PUP.Optional...... möchte ich loswerden

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.07.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16428
Nura :: NURA-PC [Administrator]

Schutz: Aktiviert

07.12.2013 23:26:26
MBAM-log-2013-12-07 (23-31-57).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 210017
Laufzeit: 3 Minute(n), 43 Sekunde(n)

Infizierte Speicherprozesse: 5
C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> 4248 -> Keine Aktion durchgeführt.
C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> 4284 -> Keine Aktion durchgeführt.
C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> 3164 -> Keine Aktion durchgeführt.
C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> 3764 -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\PluginProtect.exe (PUP.Optional.OKitSpace.A) -> 2712 -> Keine Aktion durchgeführt.

Infizierte Speichermodule: 1
C:\Users\Nura\AppData\Roaming\okitspace\protect\utilsDll.dll (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.

Infizierte Registrierungsschlüssel: 11
HKCU\Software\1ClickDownload (PUP.Optional.1ClickDownload.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt.
HKCU\Software\InstalledBrowserExtensions\installdaddy (PUP.Optional.CrossRider.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{3543619C-D563-43f7-95EA-4DA7E1CC396A} (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{90A52F08-64AC-4DC6-9D7D-4516670275D3} (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
HKCR\Interface\{6C51F7E9-8542-4F25-A30F-2060157752E1} (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
HKCR\OKitSpace.1 (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
HKCR\OKitSpace (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3543619C-D563-43F7-95EA-4DA7E1CC396A} (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
HKLM\SYSTEM\CurrentControlSet\Services\srvPlgProtect (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDvid Codec V6.0 (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 3
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0H1L1J1L1S1R1N -> Keine Aktion durchgeführt.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Daten: C:\ProgramData\Updater\updater.exe -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Daten: C:\ProgramData\Updater\Updater.exe -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 1
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Conduit.A) -> Bösartig: (hxxp://search.conduit.com/?ctid=CT3317209&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPA277A281-9A6D-4EE4-BBA4-E381CE2AE5D7&SSPV=) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt.

Infizierte Verzeichnisse: 22
C:\Users\Nura\AppData\Local\Temp\CT3317209 (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Temp\CT3317212 (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\Chrome (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\IE (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\files (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\updateSrv (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Chrome (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\icons (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\skin (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\IE (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\ProgramData\RHelpers\ChromeHelper (PUP.Optional.Searchagent) -> Keine Aktion durchgeführt.
C:\ProgramData\RHelpers\FirefoxHelper (PUP.Optional.Searchagent) -> Keine Aktion durchgeführt.
C:\ProgramData\RHelpers\IeHelper (PUP.Optional.Searchagent) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\HDvid Codec V6.0 (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0 (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt.

Infizierte Dateien: 58
C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> Keine Aktion durchgeführt.
C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> Keine Aktion durchgeführt.
C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\Desktop\malwarebytes-anti-malware.exe (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Temp\ICReinstall_malwarebytes-anti-malware.exe (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Temp\nsb2A6.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Temp\nsgE708.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Temp\nsgE979.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Temp\nsn366F.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Temp\nsqFFF6.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Temp\is1070216317\13221039_stp\rcpsetup_adppi_adppi.exe (PUP.Optional.RegCleanerPro) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Temp\mam-ct3317212\mamstub.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Windows\Tasks\HDvid Codec V6.0-chromeinstaller.job (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt.
C:\Windows\Tasks\HDvid Codec V6.0-updater.job (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Temp\CT3317209\ddt.csf (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Temp\CT3317212\ddt.csf (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\uninstallkit.exe (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\Chrome\OKitSpace.crx (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\IE\config (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\IE\OkitSpace.dll (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\config.xml (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\Interop.Shell32.dll (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\PluginProtect.exe (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\PluginProtect.exe_old (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\sqlite3.exe (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\utilsDll.dll (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\versionPPSrv (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\files\crxID (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\files\OkitSpace.crx (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\files\OkitSpace.dll (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\files\OkitSpace.xpi (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Roaming\okitspace\protect\files\version (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Chrome\OKitSpace.crx (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome.manifest (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\install.rdf (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\background.html (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\content.xul (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\main.js (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\icons\okitspace-19x19.png (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\content\icons\okitspace-48x48.png (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\Firefox\chrome\skin\overlay.css (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\IE\config (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\okitSpace\IE\OkitSpace.dll (PUP.Optional.OKitSpace.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\HDvid Codec V6.0\45971.crx (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-chromeinstaller.exe (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-updater.exe (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\HDvid Codec V6.0\Uninstall.exe (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\HDvid Codec V6.0\utils.exe (PUP.Optional.HDVidCodec.A) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\announce.js (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\background.html (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\common.js (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\contentscript.js (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\icon128.png (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\icon16.png (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\icon48.png (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\iframecontentscript.js (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt.
C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.49_0\manifest.json (PUP.Optional.MultiIE) -> Keine Aktion durchgeführt.

