 Version: 2013.0314.1032.17070) CCC Help Italian (x32 Version: 2013.0314.1032.17070) CCC Help Japanese (x32 Version: 2013.0314.1032.17070) CCC Help Korean (x32 Version: 2013.0314.1032.17070) CCC Help Norwegian (x32 Version: 2013.0314.1032.17070) CCC Help Polish (x32 Version: 2013.0314.1032.17070) CCC Help Portuguese (x32 Version: 2013.0314.1032.17070) CCC Help Russian (x32 Version: 2013.0314.1032.17070) CCC Help Spanish (x32 Version: 2013.0314.1032.17070) CCC Help Swedish (x32 Version: 2013.0314.1032.17070) CCC Help Thai (x32 Version: 2013.0314.1032.17070) CCC Help Turkish (x32 Version: 2013.0314.1032.17070) ccc-utility64 (Version: 2013.0314.1033.17070) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.04066) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.04066) Classic Shell (Version: 4.0.2) clear.fi Media (x32 Version: 2.02.2012) clear.fi Photo (x32 Version: 2.02.2016) CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3729_45993) Delicious: Emily's Childhood Memories Premium Edition (x32 Version: 3.0.2.32) Dropbox (HKCU Version: 2.4.7) eBay Worldwide (x32 Version: 2.4.0105) ETDWare PS/2-X64 11.6.23.203_WHQL (Version: 11.6.23.203) GIMP 2.8.6 (Version: 2.8.6) Google Earth (x32 Version: 7.1.2.2041) Google Update Helper (x32 Version: 1.3.21.165) Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110) Identity Card (x32 Version: 2.00.3006) Intel(R) Management Engine Components (x32 Version: 9.5.3.1520) Intel(R) Processor Graphics (x32 Version: 10.18.10.3316) Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 3.0.0.63463) Intel® Trusted Connect Service Client (Version: 1.27.798.1) iTunes (Version: 11.1.2.32) Java 7 Update 45 (x32 Version: 7.0.450) Java Auto Updater (x32 Version: 2.1.9.8) Jewel Match 3 (x32 Version: 2.2.0.98) John Deere Drive Green (x32 Version: 2.2.0.95) Kaspersky Internet Security (x32 Version: 14.0.0.4651) Live Updater (x32 Version: 2.00.3010) Magic Academy (x32 Version: 2.2.0.98) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Microsoft Office (x32 Version: 15.0.4454.1510) Microsoft Office 2007 Service Pack 3 (SP3) (x32) Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32) Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0) Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1) Mozilla Maintenance Service (x32 Version: 24.1.1) Mozilla Thunderbird 24.1.1 (x86 de) (x32 Version: 24.1.1) Nero BackItUp (x32 Version: 12.5.5000) Nero BackItUp 12 Essentials OEM.a01 (x32 Version: 12.5.00500) Nero BackItUp Help (CHM) (x32 Version: 12.0.10000) Nero ControlCenter (x32 Version: 11.0.15600) Nero ControlCenter Help (CHM) (x32 Version: 12.0.7000) Nero Core Components (x32 Version: 11.0.20200) Nero Launcher (x32 Version: 12.2.7000) Nero RescueAgent (x32 Version: 12.0.3001) Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000) Nero Update (x32 Version: 11.0.11800.31.0) OEM Application Profile (x32 Version: 1.00.0000) Office Addin (x32 Version: 2.02.2008) Office Addin 2003 (x32 Version: 2.02.2008) OpenOffice 4.0.1 (x32 Version: 4.01.9714) Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98) Prerequisite installer (x32 Version: 12.0.0003) PX Profile Update (x32 Version: 1.00.1.) Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.224) Qualcomm Atheros WLAN and Bluetooth Client Installation Program (x32 Version: 11.49) R for Windows 3.0.2 (Version: 3.0.2) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6865) Shared C Run-time for x64 (Version: 10.0.0) Skype™ 6.10 (x32 Version: 6.10.104) Spielkanäle (x32 Version: 8.1.0.17) Tales of Lagoona (x32 Version: 2.2.0.110) Tinn-R 2.4.1.7 (x32) Update for 2007 Microsoft Office System (KB967642) (x32) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32) Update für Microsoft Office Excel 2007 Help (KB963678) (x32) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32) Update für Microsoft Office Word 2007 Help (KB963665) (x32) Update Installer for WildTangent Games App (x32) VIS (x32) Visual Studio 2005 Tools for Office Second Edition Runtime (x32) Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729) Visual Studio Tools for the Office system 3.0 Runtime (x32) Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (x32 Version: 1) VLC media player 2.1.0 (Version: 2.1.0) WildTangent Games (x32 Version: 1.0.4.0) WildTangent Games App (x32 Version: 4.0.10.5) WinSecurity (x32) ==================== Restore Points ========================= 22-11-2013 10:16:35 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0AAEFF03-E1B2-42D9-8095-9C4D02801D18} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated) Task: {1F712D34-FB89-4250-B1F2-CDB6EAFE712D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\System32\MRT.exe [2013-11-14] (Microsoft Corporation) Task: {1FB95EA9-5042-4178-BB2D-296273122803} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-12] (Google Inc.) Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation) Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\System32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {4715885D-0279-467C-A997-C6141AFB40A5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {51CC7AD8-E364-4FAF-90AB-9E0E630BD097} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-03-13] () Task: {685803A8-67D5-46CA-A8D4-A46C12897ED5} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] () Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => C:\Windows\System32\AppXDeploymentClient.dll [2013-09-30] (Microsoft Corporation) Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {CE23B4D0-DD17-4DD2-9E0C-06E07661CDBF} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-03-15] (Acer Incorporate) Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE Task: {F90BC3F8-2912-4C90-9591-2E76E76C86FA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-12] (Google Inc.) Task: {F9B2689C-2D1A-4EED-96EC-FA905FD4EF4A} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2013-02-08] (CyberLink) Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-04-15 10:23 - 2013-04-15 10:23 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll 2013-04-15 10:20 - 2013-04-15 10:20 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll 2013-08-30 23:11 - 2013-08-30 23:11 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll 2013-09-13 19:51 - 2013-09-13 19:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2013-09-13 19:51 - 2013-09-13 19:51 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-07-23 22:46 - 2013-05-08 21:23 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll 2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll 2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\jokrause\AppData\Roaming\Dropbox\bin\libcef.dll 2013-11-05 09:20 - 2013-11-22 08:00 - 03008624 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll 2013-11-05 09:20 - 2013-11-22 08:00 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll 2013-11-05 09:20 - 2013-11-22 08:00 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll 2013-11-16 06:12 - 2013-11-16 06:12 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\jokrause\SkyDrive:ms-properties ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Intel(R) Display-Audio Description: Intel(R) Display-Audio Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318} Manufacturer: Intel(R) Corporation Service: IntcDAud Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (11/22/2013 09:21:03 PM) (Source: Customer Experience Improvement Program) (User: ) Description: 80070005 Error: (11/22/2013 08:51:54 PM) (Source: RasClient) (User: ) Description: CoID={6456FC48-8458-4675-9BD6-8175B2F7F7C6}: Der Benutzer "SYSTEM" hat eine Verbindung mit dem Namen "Breitbandverbindung" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 651. Error: (11/22/2013 11:55:03 AM) (Source: ATIeRecord) (User: ) Description: ATI EEU Client has failed to start Error: (11/22/2013 10:09:41 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3. Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird. Error: (11/22/2013 10:09:41 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3. Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird. Error: (11/22/2013 10:09:41 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3. Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird. Error: (11/22/2013 10:06:10 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "x64" des "processorArchitecture"-Attributs im assemblyIdentity-Element ist ungültig. Error: (11/22/2013 08:26:54 AM) (Source: Customer Experience Improvement Program) (User: ) Description: 80070005 Error: (11/21/2013 10:19:11 AM) (Source: RasClient) (User: ) Description: CoID={23338EF3-0C12-45A0-8AF6-B86DA916C401}: Der Benutzer "SYSTEM" hat eine Verbindung mit dem Namen "Breitbandverbindung" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 651. Error: (11/21/2013 10:14:44 AM) (Source: Application Hang) (User: ) Description: Programm LiveComm.exe, Version 17.5.9600.20315 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 195d0 Startzeit: 01cee699661869b3 Endzeit: 4294967295 Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\LiveComm.exe Berichts-ID: 59c75bb1-528d-11e3-be78-24fd52d6853f Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1 System errors: ============= Error: (11/23/2013 07:16:51 AM) (Source: Service Control Manager) (User: ) Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: %%5 Error: (11/22/2013 08:53:36 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (11/22/2013 10:00:03 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (11/21/2013 10:20:22 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (11/21/2013 10:00:16 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (11/21/2013 06:42:58 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (11/20/2013 09:06:19 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (11/20/2013 00:35:58 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (11/19/2013 10:00:01 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (11/18/2013 04:32:24 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Microsoft Office Sessions: ========================= Error: (11/21/2013 08:26:06 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 5484 seconds with 3960 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 55% Total physical RAM: 3816.27 MB Available physical RAM: 1694.77 MB Total Pagefile: 6504.27 MB Available Pagefile: 4314.23 MB Total Virtual: 131072 MB Available Virtual: 131071.79 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:681.85 GB) (Free:636.94 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 699 GB) (Disk ID: 422B340A) Partition: GPT Partition Type ==================== End Of Log ============================ Hallo Schrauber! Es ist mir etwas peinlich. Aber ich hatte offensichtlich immer nur das schnelle Scannen mit Malwarebytes Anti-Malware gemacht. Ich hab jetzt nochmal so einen richtigen Scan gestartet und da hat er jetzt schon was gefunden, aber er ist noch nicht fertig. Ich muss dann nochmal eine log datei davon schicken. Tut mir total leid. Physcia Hallo! Der vollständige Scan mit Malwarebytes Anti-Malware ergab: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.11.22.04 Windows 8 x64 NTFS Internet Explorer 11.0.9600.16438 :: [Administrator] 23.11.2013 09:08:18 mbam-log-2013-11-23 (09-08-18).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 363223 Laufzeit: 45 Minute(n), 45 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 11 C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\9RD436ER\checktbexist[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\D2D248W0\conduitinstaller[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\D2D248W0\iminent[1].msi (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\D2D248W0\SPSetup[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\GY0M1FRG\IminentMinibarIE[1].exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\GY0M1FRG\MinibarFirefox[1].exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\GY0M1FRG\radiototal4[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\GY0M1FRG\RadioTotal4[2].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\OY2EEXN1\MinibarChrome[1].exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\OY2EEXN1\statisticsstub[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\jokrause\AppData\LocalLow\GutscheinCodes\winsecurity.dll (PUP.Optional.WinSecurity.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Vielen Dank! Physcia Hallo! Also das Problem ist leider nicht behoben. Ich brauch weiterhin Hilfe! Vielen Dank! Physcia |
24.11.2013, 08:14 | #5 |
/// the machine /// TB-Ausbilder | "rvzr-a.akamaihd.net" entfernen Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu "rvzr-a.akamaihd.net" entfernen |
administrator, adresse, ahnung, andere, anti-malware, autostart, bösartige, malwarebytes, problem, pup.optional.conduit.a, pup.optional.iminent.a, pup.optional.winsecurity.a, registrierung, seite, speicher, version, virenscan, übernehmen |