|
Plagegeister aller Art und deren Bekämpfung: Mein Freund kann nichts mehr öffnen...Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
13.12.2013, 18:59 | #1 |
| Mein Freund kann nichts mehr öffnen... Also ich habe ein Problem, naja mein Freund hat eins. Wir haben aus fun ein naja "Hack" ausprobiert der hieß pc herunterfahren lassen, damit war gemeint den pc des anderen herunterfahren zu lassen. Bei mir ist nichts passiert, bei meinem Freund jedoch schon. Er kann nichts mher öffnen und wenn er draufklick erscheint dieser editor in dem man das eingetragen hat... Hier nochmal den Link vlt kann mir einer helfen wie man das wieder beseitigen kann Link: hxxp://www.youtube.com/watch?v=OTnhFJ34ezE ich meinte natürlich http |
13.12.2013, 19:52 | #2 |
/// the machine /// TB-Ausbilder | Mein Freund kann nichts mehr öffnen... hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
13.12.2013, 23:11 | #3 |
| Mein Freund kann nichts mehr öffnen... das problem ist ja dass er nichts öffnen kann also nur was sich automatisch öffnet und wie soll er das dann alles durchführen?
__________________ |
14.12.2013, 07:57 | #4 |
/// the machine /// TB-Ausbilder | Mein Freund kann nichts mehr öffnen... dann von aussen. Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8) Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
14.12.2013, 14:21 | #5 |
| Mein Freund kann nichts mehr öffnen... Also er hat es geschafft sich das selbst runterzuladen und hat den Scan durchgeführt jetzt muss er mir nur noch diese beiden Datein senden. Außerdem will ich erwähnen, dass er Musikdartein, sowie Bilder; Videos und Spiele öffnen kann. Nur z.b. Mozilla Firefox nicht, da erscheint so ein fenster, soll ich das mal kopieren und auch hier reinposten oder ist das unwichtig? so hier die FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-12-2013 01 Ran by Julian (administrator) on JULIAN-PC on 14-12-2013 12:07:28 Running from C:\Users\Julian\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (AMD) C:\Windows\System32\atieclxx.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Koyote-Lab Inc.) C:\Program Files (x86)\Music Toolbar\Datamngr\DatamngrCoordinator.exe (Spotify Ltd) C:\Users\Julian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE (Koyote-Lab Inc.) C:\Program Files (x86)\Music Toolbar\Datamngr\DatamngrCoordinator.exe (SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIFDE.EXE (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Koyote-Lab Inc.) C:\Program Files (x86)\Music Toolbar\Datamngr\DatamngrUI.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe () C:\Windows\SysWOW64\PnkBstrA.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe () C:\Windows\SysWOW64\PnkBstrB.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe (Conduit) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe () C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.195\deploy\LoLLauncher.exe () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.62\deploy\LolClient.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () C:\Users\Julian\Downloads\FRST64 (1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7174728 2013-03-29] (Realtek Semiconductor) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Julian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-12-13] (Spotify Ltd) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKCU\...\Run: [EPSON SX210 Series] - C:\Windows\Temp\E_SF372.tmp [126 2013-12-10] () HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x91000000 MountPoints2: {2c2a75ca-17ad-11e3-96b5-806e6f6e6963} - F:\pushinst.exe HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\WLanGUI.exe [2105344 2010-10-22] (AVM Berlin) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG) AppInit_DLLs: C:\Program Files (x86)\Music Toolbar\Datamngr\x64\mgrldr.dll [23600 2013-11-21] () AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll C:\PROGRA~3\Wincert\WIN32C~1.DLL C:\PROGRA~2\MUSICT~1\Datamngr\mgrldr.dll [20016 2013-11-21] () IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe HKLM\...\AppCertDlls: [x86] -> C:\Program Files (x86)\Music Toolbar\Datamngr\apcrtldr.dll [486448 2013-11-21] () <===== ATTENTION HKLM\...\AppCertDlls: [x64] -> C:\Program Files (x86)\Music Toolbar\Datamngr\x64\apcrtldr.dll [658992 2013-11-21] () <===== ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFFE2435FF7D1CC01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.kiebel.de HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://syb.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2459} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=153&systemid=459&v=n10354-192&apn_uid=0121630953114636&apn_dtid=BND103&o=APN10652&apn_ptnrs=AGD&q={searchTerms} SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2459} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=153&systemid=459&v=n10354-192&apn_uid=0121630953114636&apn_dtid=BND103&o=APN10652&apn_ptnrs=AGD&q={searchTerms} SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3314759&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP63232A2A-22D0-4661-BD8E-27E30D9AAA69&q={searchTerms}&SSPV= SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3314759&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP63232A2A-22D0-4661-BD8E-27E30D9AAA69&q={searchTerms}&SSPV= SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2459} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=153&systemid=459&v=n10354-192&apn_uid=0121630953114636&apn_dtid=BND103&o=APN10652&apn_ptnrs=AGD&q={searchTerms} BHO: weDownload Manager Pro - {11111111-1111-1111-1111-110411361128} - C:\Program Files (x86)\weDownload Manager Pro\weDownload Manager Pro-bho64.dll (weDownload) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: weDownload Manager Pro - {11111111-1111-1111-1111-110411361128} - C:\Program Files (x86)\weDownload Manager Pro\weDownload Manager Pro-bho.dll (weDownload) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll No File BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Music Toolbar (Dist. by Koyote-Lab, Inc.) - {e8150ff6-e972-4a0e-80f2-8ac633ec148a} - C:\Program Files (x86)\Music Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx.dll () Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Music Toolbar (Dist. by Koyote-Lab, Inc.) - {e8150ff6-e972-4a0e-80f2-8ac633ec148a} - C:\Program Files (x86)\Music Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx.dll () Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default FF NewTab: hxxp://search.conduit.com/?ctid=CT3314759&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=&Lay=1&UM=2&UP=SP63232A2A-22D0-4661-BD8E-27E30D9AAA69 FF DefaultSearchEngine: Conduit Search FF SelectedSearchEngine: Conduit Search FF Homepage: hxxp://www.google.com FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Julian\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin HKCU: thehappycloud.com/HappyCloudPlugin - C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud) FF SearchPlugin: C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\searchplugins\conduit-search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: weDownload Manager Pro - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\Extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com FF Extension: Adblock Plus - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi Chrome: ======= CHR HomePage: http:\/\/www.google.com CHR RestoreOnStartup: "http:\/\/www.google.com" CHR DefaultSearchURL: http:\/\/search.conduit.com\/Results.aspx?ctid=CT3314759&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP63232A2A-22D0-4661-BD8E-27E30D9AAA69&q={searchTerms}&SSPV= CHR DefaultNewTabURL: CHR Extension: (Music Toolbar) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaajjdggclgejkckppicefnelmoefjp\27.64617_0 CHR Extension: (Google Docs) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Adblock Plus) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6.1_0 CHR Extension: (Google Search) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (AdBlock) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 CHR Extension: (Night Time In New York City) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnimonidkipnhnpgkhgliocfnnpgkhek\1.2_0 CHR Extension: (weDownload Manager Pro) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0 CHR Extension: (Google Wallet) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKLM-x32\...\Chrome\Extension: [aaaajjdggclgejkckppicefnelmoefjp] - C:\Users\Julian\AppData\Local\fuzezipmusictoolbardla\GC\toolbar.crx ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG) R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [1735968 2013-11-25] (Conduit) R2 DatamngrCoordinator; C:\Program Files (x86)\Music Toolbar\Datamngr\DatamngrCoordinator.exe [3425840 2013-11-21] (Koyote-Lab Inc.) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation) S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-11-11] (Overwolf Ltd) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-11-23] () R2 PnkBstrB; C:\Windows\SysWow64\PnkBstrB.exe [290184 2013-12-14] () ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG) S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-06-13] (Etron Technology Inc) S3 FLxHCIh; C:\Windows\system32\drivers\FLxHCIh.sys [77480 2013-02-25] (Fresco Logic) R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH) R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28656 2013-04-22] (Intel Corporation) S3 irstrtdv; C:\Windows\system32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation) S3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46016 2012-07-24] () S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [39704 2012-12-21] (Atheros) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation) R3 MTsensor; C:\Windows\system32\drivers\ASACPI.sys [15416 2009-05-14] () R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation) S3 rusb3hub; C:\Windows\system32\drivers\rusb3hub.sys [114568 2012-08-27] (Renesas Electronics Corporation) S3 rusb3xhc; C:\Windows\system32\drivers\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation) R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2013-11-21] (Razer, Inc.) R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2013-11-21] (Razer, Inc.) S3 xhunter1; \??\C:\Windows\xhunter1.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-13 23:13 - 2013-12-14 12:05 - 00026530 _____ C:\Users\Julian\Downloads\Addition.txt 2013-12-13 23:12 - 2013-12-14 12:07 - 00019710 _____ C:\Users\Julian\Downloads\FRST.txt 2013-12-13 23:11 - 2013-12-13 23:11 - 00000000 ____D C:\FRST 2013-12-13 23:10 - 2013-12-13 23:11 - 01927462 _____ (Farbar) C:\Users\Julian\Desktop\FRST64 (1).exe 2013-12-13 23:10 - 2013-12-13 23:10 - 00000000 ____D C:\Users\Julian\AppData\Local\CrashDumps 2013-12-13 20:56 - 2013-12-13 22:28 - 00001811 _____ C:\Users\Julian\Desktop\Spotify.lnk 2013-12-13 18:44 - 2013-12-13 18:44 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Avira 2013-12-13 18:43 - 2013-12-13 18:43 - 00000000 ____D C:\ProgramData\Avira 2013-12-13 18:43 - 2013-12-13 18:43 - 00000000 ____D C:\Program Files (x86)\Avira 2013-12-13 18:43 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-13 18:43 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-13 18:43 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-13 18:43 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-12-13 18:41 - 2013-12-13 18:42 - 129598176 _____ C:\Users\Julian\Downloads\avira_free_antivirus_de_14.0.2.286.exe 2013-12-13 18:16 - 2013-12-13 18:16 - 00000084 _____ C:\Users\Julian\Downloads\PIMMEL.txt 2013-12-13 15:24 - 2013-12-13 15:24 - 00016597 _____ C:\Users\Julian\Desktop\Unbenannt 1.odt 2013-12-12 14:40 - 2013-12-12 14:40 - 00000000 ____D C:\Users\Julian\AppData\Local\Razer 2013-12-11 21:02 - 2013-12-11 21:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_RzFilter_01009.Wdf 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\Windows\Razer Core 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\ProgramData\Razer 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\Program Files (x86)\Razer 2013-12-11 21:01 - 2013-11-21 05:37 - 00129472 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzDxgk.sys 2013-12-11 21:01 - 2013-11-21 05:37 - 00074432 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzFilter.sys 2013-12-11 20:59 - 2013-12-11 21:00 - 47307072 _____ (Razer Inc.) C:\Users\Julian\Downloads\RazerComms1.81.20.exe 2013-12-11 20:54 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-11 20:54 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-11 20:54 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-11 20:54 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-11 20:53 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-11 20:53 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-11 20:53 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-11 20:53 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-11 20:53 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-11 20:53 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-11 20:53 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-11 20:53 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-11 20:53 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-11 20:53 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-11 20:53 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-11 20:53 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-11 20:53 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-11 20:53 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-11 20:53 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-11 20:53 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-11 20:53 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-11 20:53 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-11 20:53 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-11 20:53 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-11 20:53 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-11 20:53 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-11 20:53 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-11 20:53 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-11 20:53 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-11 20:53 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-11 20:53 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-11 20:53 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-11 20:53 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-11 20:53 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-11 20:53 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-11 19:36 - 2013-12-11 20:52 - 03135866 _____ C:\Users\Julian\Downloads\675999.m.mp4.opdownload 2013-12-11 19:09 - 2013-12-11 19:09 - 00000000 _____ C:\Users\Julian\Desktop\httpsmiles-center-owl.depagesder-energiemix.php.txt 2013-12-11 17:12 - 2013-12-11 17:12 - 00000000 _____ C:\Users\Julian\Desktop\Twh=TerraWattStund.txt 2013-12-11 17:10 - 2013-12-14 12:02 - 00002290 _____ C:\Windows\Tasks\weDownload Manager Pro-firefoxinstaller.job 2013-12-11 17:10 - 2013-12-14 12:02 - 00001382 _____ C:\Windows\Tasks\weDownload Manager Pro-updater.job 2013-12-11 17:10 - 2013-12-14 12:02 - 00001284 _____ C:\Windows\Tasks\weDownload Manager Pro-codedownloader.job 2013-12-11 17:10 - 2013-12-14 12:02 - 00001184 _____ C:\Windows\Tasks\weDownload Manager Pro-enabler.job 2013-12-11 17:10 - 2013-12-11 17:10 - 00004412 _____ C:\Windows\System32\Tasks\weDownload Manager Pro-updater 2013-12-11 17:10 - 2013-12-11 17:10 - 00004314 _____ C:\Windows\System32\Tasks\weDownload Manager Pro-codedownloader 2013-12-11 17:10 - 2013-12-11 17:10 - 00004214 _____ C:\Windows\System32\Tasks\weDownload Manager Pro-enabler 2013-12-11 17:10 - 2013-12-11 17:10 - 00000000 ____D C:\Users\Julian\AppData\Local\SearchProtect 2013-12-11 17:10 - 2013-12-11 17:10 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2013-12-11 17:09 - 2013-12-14 12:02 - 00002014 _____ C:\Windows\Tasks\weDownload Manager Pro-chromeinstaller.job 2013-12-11 17:09 - 2013-12-14 12:02 - 00000378 _____ C:\Windows\Tasks\SmartPCFix Task.job 2013-12-11 17:09 - 2013-12-13 18:51 - 00000000 ____D C:\Program Files (x86)\SmartPCFix 2013-12-11 17:09 - 2013-12-11 17:10 - 09009660 _____ (Microsoft Corporation) C:\Users\Julian\Downloads\downloadmanager_8d590f63-da00-4058-ab93-bf04be3483b6.tmp 2013-12-11 17:09 - 2013-12-11 17:10 - 00000000 ____D C:\Program Files (x86)\weDownload Manager Pro 2013-12-11 17:09 - 2013-12-11 17:09 - 00002806 _____ C:\Windows\System32\Tasks\SmartPCFix Task 2013-12-11 17:09 - 2013-12-11 17:09 - 00000000 ____D C:\Users\Julian\AppData\Roaming\SmartPCFix 2013-12-11 17:08 - 2013-12-11 17:09 - 00606040 _____ C:\Users\Julian\Downloads\microsoft powerpoint 2010 setup (1).exe 2013-12-11 17:08 - 2013-12-11 17:08 - 00606040 _____ C:\Users\Julian\Downloads\microsoft powerpoint 2010 setup.exe 2013-12-11 13:38 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-11 13:38 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-11 13:38 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 13:38 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-11 13:38 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-11 13:38 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-11 13:38 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 13:38 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 13:38 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-11 