(Ende)
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-12-2013 2
Ran by Nura (administrator) on NURA-PC on 08-12-2013 10:42:31
Running from C:\Users\Nura\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Users\Nura\AppData\Roaming\okitspace\protect\PluginProtect.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
(Updater) C:\ProgramData\Updater\updater.exe
(Dropbox, Inc.) C:\Users\Nura\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331_STI.EXE
( ) C:\Program Files (x86)\LockKey\LockKey.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(WatchDog) C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(WatchDog) C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe
(WatchDog) C:\ProgramData\RHelpers\IeHelper\IeHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe [564352 2012-03-01] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SACpl.exe [1654400 2012-02-21] (Conexant Systems, Inc.)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2809856 2012-01-16] (ELAN Microelectronics Corp.)
HKLM\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8079408 2013-09-25] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [6202416 2013-09-25] (Lenovo(beijing) Limited)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1022592 2012-04-28] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [801920 2012-04-28] (Atheros Commnucations)
HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1734848 2013-11-27] (Bitdefender)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [560648 2013-11-27] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1000488 2013-11-27] (Bitdefender)
HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2013-11-27] (Bitdefender)
HKCU\...\Run: [Updater] - C:\ProgramData\Updater\updater.exe [481656 2013-11-20] (Updater)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-20] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE [548864 2011-11-24] (Vimicro)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [LockKey] - C:\Program Files (x86)\LockKey\LockKey.exe [337776 2011-08-25] ( )
HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [Updater] - C:\ProgramData\Updater\updater.exe [481656 2013-11-20] (Updater)
HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\Default User\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
Startup: C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nura\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?ctid=CT3317209&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPA277A281-9A6D-4EE4-BBA4-E381CE2AE5D7&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4A826951DBB9CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3317209&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPA277A281-9A6D-4EE4-BBA4-E381CE2AE5D7&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3317209&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPA277A281-9A6D-4EE4-BBA4-E381CE2AE5D7&q={searchTerms}&SSPV=
BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender)
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\antispam32\pmbxie.dll (Bitdefender)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: OKitSpace Object - {3543619C-D563-43f7-95EA-4DA7E1CC396A} - C:\Users\Nura\AppData\Roaming\okitspace\IE\OkitSpace.dll ()
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Chrome: 
=======
CHR HomePage: hxxp://search.conduit.com/?ctid=CT3317209&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPA277A281-9A6D-4EE4-BBA4-E381CE2AE5D7&SSPV=
CHR RestoreOnStartup: "hxxp://www.haw-hamburg.de/ws-w/unser-department/ankuendigungen.html", "hxxp://www.elearning.haw-hamburg.de/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll ()
CHR Plugin: (Microsoft Office 2013) - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
CHR Plugin: (Bitdefender 2014) - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxnp.dll (Bitdefender)
CHR Extension: (Google Docs) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Bitdefender Wallet) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl\17.23.0_0
CHR Extension: (Google Search) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR Extension: (HDvid Codec V6.0) - C:\Users\Nura\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnkhmnoajbfccclonaeepohggeolcih\1.25.33_0
CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx
CHR HKLM-x32\...\Chrome\Extension: [hifnddafpdkmjljallgdlkjiiieidmec] - C:\Users\Nura\AppData\Roaming\okitSpace\Chrome\OKitSpace.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-27] (Bitdefender)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-29] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 srvPlgProtect; C:\Users\Nura\AppData\Roaming\okitspace\protect\PluginProtect.exe [100864 2013-12-04] ()
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-22] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-27] (Bitdefender)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [163456 2012-04-28] (Atheros)

==================== Drivers (Whitelisted) ====================

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-02-22] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-10-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-11-27] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2012-04-17] (BitDefender)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-10-02] (BitDefender LLC)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104048 2012-03-02] (Qualcomm Atheros Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-10-02] (BitDefender S.R.L.)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [952832 2011-12-06] (Vimicro Corporation)
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-07 22:47 - 2013-12-07 22:47 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-07 22:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-07 22:46 - 2013-12-07 22:46 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nura\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-07 22:44 - 2013-12-07 22:44 - 00651976 _____ C:\Users\Nura\Desktop\malwarebytes-anti-malware.exe
2013-12-07 22:44 - 2013-12-07 22:44 - 00001171 _____ C:\Users\Nura\Desktop\Die Installation von Malwarebytes Anti-Malware fortsetzen.lnk
2013-12-07 22:26 - 2013-12-08 10:42 - 00015936 _____ C:\Users\Nura\Desktop\FRST.txt
2013-12-07 22:26 - 2013-12-07 22:26 - 00000000 ____D C:\FRST
2013-12-07 22:25 - 2013-12-07 22:25 - 01927514 _____ (Farbar) C:\Users\Nura\Desktop\FRST64.exe
2013-12-07 11:10 - 2013-12-07 11:10 - 00000000 ____D C:\Users\Nura\AppData\Local\CrashDumps
2013-12-06 17:36 - 2013-12-06 17:36 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-06 17:32 - 2013-12-06 17:32 - 01202008 _____ C:\Windows\Minidump\120613-20904-01.dmp
2013-12-05 16:35 - 2013-12-05 16:35 - 00000000 ____D C:\Users\Nura\AppData\Roaming\OpenOffice
2013-12-05 16:32 - 2013-12-06 17:41 - 00000000 ____D C:\ProgramData\Websteroids
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Mozilla
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\Updater
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 _____ C:\END
2013-12-05 15:00 - 2013-12-05 15:00 - 00000000 ____D C:\epson
2013-12-05 14:39 - 2013-12-06 17:37 - 00000000 ___RD C:\Users\Nura\Virtual Machines
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\th-TH
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\he-IL
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Program Files (x86)\Windows Virtual PC
2013-12-05 14:34 - 2010-11-20 14:34 - 00360832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcvmm.sys
2013-12-05 14:34 - 2010-11-20 14:34 - 00194944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpchbus.sys
2013-12-05 14:34 - 2010-11-20 14:27 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\vpchbuspipe.dll
2013-12-05 14:34 - 2010-11-20 14:25 - 04514816 _____ (Microsoft Corporation) C:\Windows\system32\vpc.exe
2013-12-05 14:34 - 2010-11-20 14:25 - 02264064 _____ (Microsoft Corporation) C:\Windows\system32\VPCWizard.exe
2013-12-05 14:34 - 2010-11-20 14:25 - 01369600 _____ (Microsoft Corporation) C:\Windows\system32\VPCSettings.exe
2013-12-05 14:34 - 2010-11-20 12:37 - 01210368 _____ (Microsoft Corporation) C:\Windows\system32\VMWindow.exe
2013-12-05 14:34 - 2010-11-20 12:37 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\vmsal.exe
2013-12-05 14:34 - 2010-11-20 12:35 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\VMCPropertyHandler.dll
2013-12-05 14:34 - 2010-11-20 12:35 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcusb.sys
2013-12-05 14:34 - 2010-11-20 12:35 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcnfltr.sys
2013-12-05 14:34 - 2010-11-20 12:35 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcuxd.sys
2013-12-05 14:34 - 2010-11-20 11:52 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vmsal.exe
2013-12-05 14:27 - 2013-12-05 14:27 - 00000000 ____D C:\ProgramData\Windows Genuine Advantage
2013-12-04 19:36 - 2013-12-06 17:42 - 00000000 ____D C:\Users\Nura\AppData\Roaming\okitspace
2013-12-04 18:37 - 2013-12-06 17:39 - 00000000 ____D C:\Program Files (x86)\epson
2013-12-04 17:55 - 2013-12-04 18:10 - 00000000 ____D C:\Users\Nura\AppData\Local\Mobogenie
2013-12-04 17:55 - 2013-12-04 18:06 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong\AppData\Local\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\Documents\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Local\cache
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 _____ C:\Users\Nura\daemonprocess.txt
2013-12-04 17:54 - 2013-12-04 18:12 - 00000000 ____D C:\Program Files (x86)\DSP-worx
2013-12-04 17:54 - 2013-12-04 18:11 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-12-04 17:54 - 2013-12-04 18:10 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2013-12-04 17:54 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Roaming\LavFilters
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\MetaCrawler
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\CDXReader
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\ProgramData\DivX
2013-12-03 19:09 - 2013-12-03 19:09 - 00000000 ____D C:\Program Files (x86)\GUMA7C.tmp
2013-12-02 00:13 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-02 00:10 - 2013-12-02 00:10 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-02 00:09 - 2013-12-02 00:13 - 00009768 _____ C:\Windows\IE11_main.log
2013-11-30 18:05 - 2013-11-06 00:47 - 00000000 ____D C:\Users\Nura\Downloads\Die.Vollpfosten.Never.Change.a.Losing.Team.2012.German.720p.BluRay.x264-ENCOUNTERS
2013-11-27 18:00 - 2013-11-27 17:15 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2013-11-25 15:46 - 2013-11-25 15:46 - 00008723 _____ C:\Users\Nura\Documents\Mappe1.xlsx
2013-11-24 20:52 - 2013-11-24 20:52 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-11-24 20:45 - 2013-12-08 09:39 - 00001944 _____ C:\Windows\Tasks\HDvid Codec V6.0-chromeinstaller.job
2013-11-24 20:45 - 2013-12-08 09:39 - 00001324 _____ C:\Windows\Tasks\HDvid Codec V6.0-updater.job
2013-11-24 20:45 - 2013-11-24 20:45 - 00004354 _____ C:\Windows\System32\Tasks\HDvid Codec V6.0-updater
2013-11-24 20:45 - 2013-11-24 20:45 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Macromedia
2013-11-24 20:45 - 2013-11-24 20:45 - 00000000 ____D C:\Program Files (x86)\HDvid Codec V6.0
2013-11-24 20:44 - 2013-11-24 20:45 - 00000000 ____D C:\Program Files (x86)\HDPlayer
2013-11-24 20:44 - 2013-11-24 20:44 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDPlayer
2013-11-17 16:55 - 2013-11-17 16:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-13 12:14 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 12:14 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 12:14 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 12:14 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 12:14 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 12:14 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 12:14 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 12:14 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 12:14 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 12:14 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 12:14 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 12:14 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 12:14 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 12:14 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 12:14 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 12:14 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 12:14 - 2013-09-25 03:30 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 12:14 - 2013-09-25 03:30 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 12:14 - 2013-09-25 03:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 12:14 - 2013-09-25 03:27 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 12:14 - 2013-09-25 03:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 12:14 - 2013-09-25 03:27 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 12:14 - 2013-09-25 03:26 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 12:14 - 2013-09-25 03:25 - 01446400 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 12:14 - 2013-09-25 03:01 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 12:14 - 2013-09-25 03:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 12:14 - 2013-09-25 03:00 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 12:14 - 2013-09-25 02:59 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 12:14 - 2013-09-25 02:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 12:14 - 2013-07-09 07:26 - 00458704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