13:38 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 13:38 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 13:38 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-11 13:38 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-11 13:38 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 13:38 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 13:38 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-11 13:38 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-11 13:38 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 13:38 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-10 21:00 - 2013-12-10 21:00 - 00021472 _____ C:\Users\Julian\Desktop\Nawi 2.odt 2013-12-10 20:47 - 2013-12-10 20:47 - 00000000 ____D C:\Users\Julian\AppData\Local\Adobe 2013-12-10 20:23 - 2013-12-10 20:23 - 00001045 _____ C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FuzeZip.lnk 2013-12-10 20:23 - 2013-12-10 20:23 - 00000000 ____D C:\Users\Julian\AppData\Local\Torch 2013-12-10 20:23 - 2013-12-10 20:23 - 00000000 ____D C:\Users\Julian\AppData\Local\FuzeZip 2013-12-10 20:22 - 2013-12-14 12:02 - 00000000 ____D C:\ProgramData\Datamngr 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\Users\Julian\AppData\Local\fuzezipmusictoolbardla 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\ProgramData\Wincert 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\Program Files (x86)\Music Toolbar 2013-12-10 20:21 - 2013-12-10 20:23 - 00000000 ____D C:\Program Files (x86)\FuzeZip 2013-12-10 20:21 - 2013-12-10 20:21 - 01327776 _____ (Koyote-Lab Inc.) C:\Users\Julian\Downloads\FuzeZipSetup-r153-w-bc.exe 2013-12-10 20:19 - 2013-12-10 20:20 - 00000000 ____D C:\ProgramData\EPSON 2013-12-10 20:19 - 2013-12-10 20:19 - 00000000 ____D C:\Program Files (x86)\epson 2013-12-10 20:19 - 2009-05-01 00:00 - 00128392 _____ (Seiko Epson Corporation) C:\Windows\system32\esdevapp.exe 2013-12-10 20:19 - 2009-05-01 00:00 - 00017408 _____ (SEIKO EPSON CORP.) C:\Windows\system32\esxcdev.dll 2013-12-10 20:19 - 2008-11-17 00:00 - 00459776 _____ (Seiko Epson Corporation) C:\Windows\system32\esxwiaud.dll 2013-12-10 20:19 - 2008-08-08 02:09 - 00108032 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ILMFDE.DLL 2013-12-10 20:19 - 2007-12-07 02:01 - 00081408 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_IBCBFDE.DLL 2013-12-10 20:19 - 2007-04-10 01:06 - 00010752 _____ (SEIKO EPSON CORP.) C:\Windows\system32\E_GCINST.DLL 2013-12-10 20:18 - 2013-12-10 20:18 - 16489472 _____ C:\Users\Julian\Downloads\epson323814eu.exe 2013-12-10 20:18 - 2013-12-10 20:18 - 12872704 _____ C:\Users\Julian\Downloads\epson323810eu.exe 2013-12-10 16:45 - 2013-12-13 23:16 - 00000000 ____D C:\Program Files (x86)\Opera 2013-12-10 16:45 - 2013-12-10 16:45 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Opera Software 2013-12-10 16:45 - 2013-12-10 16:45 - 00000000 ____D C:\Users\Julian\AppData\Local\Opera Software 2013-12-10 16:41 - 2013-12-10 16:44 - 33806104 _____ (Opera Software ASA) C:\Users\Julian\Downloads\Opera_18.0.1284.63_Setup.exe 2013-12-10 16:25 - 2013-12-10 16:25 - 00022843 _____ C:\Users\Julian\Downloads\Unbenannt 1 (2).odt 2013-12-10 16:24 - 2013-12-10 16:24 - 00022843 _____ C:\Users\Julian\Downloads\Unbenannt 1 (1).odt 2013-12-10 16:16 - 2013-12-10 16:28 - 00693973 _____ C:\Users\Julian\Desktop\Nawi-Projekt !.odt 2013-12-07 20:39 - 2013-12-07 20:39 - 00080988 _____ C:\Users\Julian\Downloads\watch_later (1) 2013-12-07 20:38 - 2013-12-07 20:38 - 00080988 _____ C:\Users\Julian\Downloads\watch_later 2013-12-06 12:31 - 2013-12-06 12:33 - 00000000 ____D C:\Users\Julian\Desktop\Gute Filme 2013-12-05 21:05 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-12-05 21:05 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-12-05 19:21 - 2013-12-05 19:21 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Frhed 2013-12-05 19:21 - 2013-12-05 19:21 - 00000000 ____D C:\Program Files (x86)\Frhed 2013-12-05 19:20 - 2013-12-05 19:20 - 00725124 _____ C:\Users\Julian\Downloads\Frhed-1.6.0-Setup.exe 2013-12-05 19:07 - 2013-12-05 19:07 - 00000000 ____D C:\Users\Julian\AppData\Local\Realmware 2013-12-05 19:06 - 2013-12-05 19:06 - 03276413 _____ (Realmware) C:\Users\Julian\Downloads\BF3SE-2.3.exe 2013-12-05 19:06 - 2013-12-05 19:06 - 00000000 ____D C:\Program Files\Realmware 2013-12-04 13:49 - 2013-12-13 20:13 - 00101648 _____ C:\Windows\PFRO.log 2013-12-01 19:59 - 2013-12-01 19:59 - 00670304 _____ (Shark Labs) C:\Users\Julian\Downloads\CFSetup342.exe 2013-12-01 13:13 - 2013-12-01 13:14 - 00000000 ____D C:\Users\Julian\AppData\Local\Windows Live Writer 2013-12-01 13:13 - 2013-12-01 13:13 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Windows Live Writer 2013-11-30 20:00 - 2013-12-14 12:02 - 00007248 _____ C:\Windows\setupact.log 2013-11-30 20:00 - 2013-11-30 20:00 - 00000000 _____ C:\Windows\setuperr.log 2013-11-28 18:06 - 2013-11-28 18:06 - 03821064 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.2_130.exe 2013-11-27 14:52 - 2013-11-27 14:52 - 03820448 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.2_129.exe 2013-11-25 18:52 - 2013-11-25 18:52 - 00000000 ____D C:\Users\Julian\AppData\Roaming\OpenOffice 2013-11-25 18:51 - 2013-11-25 18:51 - 00000000 ___SD C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 2013-11-25 18:51 - 2013-11-25 18:51 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4 2013-11-25 18:44 - 2013-11-25 18:48 - 163606685 _____ C:\Users\Julian\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe 2013-11-25 16:42 - 2013-11-25 16:42 - 00000082 _____ C:\Users\Julian\Documents\cc_20131125_164211.reg 2013-11-25 16:33 - 2013-11-25 16:33 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-25 16:33 - 2013-11-25 16:33 - 00000000 ____D C:\Program Files\CCleaner 2013-11-25 16:32 - 2013-11-25 