==================== One Month Modified Files and Folders =======

2013-12-08 10:42 - 2013-12-07 22:26 - 00015936 _____ C:\Users\Nura\Desktop\FRST.txt
2013-12-08 10:37 - 2013-09-25 09:13 - 01432055 _____ C:\Windows\WindowsUpdate.log
2013-12-08 10:20 - 2011-04-12 08:43 - 00700800 _____ C:\Windows\system32\perfh007.dat
2013-12-08 10:20 - 2011-04-12 08:43 - 00149668 _____ C:\Windows\system32\perfc007.dat
2013-12-08 10:20 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-08 10:18 - 2013-09-25 11:39 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-08 09:39 - 2013-11-24 20:45 - 00001944 _____ C:\Windows\Tasks\HDvid Codec V6.0-chromeinstaller.job
2013-12-08 09:39 - 2013-11-24 20:45 - 00001324 _____ C:\Windows\Tasks\HDvid Codec V6.0-updater.job
2013-12-07 23:30 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-07 23:30 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-07 23:25 - 2013-10-01 16:12 - 00000000 ___RD C:\Users\Nura\Dropbox
2013-12-07 23:25 - 2013-10-01 16:10 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Dropbox
2013-12-07 23:25 - 2013-09-25 13:14 - 00003490 _____ C:\Windows\System32\Tasks\AutoKMS
2013-12-07 23:24 - 2013-09-25 11:39 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-07 23:24 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-07 23:24 - 2009-07-14 05:51 - 00053059 _____ C:\Windows\setupact.log
2013-12-07 22:47 - 2013-12-07 22:47 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-07 22:47 - 2013-12-07 22:47 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-07 22:46 - 2013-12-07 22:46 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Nura\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-07 22:44 - 2013-12-07 22:44 - 00651976 _____ C:\Users\Nura\Desktop\malwarebytes-anti-malware.exe
2013-12-07 22:44 - 2013-12-07 22:44 - 00001171 _____ C:\Users\Nura\Desktop\Die Installation von Malwarebytes Anti-Malware fortsetzen.lnk
2013-12-07 22:26 - 2013-12-07 22:26 - 00000000 ____D C:\FRST
2013-12-07 22:25 - 2013-12-07 22:25 - 01927514 _____ (Farbar) C:\Users\Nura\Desktop\FRST64.exe
2013-12-07 16:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-07 11:10 - 2013-12-07 11:10 - 00000000 ____D C:\Users\Nura\AppData\Local\CrashDumps
2013-12-06 17:42 - 2013-12-04 19:36 - 00000000 ____D C:\Users\Nura\AppData\Roaming\okitspace
2013-12-06 17:41 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\Websteroids
2013-12-06 17:41 - 2013-09-25 09:58 - 00114328 _____ C:\Users\Nura\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-06 17:40 - 2009-07-14 05:45 - 00446472 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-06 17:39 - 2013-12-04 18:37 - 00000000 ____D C:\Program Files (x86)\epson
2013-12-06 17:39 - 2010-11-21 04:47 - 00017298 _____ C:\Windows\PFRO.log
2013-12-06 17:37 - 2013-12-05 14:39 - 00000000 ___RD C:\Users\Nura\Virtual Machines
2013-12-06 17:36 - 2013-12-06 17:36 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-06 17:32 - 2013-12-06 17:32 - 01202008 _____ C:\Windows\Minidump\120613-20904-01.dmp
2013-12-06 17:32 - 2013-09-28 09:37 - 535523586 _____ C:\Windows\MEMORY.DMP
2013-12-06 17:32 - 2013-09-28 09:37 - 00000000 ____D C:\Windows\Minidump
2013-12-05 16:35 - 2013-12-05 16:35 - 00000000 ____D C:\Users\Nura\AppData\Roaming\OpenOffice
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Mozilla
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\Updater
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 ____D C:\ProgramData\RHelpers
2013-12-05 16:32 - 2013-12-05 16:32 - 00000000 _____ C:\END
2013-12-05 15:00 - 2013-12-05 15:00 - 00000000 ____D C:\epson
2013-12-05 14:39 - 2013-09-25 09:41 - 00000000 ____D C:\Users\Nura
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\tr-TR
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\th-TH
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ro-RO
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\he-IL
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Windows\system32\Drivers\ar-SA
2013-12-05 14:36 - 2013-12-05 14:36 - 00000000 ____D C:\Program Files (x86)\Windows Virtual PC
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\th-TH
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ro-RO
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\he-IL
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ar-SA
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\th-TH
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ro-RO
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\he-IL
2013-12-05 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ar-SA
2013-12-05 14:27 - 2013-12-05 14:27 - 00000000 ____D C:\ProgramData\Windows Genuine Advantage
2013-12-05 12:30 - 2013-09-24 20:34 - 00000000 ____D C:\Users\Nura\Desktop\Bürgerliches Recht
2013-12-05 12:27 - 2013-09-24 20:31 - 00000000 ____D C:\Users\Nura\Desktop\Rechnungswesen
2013-12-04 21:32 - 2013-09-25 11:22 - 00000000 ____D C:\Users\Nura\AppData\Roaming\vlc
2013-12-04 19:30 - 2013-09-25 09:56 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-04 19:25 - 2013-09-25 09:41 - 00000000 ____D C:\Users\Nura\AppData\Local\VirtualStore
2013-12-04 18:12 - 2013-12-04 17:54 - 00000000 ____D C:\Program Files (x86)\DSP-worx
2013-12-04 18:11 - 2013-12-04 17:54 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-12-04 18:11 - 2013-10-05 16:43 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Systweak
2013-12-04 18:10 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Local\Mobogenie
2013-12-04 18:10 - 2013-12-04 17:54 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2013-12-04 18:08 - 2013-10-05 16:45 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-12-04 18:08 - 2013-09-25 09:41 - 00000000 ___RD C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-04 18:06 - 2013-12-04 17:55 - 00000000 ____D C:\Program Files (x86)\Advanced System Protector
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong\AppData\Local\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\wangzhisong
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\Documents\Mobogenie
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 ____D C:\Users\Nura\AppData\Local\cache
2013-12-04 17:55 - 2013-12-04 17:55 - 00000000 _____ C:\Users\Nura\daemonprocess.txt
2013-12-04 17:55 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\LavFilters
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\MetaCrawler
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\Users\Nura\AppData\Roaming\CDXReader
2013-12-04 17:54 - 2013-12-04 17:54 - 00000000 ____D C:\ProgramData\DivX
2013-12-04 16:52 - 2013-10-23 14:53 - 00000000 ____D C:\Users\Nura\Desktop\country studies
2013-12-03 19:09 - 2013-12-03 19:09 - 00000000 ____D C:\Program Files (x86)\GUMA7C.tmp
2013-12-03 19:09 - 2013-09-25 11:39 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-03 19:09 - 2013-09-25 11:39 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-02 13:22 - 2013-09-24 20:33 - 00000000 ____D C:\Users\Nura\Desktop\Absatz
2013-12-02 13:17 - 2013-09-24 20:33 - 00000000 ____D C:\Users\Nura\Desktop\Grundlagen der BWL
2013-12-02 13:16 - 2013-09-24 20:32 - 00000000 ____D C:\Users\Nura\Desktop\Produktion
2013-12-02 13:13 - 2013-09-24 20:30 - 00000000 ____D C:\Users\Nura\Desktop\Mathematik
2013-12-02 12:13 - 2013-09-24 20:32 - 00000000 ____D C:\Users\Nura\Desktop\Intercultural interaction
2013-12-02 10:27 - 2013-09-25 09:41 - 00001421 _____ C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-02 10:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-02 00:13 - 2013-12-02 00:09 - 00009768 _____ C:\Windows\IE11_main.log
2013-12-02 00:10 - 2013-12-02 00:10 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-02 00:10 - 2013-12-02 00:10 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-02 00:10 - 2013-12-02 00:10 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-02 00:10 - 2013-12-02 00:10 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-02 00:10 - 2013-12-02 00:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-02 00:10 - 2013-12-02 00:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-02 00:10 - 2013-12-02 00:10 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-02 00:10 - 2013-12-02 00:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-30 17:48 - 2013-10-05 16:44 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-11-28 11:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports
2013-11-27 17:15 - 2013-11-27 18:00 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll
2013-11-27 17:15 - 2013-11-27 17:15 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll
2013-11-27 17:15 - 2013-09-25 11:24 - 00082824 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys
2013-11-25 15:46 - 2013-11-25 15:46 - 00008723 _____ C:\Users\Nura\Documents\Mappe1.xlsx
2013-11-24 20:52 - 2013-11-24 20:52 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-11-24 20:45 - 2013-11-24 20:45 - 00004354 _____ C:\Windows\System32\Tasks\HDvid Codec V6.0-updater
2013-11-24 20:45 - 2013-11-24 20:45 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Macromedia
2013-11-24 20:45 - 2013-11-24 20:45 - 00000000 ____D C:\Program Files (x86)\HDvid Codec V6.0
2013-11-24 20:45 - 2013-11-24 20:44 - 00000000 ____D C:\Program Files (x86)\HDPlayer
2013-11-24 20:44 - 2013-11-24 20:44 - 00000000 ____D C:\Users\Nura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDPlayer
2013-11-22 15:42 - 2013-10-05 16:43 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2013-11-21 16:03 - 2013-09-24 19:03 - 00000000 ____D C:\Users\Nura\Documents\Outlook-Dateien
2013-11-17 16:55 - 2013-11-17 16:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-17 16:54 - 2013-09-25 13:00 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-14 15:03 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini
2013-11-14 15:00 - 2013-09-25 10:54 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 14:59 - 2013-09-25 10:54 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\Nura\AppData\Local\Temp\391.10494198839336_Update.exe
C:\Users\Nura\AppData\Local\Temp\86934uninstall.exe
C:\Users\Nura\AppData\Local\Temp\app.exe
C:\Users\Nura\AppData\Local\Temp\BackupSetup.exe
C:\Users\Nura\AppData\Local\Temp\bassmod.dll
C:\Users\Nura\AppData\Local\Temp\ICReinstall_malwarebytes-anti-malware.exe
C:\Users\Nura\AppData\Local\Temp\instloffer.exe
C:\Users\Nura\AppData\Local\Temp\nsb2A6.exe
C:\Users\Nura\AppData\Local\Temp\nsgE708.exe
C:\Users\Nura\AppData\Local\Temp\nsgE979.exe
C:\Users\Nura\AppData\Local\Temp\nsn366F.exe
C:\Users\Nura\AppData\Local\Temp\nsqFFF6.exe
C:\Users\Nura\AppData\Local\Temp\ose00000.exe
C:\Users\Nura\AppData\Local\Temp\Sqlite3.dll
C:\Users\Nura\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Nura\AppData\Local\Temp\_isD883.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-02 10:51