16:32 - 00618912 _____ C:\Users\Julian\Downloads\CCleaner - CHIP-Downloader.exe 2013-11-24 18:21 - 2013-11-24 18:21 - 00050688 ___SH C:\Users\Julian\Thumbs.db 2013-11-23 00:29 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-11-23 00:26 - 2013-11-23 00:26 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-23 00:26 - 2013-11-23 00:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-23 00:26 - 2013-11-23 00:26 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-23 00:26 - 2013-11-23 00:26 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-23 00:26 - 2013-11-23 00:26 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-23 00:26 - 2013-11-23 00:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-23 00:26 - 2013-11-23 00:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-22 17:37 - 2013-11-22 17:38 - 07600226 _____ C:\Users\Julian\Downloads\ACBF_THEME (1).ZIP 2013-11-22 12:53 - 2013-11-22 12:54 - 07600226 _____ C:\Users\Julian\Downloads\ACBF_THEME.ZIP 2013-11-22 12:49 - 2013-11-22 03:27 - 03123272 _____ C:\Windows\SysWOW64\pbsvc.exe 2013-11-22 03:53 - 2013-12-06 16:43 - 00000000 ____D C:\Users\Julian\Documents\Assassin's Creed IV Black Flag 2013-11-21 16:26 - 2013-11-21 16:26 - 00000231 _____ C:\Users\Julian\Desktop\Assassin's Creed IV Black Flag.url 2013-11-21 15:38 - 2013-11-21 15:38 - 00471112 _____ (1&1 Mail & Media GmbH) C:\Users\Julian\Downloads\GMX_MailCheck_chrome_setup.exe 2013-11-20 19:32 - 2013-11-14 12:57 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-11-20 19:32 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-11-20 15:04 - 2013-12-03 20:53 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TeamViewer 2013-11-19 14:51 - 2013-11-19 14:51 - 00000000 ____D C:\Users\Julian\Documents\FLiNGTrainer 2013-11-19 14:50 - 2013-11-19 14:50 - 00625866 _____ C:\Users\Julian\Downloads\089b86_5190e439181b0.zip 2013-11-19 13:58 - 2013-11-19 13:58 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2013-11-19 13:58 - 2013-11-19 13:58 - 00000000 ____D C:\Program Files (x86)\Overwolf 2013-11-18 15:06 - 2013-11-21 15:22 - 00000000 ____D C:\Users\Julian\AppData\Local\Overwolf 2013-11-17 18:27 - 2013-11-17 18:27 - 00000000 ____D C:\Users\Julian\Downloads\MicroSoftWord2007 2013-11-17 18:12 - 2013-11-17 18:22 - 213583637 _____ C:\Users\Julian\Downloads\MicroSoftWord2007.rar 2013-11-17 12:15 - 2013-11-17 12:15 - 00000000 ____D C:\Program Files (x86)\Clownfish 2013-11-17 12:14 - 2013-11-17 12:14 - 00670408 _____ (Shark Labs) C:\Users\Julian\Downloads\CFSetup340.exe 2013-11-16 11:49 - 2013-12-05 21:06 - 00000000 ____D C:\Users\Julian\AppData\Local\NVIDIA Corporation 2013-11-15 15:42 - 2013-11-15 15:42 - 03820824 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.1_125 (1).exe 2013-11-15 14:46 - 2013-11-15 14:46 - 01952720 _____ C:\Users\Julian\ts3_recording_13_11_15_14_46_19.wav 2013-11-15 13:03 - 2013-11-15 13:03 - 00000000 ____D C:\Riot Games 2013-11-15 13:03 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2013-11-15 13:03 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2013-11-15 13:03 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2013-11-15 12:57 - 2013-11-15 12:58 - 34888568 _____ (Riot Games) C:\Users\Julian\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2013-11-14 16:12 - 2013-11-14 16:12 - 03820824 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.1_125.exe 2013-11-14 14:14 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-14 14:14 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-14 14:14 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-14 14:14 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-14 14:14 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-14 14:14 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-14 14:14 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-14 14:14 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-14 14:14 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-14 14:14 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-14 14:14 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-14 14:14 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-14 14:14 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-14 14:14 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-14 14:14 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-14 14:14 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-14 14:14 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-14 14:14 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-14 14:14 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-14 14:14 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-14 14:14 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-14 14:14 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-14 14:14 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-14 14:14 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-14 14:14 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-14 14:14 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-14 14:14 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-14 14:14 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-14 14:14 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-14 14:14 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys ==================== One Month Modified Files and Folders ======= 2013-12-14 12:07 - 2013-12-13 23:12 - 00019710 _____ C:\Users\Julian\Downloads\FRST.txt 2013-12-14 12:07 - 2013-09-04 11:33 - 00000000 ____D C:\Users\Julian\AppData\Local\PMB Files 2013-12-14 12:07 - 2013-09-04 11:30 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Skype 2013-12-14 12:05 - 2013-12-13 23:13 - 00026530 _____ C:\Users\Julian\Downloads\Addition.txt 2013-12-14 12:02 - 2013-12-11 17:10 - 00002290 _____ C:\Windows\Tasks\weDownload Manager Pro-firefoxinstaller.job 