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-12-2013 2
Ran by Nura at 2013-12-07 22:27:51
Running from C:\Users\Nura\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Bitdefender Antivirus (Enabled - Up to date) {9B5F5313-CAF9-DD97-C460-E778420237B4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {203EB2F7-ECC3-D219-FED0-DC0A39857D09}
FW: Bitdefender Firewall (Enabled) {A364D236-8096-DCCF-EF3F-4E4DBCD170CF}

==================== Installed Programs ======================

Adobe Flash Player 11 ActiveX (x32 Version: 11.0.1.152)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Atheros Bluetooth Suite (64) (Version: 7.4.0.135)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 2.0.14.15)
Atheros Outlook Addin 2010 (HKCU Version: 1.0.0.0)
Atheros WLAN Client Installation Program (x32 Version: 9.0)
Bitdefender Total Security (Version: 17.15.0.682)
Conexant HD Audio (Version: 8.54.34.0)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.11)
Dropbox (HKCU Version: 2.4.6)
Energy Management (x32 Version: 7.0.4.1)
Google Chrome (x32 Version: 31.0.1650.57)
Google Update Helper (x32 Version: 1.3.22.3)
HDPlayer (x32 Version: 2.1 Build 26473)
HDvid Codec V6.0 (x32 Version: 1.31.153.0)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 8.0.3.1427)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2778)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)
Intel® Trusted Connect Service Client (Version: 1.23.605.1)
JDownloader 0.9 (x32 Version: 0.9)
Lenovo EasyCamera (x32 Version: 13.11.1206.1)
Lenovo OneKey Recovery (Version: 7.0.0.3712)
Lenovo OneKey Recovery (x32 Version: 7.0.0.3712)
Lenovo pointing device (Version: 10.4.2.8)
LockKey (x32 Version: 1.38.1.2)
Microsoft .NET Framework 4.5 (Version: 4.5.50710)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50710)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017)
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017)
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61187)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61186)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (Version: 9.0.30729.7523)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (x32 Version: 9.0.30729.7523)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60810 (Version: 11.0.60810)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60810 (Version: 11.0.60810)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60810 (x32 Version: 11.0.60810)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60810 (x32 Version: 11.0.60810)
Microsoft Visual F# 2.0 Runtime (x32 Version: 10.0.40219)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (Version: 2.0.50728)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Nero 2014 (x32 Version: 15.0.02200)
Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0)
Nero Blu-ray Player (x32 Version: 12.0.20031)
Nero Blu-ray Player Help (CHM) (x32 Version: 15.0.00015)
Nero Burning Core (x32 Version: 15.0.19000)
Nero Burning ROM (x32 Version: 15.0.19000)
Nero Burning ROM Help (CHM) (x32 Version: 15.0.00018)
Nero ControlCenter (x32 Version: 11.0.16700)
Nero ControlCenter Help (CHM) (x32 Version: 15.0.00015)
Nero Core Components (x32 Version: 11.0.22500)
Nero Disc Menus Basic (x32 Version: 12.0.11500)
Nero Effects Basic (x32 Version: 15.0.10011)
Nero Express Help (CHM) (x32 Version: 15.0.00018)
Nero Info (x32 Version: 15.1.0023)
Nero Kwik Themes Basic (x32 Version: 12.0.11500)
Nero Launcher (x32 Version: 15.0.8000)
Nero MediaHome Help (CHM) (x32 Version: 15.0.00018)
Nero PiP Effects Basic (x32 Version: 15.0.10008)
Nero Recode Help (CHM) (x32 Version: 15.0.00018)
Nero RescueAgent Help (CHM) (x32 Version: 15.0.00015)
Nero SharedVideoCodecs (x32 Version: 1.0.15003)
Nero Update (x32 Version: 11.0.13300.42.0)
Nero Video Help (CHM) (x32 Version: 15.0.00015)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017)
Prerequisite installer (x32 Version: 15.0.0005)
Realtek USB 2.0 Reader Driver (x32 Version: 6.1.7601.39016)
SES Driver (Version: 1.0.0)
SpeedCommander 14 (x64) (Version: 14.30.6900)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition
Update for Microsoft InfoPath 2013 (KB2752078) 64-Bit Edition
Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition
Update for Microsoft Lync 2013 (KB2825630) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition
Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760257) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition
Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition
Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817309) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817311) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817314) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817626) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817640) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition
Update for Microsoft Office 2013 (KB2837643) 64-Bit Edition
Update for Microsoft Office 2013 (KB2837649) 64-Bit Edition
Update for Microsoft OneNote 2013 (KB2837642) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2726947) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2817625) 64-Bit Edition
Update for Microsoft Project 2013 (KB2767859) 64-Bit Edition
Update for Microsoft Publisher 2013 (KB2752097) 64-Bit Edition
Update for Microsoft SkyDrive Pro (KB2837652) 64-Bit Edition
Update for Microsoft Visio 2013 (KB2752018) 64-Bit Edition
Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition
Update for Microsoft Word 2013 (KB2817631) 64-Bit Edition
Update for Microsoft Word 2013 (KB2837630) 64-Bit Edition
Updater (x32 Version: 2.6.49)
VirtualCloneDrive (x32)
VLC media player 2.0.7 (Version: 2.0.7)
VLC media player 2.1.0 (x32 Version: 2.1.0)
Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM  (03/06/2009 1.0.0008.0) (Version: 03/06/2009 1.0.0008.0)
Windows-Treiberpaket - Lenovo (ACPIVPC) System  (12/15/2011 7.1.0.1) (Version: 12/15/2011 7.1.0.1)
WinRAR 5.00 (64-Bit) (Version: 5.00.0)

==================== Restore Points  =========================

25-11-2013 09:05:14 Geplanter Prüfpunkt
01-12-2013 23:09:23 Windows Update
04-12-2013 17:38:08 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:14:05 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:29:53 Installed EPSON TWAIN 5
04-12-2013 18:49:07 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:49:41 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:50:04 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:50:23 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:50:40 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
04-12-2013 18:50:56 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte
05-12-2013 13:33:15 Windows XP Mode wird installiert
05-12-2013 13:34:10 Windows Update
05-12-2013 15:33:23 Installed OpenOffice 4.0.1
06-12-2013 16:35:45 Removed OpenOffice 4.0.1
06-12-2013 16:37:07 Windows XP Mode wird entfernt

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {3463D856-DE5E-46A6-B499-E546E0DD8FB4} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {4A989396-A739-41C8-A076-2C7589DA921E} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2013-09-25] ()
Task: {7B23E692-FC1F-4F72-8880-FA1E5E2608C3} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2013-08-20] (Nero AG)
Task: {7B74FF61-0323-4EAA-A6B2-C1FAF6A708E7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {917F30CF-CB18-4D1E-A712-64C7D8A42D83} - System32\Tasks\HDvid Codec V6.0-updater => C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-updater.exe [2013-11-24] (installdaddy)
Task: {94FE0D26-4CBF-4846-AA4D-1CC32114BD66} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-25] (Google Inc.)
Task: {AEFB8857-FC54-44AD-8AA3-A4FC3FE3120C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-25] (Google Inc.)
Task: {D93AF027-AF39-4856-9327-E09B738E63A9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {F82B6CB2-102B-49F1-8DC9-CC31F6FC1CDA} - System32\Tasks\HDvid Codec V6.0-chromeinstaller => C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-chromeinstaller.exe [2013-11-24] (installdaddy)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HDvid Codec V6.0-chromeinstaller.job => C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-chromeinstaller.exe
Task: C:\Windows\Tasks\HDvid Codec V6.0-updater.job => C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-updater.exe