2013-12-14 12:02 - 2013-12-11 17:10 - 00001382 _____ C:\Windows\Tasks\weDownload Manager Pro-updater.job 2013-12-14 12:02 - 2013-12-11 17:10 - 00001284 _____ C:\Windows\Tasks\weDownload Manager Pro-codedownloader.job 2013-12-14 12:02 - 2013-12-11 17:10 - 00001184 _____ C:\Windows\Tasks\weDownload Manager Pro-enabler.job 2013-12-14 12:02 - 2013-12-11 17:09 - 00002014 _____ C:\Windows\Tasks\weDownload Manager Pro-chromeinstaller.job 2013-12-14 12:02 - 2013-12-11 17:09 - 00000378 _____ C:\Windows\Tasks\SmartPCFix Task.job 2013-12-14 12:02 - 2013-12-10 20:22 - 00000000 ____D C:\ProgramData\Datamngr 2013-12-14 12:02 - 2013-11-30 20:00 - 00007248 _____ C:\Windows\setupact.log 2013-12-14 12:02 - 2013-09-04 11:28 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-14 12:02 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-12-14 12:02 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-14 12:01 - 2013-09-02 14:05 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-14 00:25 - 2013-09-04 09:53 - 01255304 _____ C:\Windows\WindowsUpdate.log 2013-12-14 00:16 - 2013-05-21 09:53 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-14 00:09 - 2013-10-27 13:54 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr 2013-12-14 00:09 - 2013-10-27 13:43 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2013-12-14 00:08 - 2013-10-27 13:43 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2013-12-13 23:51 - 2013-09-04 11:28 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-13 23:21 - 2013-10-04 13:16 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2124055722-383917122-1893886807-1001UA.job 2013-12-13 23:20 - 2013-10-26 15:03 - 00000000 ____D C:\Program Files (x86)\Origin 2013-12-13 23:16 - 2013-12-10 16:45 - 00000000 ____D C:\Program Files (x86)\Opera 2013-12-13 23:12 - 2009-07-14 05:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-13 23:12 - 2009-07-14 05:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-13 23:11 - 2013-12-13 23:11 - 00000000 ____D C:\FRST 2013-12-13 23:11 - 2013-12-13 23:10 - 01927462 _____ (Farbar) C:\Users\Julian\Desktop\FRST64 (1).exe 2013-12-13 23:10 - 2013-12-13 23:10 - 00000000 ____D C:\Users\Julian\AppData\Local\CrashDumps 2013-12-13 22:58 - 2013-11-07 10:18 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Spotify 2013-12-13 22:28 - 2013-12-13 20:56 - 00001811 _____ C:\Users\Julian\Desktop\Spotify.lnk 2013-12-13 22:28 - 2013-11-07 10:18 - 00001797 _____ C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2013-12-13 22:24 - 2013-09-04 11:33 - 00000000 ____D C:\ProgramData\PMB Files 2013-12-13 20:13 - 2013-12-04 13:49 - 00101648 _____ C:\Windows\PFRO.log 2013-12-13 18:51 - 2013-12-11 17:09 - 00000000 ____D C:\Program Files (x86)\SmartPCFix 2013-12-13 18:44 - 2013-12-13 18:44 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Avira 2013-12-13 18:43 - 2013-12-13 18:43 - 00000000 ____D C:\ProgramData\Avira 2013-12-13 18:43 - 2013-12-13 18:43 - 00000000 ____D C:\Program Files (x86)\Avira 2013-12-13 18:42 - 2013-12-13 18:41 - 129598176 _____ C:\Users\Julian\Downloads\avira_free_antivirus_de_14.0.2.286.exe 2013-12-13 18:16 - 2013-12-13 18:16 - 00000084 _____ C:\Users\Julian\Downloads\PIMMEL.txt 2013-12-13 15:24 - 2013-12-13 15:24 - 00016597 _____ C:\Users\Julian\Desktop\Unbenannt 1.odt 2013-12-13 14:56 - 2010-11-21 07:50 - 00696620 _____ C:\Windows\system32\perfh007.dat 2013-12-13 14:56 - 2010-11-21 07:50 - 00147916 _____ C:\Windows\system32\perfc007.dat 2013-12-13 14:56 - 2009-07-14 06:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-12 17:09 - 2013-11-07 10:18 - 00000000 ____D C:\Users\Julian\AppData\Local\Spotify 2013-12-12 14:40 - 2013-12-12 14:40 - 00000000 ____D C:\Users\Julian\AppData\Local\Razer 2013-12-12 14:40 - 2009-07-14 05:45 - 00304696 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-11 21:02 - 2013-12-11 21:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_RzFilter_01009.Wdf 2013-12-11 21:02 - 2013-09-04 09:54 - 00068040 _____ C:\Users\Julian\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\Windows\Razer Core 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\ProgramData\Razer 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\Program Files (x86)\Razer 2013-12-11 21:00 - 2013-12-11 20:59 - 47307072 _____ (Razer Inc.) C:\Users\Julian\Downloads\RazerComms1.81.20.exe 2013-12-11 20:58 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-11 20:52 - 2013-12-11 19:36 - 03135866 _____ C:\Users\Julian\Downloads\675999.m.mp4.opdownload 2013-12-11 20:16 - 2013-05-21 09:53 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-11 20:16 - 2012-04-16 09:33 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-11 20:16 - 2012-01-13 14:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-11 19:09 - 2013-12-11 19:09 - 00000000 _____ C:\Users\Julian\Desktop\httpsmiles-center-owl.depagesder-energiemix.php.txt 2013-12-11 17:12 - 2013-12-11 17:12 - 00000000 _____ C:\Users\Julian\Desktop\Twh=TerraWattStund.txt 2013-12-11 17:10 - 2013-12-11 17:10 - 00004412 _____ C:\Windows\System32\Tasks\weDownload Manager Pro-updater 2013-12-11 17:10 - 2013-12-11 17:10 - 00004314 _____ C:\Windows\System32\Tasks\weDownload Manager Pro-codedownloader 2013-12-11 17:10 - 2013-12-11 17:10 - 00004214 _____ C:\Windows\System32\Tasks\weDownload Manager Pro-enabler 2013-12-11 17:10 - 2013-12-11 17:10 - 00000000 ____D C:\Users\Julian\AppData\Local\SearchProtect 2013-12-11 17:10 - 2013-12-11 17:10 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2013-12-11 17:10 - 2013-12-11 17:09 - 09009660 _____ (Microsoft Corporation) C:\Users\Julian\Downloads\downloadmanager_8d590f63-da00-4058-ab93-bf04be3483b6.tmp 2013-12-11 17:10 - 2013-12-11 17:09 - 00000000 ____D C:\Program Files (x86)\weDownload Manager Pro 2013-12-11 17:09 - 2013-12-11 17:09 - 00002806 _____ C:\Windows\System32\Tasks\SmartPCFix Task 2013-12-11 17:09 - 2013-12-11 17:09 - 00000000 ____D C:\Users\Julian\AppData\Roaming\SmartPCFix 2013-12-11 17:09 - 2013-12-11 17:08 - 00606040 _____ C:\Users\Julian\Downloads\microsoft powerpoint 2010 setup (1).exe 2013-12-11 17:08 - 2013-12-11 17:08 - 00606040 _____ C:\Users\Julian\Downloads\microsoft powerpoint 2010 setup.exe 2013-12-11 14:21 - 2013-10-04 13:16 - 00000910 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2124055722-383917122-1893886807-1001Core.job 2013-12-10 21:00 - 2013-12-10 21:00 - 00021472 _____ C:\Users\Julian\Desktop\Nawi 2.odt 2013-12-10 20:47 - 2013-12-10 20:47 - 00000000 ____D C:\Users\Julian\AppData\Local\Adobe 2013-12-10 20:47 - 2013-09-04 09:53 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Adobe 2013-12-10 20:23 - 2013-12-10 20:23 - 00001045 _____ C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FuzeZip.lnk 2013-12-10 20:23 - 2013-12-10 20:23 - 00000000 ____D C:\Users\Julian\AppData\Local\Torch 2013-12-10 20:23 - 2013-12-10 20:23 - 00000000 ____D C:\Users\Julian\AppData\Local\FuzeZip 2013-12-10 20:23 - 2013-12-10 20:21 - 00000000 ____D C:\Program Files (x86)\FuzeZip 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\Users\Julian\AppData\Local\fuzezipmusictoolbardla 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\ProgramData\Wincert 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\Program Files (x86)\Music Toolbar 2013-12-10 20:21 - 2013-12-10 20:21 - 01327776 _____ (Koyote-Lab Inc.) C:\Users\Julian\Downloads\FuzeZipSetup-r153-w-bc.exe 2013-12-10 20:20 - 2013-12-10 20:19 - 00000000 ____D C:\ProgramData\EPSON 2013-12-10 20:20 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-12-10 20:19 - 2013-12-10 20:19 - 00000000 ____D C:\Program Files (x86)\epson 2013-12-10 20:18 - 2013-12-10 20:18 - 16489472 _____ C:\Users\Julian\Downloads\epson323814eu.exe 2013-12-10 20:18 - 2013-12-10 20:18 - 12872704 _____ C:\Users\Julian\Downloads\epson323810eu.exe 2013-12-10 16:45 - 2013-12-10 16:45 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Opera Software 2013-12-10 16:45 - 2013-12-10 16:45 - 00000000 ____D C:\Users\Julian\AppData\Local\Opera Software 2013-12-10 16:44 - 2013-12-10 16:41 - 33806104 _____ (Opera Software ASA) C:\Users\Julian\Downloads\Opera_18.0.1284.63_Setup.exe 2013-12-10 16:28 - 2013-12-10 16:16 - 00693973 _____ C:\Users\Julian\Desktop\Nawi-Projekt !.odt 2013-12-10 16:26 - 2013-09-22 11:40 - 00000000 ____D C:\Users\Julian\Desktop\Informatik 2013-12-10 16:25 - 2013-12-10 16:25 - 00022843 _____ C:\Users\Julian\Downloads\Unbenannt 1 (2).odt 2013-12-10 16:24 - 2013-12-10 16:24 - 00022843 _____ C:\Users\Julian\Downloads\Unbenannt 1 (1).odt 2013-12-10 15:51 - 2013-10-16 06:41 - 00009734 _____ C:\Windows\system32\lvcoinst.log 2013-12-09 21:19 - 2013-10-16 06:41 - 00000000 ____D C:\Program Files\Common Files\logishrd 2013-12-09 11:37 - 2013-12-13 18:43 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-09 11:37 - 2013-12-13 18:43 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-09 11:37 - 2013-12-13 18:43 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-09 11:37 - 2013-12-13 18:43 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-12-07 22:25 - 2013-09-04 12:17 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TS3Client 2013-12-07 20:39 - 2013-12-07 20:39 - 00080988 _____ C:\Users\Julian\Downloads\watch_later (1) 2013-12-07 20:38 - 2013-12-07 20:38 - 00080988 _____ C:\Users\Julian\Downloads\watch_later 2013-12-06 16:43 - 2013-11-22 03:53 - 00000000 ____D C:\Users\Julian\Documents\Assassin's Creed IV Black Flag 2013-12-06 12:33 - 2013-12-06 12:31 - 00000000 ____D C:\Users\Julian\Desktop\Gute Filme 2013-12-05 21:07 - 2013-09-04 09:56 - 00000000 ____D C:\Users\Julian\AppData\Local\NVIDIA 2013-12-05 21:06 - 2013-11-16 11:49 - 00000000 ____D C:\Users\Julian\AppData\Local\NVIDIA Corporation 2013-12-05 21:06 - 2013-09-02 14:01 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-12-05 21:06 - 2013-09-02 14:01 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-05 21:06 - 2013-09-02 13:59 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-12-05 19:21 - 2013-12-05 19:21 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Frhed 2013-12-05 19:21 - 2013-12-05 19:21 - 00000000 ____D C:\Program Files (x86)\Frhed 2013-12-05 19:20 - 2013-12-05 19:20 - 00725124 _____ C:\Users\Julian\Downloads\Frhed-1.6.0-Setup.exe 2013-12-05 19:07 - 2013-12-05 19:07 - 00000000 ____D C:\Users\Julian\AppData\Local\Realmware 2013-12-05 19:06 - 2013-12-05 19:06 - 03276413 _____ (Realmware) C:\Users\Julian\Downloads\BF3SE-2.3.exe 2013-12-05 19:06 - 2013-12-05 19:06 - 00000000 ____D C:\Program Files\Realmware 2013-12-03 20:53 - 2013-11-20 15:04 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TeamViewer 2013-12-03 20:51 - 2013-09-28 17:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2013-12-01 19:59 - 2013-12-01 19:59 - 00670304 _____ (Shark Labs) C:\Users\Julian\Downloads\CFSetup342.exe 2013-12-01 13:14 - 2013-12-01 13:13 - 00000000 ____D C:\Users\Julian\AppData\Local\Windows Live Writer 2013-12-01 13:13 - 2013-12-01 13:13 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Windows Live Writer 2013-12-01 13:13 - 2013-09-04 09:53 - 00000000 ____D C:\Users\Julian\AppData\Local\Windows Live 2013-11-30 20:00 - 2013-11-30 20:00 - 00000000 _____ C:\Windows\setuperr.log 2013-11-30 19:05 - 2013-09-04 11:41 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin 2013-11-30 18:37 - 2013-10-14 21:08 - 00000000 ___RD C:\Users\Julian\Desktop\Games 2013-11-30 18:35 - 2013-11-13 14:12 - 00000000 ____D C:\Users\Julian\Desktop\Windows 7 2013-11-30 11:13 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-29 17:56 - 2013-10-29 17:54 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-11-29 17:56 - 2013-10-29 17:54 