==================== Loaded Modules (whitelisted) =============

2013-09-25 11:24 - 2013-06-19 11:45 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender\txmlutil.dll
2013-09-24 01:14 - 2012-06-07 02:51 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2008-12-20 02:20 - 2013-09-25 10:31 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\HookLib.dll
2012-04-19 15:22 - 2013-09-25 10:31 - 01516592 _____ () C:\Program Files (x86)\Lenovo\Energy Management\EMWpfUI.dll
2012-03-10 15:31 - 2013-09-25 10:31 - 00012336 _____ () C:\Program Files (x86)\Lenovo\Energy Management\de-DE\EMWpfUI.resources.dll
2008-12-20 02:20 - 2013-09-25 10:31 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\kbdhook.dll
2013-11-20 13:38 - 2013-11-20 13:38 - 00088576 _____ () C:\Users\Nura\AppData\Roaming\okitspace\protect\utilsDll.dll
2013-09-25 11:24 - 2013-06-19 11:44 - 00204280 _____ () C:\Program Files\Bitdefender\Bitdefender\antispam32\txmlutil.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\Nura\AppData\Roaming\Dropbox\bin\libcef.dll
2013-09-25 09:56 - 2013-09-25 09:56 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\991a8d378a3e64b31c0f4770ba9ae071\IsdiInterop.ni.dll
2013-09-25 09:56 - 2011-11-29 19:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-09-25 09:58 - 2012-02-22 03:09 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-11-15 21:07 - 2013-11-14 12:28 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\libglesv2.dll
2013-11-15 21:07 - 2013-11-14 12:28 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\libegl.dll
2013-11-15 21:07 - 2013-11-14 12:29 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll
2013-11-15 21:07 - 2013-11-14 12:29 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll
2013-11-15 21:07 - 2013-11-14 12:28 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ffmpegsumo.dll
2013-11-15 21:07 - 2013-11-14 12:29 - 13582800 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Nura\Desktop\FRST64.exe:BDU

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/07/2013 08:26:18 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/07/2013 08:21:05 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/07/2013 07:24:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/07/2013 04:41:22 AM) (Source: Application Error) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm Updater service wurde wegen dieses Fehlers geschlossen.

Programm: Updater service
Datei: 

Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
	- diese sich im Netzwerk befindet, 
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
	- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt. 
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.

Zusätzliche Daten
Fehlerwert: 00000000
Datenträgertyp: 0

Error: (12/07/2013 04:41:22 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: updater.exe, Version: 1.0.0.1, Zeitstempel: 0x528c2e6b
Name des fehlerhaften Moduls: ole32.DLL, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000096
Fehleroffset: 0x00048665
ID des fehlerhaften Prozesses: 0xe44
Startzeit der fehlerhaften Anwendung: 0xupdater.exe0
Pfad der fehlerhaften Anwendung: updater.exe1
Pfad des fehlerhaften Moduls: updater.exe2
Berichtskennung: updater.exe3

Error: (12/06/2013 08:26:52 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/06/2013 05:41:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/06/2013 05:37:24 PM) (Source: MsiInstaller) (User: Nura-PC)
Description: Produkt: Windows XP Mode -- Durch diesen Vorgang werden alle Windows XP Mode zugeordneten Dateien entfernt. Die in den virtuellen Festplattendateien von Windows XP Mode gespeicherten Daten werden ebenfalls gelöscht.

Möchten Sie Windows XP Mode deinstallieren?

Error: (12/06/2013 05:33:24 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/05/2013 09:06:49 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (12/07/2013 10:02:49 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (12/07/2013 07:13:10 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (12/07/2013 11:10:23 AM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (12/07/2013 11:10:15 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ZAtheros Bt&Wlan Coex Agent erreicht.

Error: (12/07/2013 04:41:24 AM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (12/06/2013 10:07:45 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (12/06/2013 05:33:45 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SafeBox erreicht.

Error: (12/06/2013 05:32:20 PM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (12/06/2013 05:32:45 PM) (Source: BugCheck) (User: )
Description: 0x0000009f (0x0000000000000003, 0xfffffa80073e4a10, 0xfffff80000b9c3d8, 0xfffffa8006e60a80)C:\Windows\MEMORY.DMP120613-20904-01

Error: (12/06/2013 05:32:43 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎06.‎12.‎2013 um 11:33:23 unerwartet heruntergefahren.


Microsoft Office Sessions:
=========================
Error: (12/07/2013 08:26:18 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/07/2013 08:21:05 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/07/2013 07:24:31 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/07/2013 04:41:22 AM) (Source: Application Error)(User: )
Description: Updater service000000000

Error: (12/07/2013 04:41:22 AM) (Source: Application Error)(User: )
Description: updater.exe1.0.0.1528c2e6bole32.DLL6.1.7601.175144ce7b96fc000009600048665e4401cef2b9063c89e3C:\ProgramData\Updater\updater.exeC:\Windows\syswow64\ole32.DLL70233db2-5ef1-11e3-bcbc-208984dabdaa

Error: (12/06/2013 08:26:52 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/06/2013 05:41:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/06/2013 05:37:24 PM) (Source: MsiInstaller)(User: Nura-PC)
Description: Produkt: Windows XP Mode -- Durch diesen Vorgang werden alle Windows XP Mode zugeordneten Dateien entfernt. Die in den virtuellen Festplattendateien von Windows XP Mode gespeicherten Daten werden ebenfalls gelöscht.

Möchten Sie Windows XP Mode deinstallieren?(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (12/06/2013 05:33:24 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/05/2013 09:06:49 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 31%
Total physical RAM: 8094.36 MB
Available physical RAM: 5549.09 MB
Total Pagefile: 16186.9 MB
Available Pagefile: 13307.96 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:196.29 GB) (Free:132.2 GB) NTFS
Drive d: (Volume) (Fixed) (Total:268.29 GB) (Free:267.92 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C3FFC3FF)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=196 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=268 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================