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-11-28 18:06 - 2013-11-28 18:06 - 03821064 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.2_130.exe 2013-11-28 18:06 - 2013-10-27 13:50 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins 2013-11-28 15:46 - 2013-09-04 11:28 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-11-28 15:46 - 2013-09-04 11:28 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-11-27 14:52 - 2013-11-27 14:52 - 03820448 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.2_129.exe 2013-11-26 12:54 - 2013-12-11 20:53 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-26 11:19 - 2013-12-11 20:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-26 11:18 - 2013-12-11 20:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-26 11:11 - 2013-12-11 20:53 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-26 10:48 - 2013-12-11 20:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-26 10:46 - 2013-12-11 20:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-26 10:41 - 2013-12-11 20:53 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-26 10:29 - 2013-12-11 20:53 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-26 10:27 - 2013-12-11 20:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-26 10:23 - 2013-12-11 20:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-26 10:21 - 2013-12-11 20:53 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-26 10:18 - 2013-12-11 20:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-26 10:18 - 2013-12-11 20:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-26 10:16 - 2013-12-11 20:53 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-26 09:57 - 2013-12-11 20:53 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-26 09:38 - 2013-12-11 20:53 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-26 09:38 - 2013-12-11 20:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-26 09:35 - 2013-12-11 20:53 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-26 09:32 - 2013-12-11 20:53 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-26 09:28 - 2013-12-11 20:53 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-26 09:16 - 2013-12-11 20:53 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-26 09:02 - 2013-12-11 20:53 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-26 08:48 - 2013-12-11 20:53 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-26 08:32 - 2013-12-11 20:53 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-26 08:26 - 2013-12-11 20:53 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-26 08:07 - 2013-12-11 20:53 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-26 07:40 - 2013-12-11 20:53 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-26 07:34 - 2013-12-11 20:53 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-26 07:34 - 2013-12-11 20:53 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-26 07:33 - 2013-12-11 20:53 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-26 07:27 - 2013-12-11 20:53 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-25 19:17 - 2013-09-04 11:30 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-25 19:17 - 2013-09-04 11:30 - 00000000 ____D C:\ProgramData\Skype 2013-11-25 18:52 - 2013-11-25 18:52 - 00000000 ____D C:\Users\Julian\AppData\Roaming\OpenOffice 2013-11-25 18:51 - 2013-11-25 18:51 - 00000000 ___SD C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 2013-11-25 18:51 - 2013-11-25 18:51 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4 2013-11-25 18:48 - 2013-11-25 18:44 - 163606685 _____ C:\Users\Julian\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe 2013-11-25 16:42 - 2013-11-25 16:42 - 00000082 _____ C:\Users\Julian\Documents\cc_20131125_164211.reg 2013-11-25 16:41 - 2013-11-11 17:47 - 00000000 ____D C:\Windows\pss 2013-11-25 16:36 - 2013-09-05 08:58 - 00000000 ____D C:\Program Files (x86)\Steam 2013-11-25 16:35 - 2012-01-13 13:32 - 00000000 ____D C:\Windows\Panther 2013-11-25 16:33 - 2013-11-25 16:33 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-25 16:33 - 2013-11-25 16:33 - 00000000 ____D C:\Program Files\CCleaner 2013-11-25 16:32 - 2013-11-25 16:32 - 00618912 _____ C:\Users\Julian\Downloads\CCleaner - CHIP-Downloader.exe 2013-11-24 18:21 - 2013-11-24 18:21 - 00050688 ___SH C:\Users\Julian\Thumbs.db 2013-11-24 18:21 - 2013-09-04 09:53 - 00000000 ____D C:\Users\Julian 2013-11-24 14:20 - 2013-11-07 13:57 - 00000000 ____D C:\Users\Julian\AppData\Roaming\HandBrake 2013-11-23 19:26 - 2013-12-11 13:38 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-11-23 19:26 - 2013-10-27 13:54 - 00000000 ____D C:\Users\Julian\AppData\Local\PunkBuster 2013-11-23 19:26 - 2013-10-27 13:43 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe 2013-11-23 18:47 - 2013-12-11 13:38 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-11-23 11:32 - 2013-09-04 09:53 - 00001421 _____ C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-23 11:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-23 00:26 - 2013-11-23 00:26 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-23 00:26 - 2013-11-23 00:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-23 00:26 - 2013-11-23 00:26 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-23 00:26 - 2013-11-23 00:26 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-23 00:26 - 2013-11-23 00:26 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-23 00:26 - 2013-11-23 00:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-23 00:26 - 2013-11-23 00:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-22 17:38 - 2013-11-22 17:37 - 07600226 _____ C:\Users\Julian\Downloads\ACBF_THEME (1).ZIP 2013-11-22 13:41 - 2013-11-10 13:48 - 00000000 ____D C:\Users\Julian\AppData\Local\Ubisoft Game Launcher 2013-11-22 12:54 - 2013-11-22 12:53 - 07600226 _____ C:\Users\Julian\Downloads\ACBF_THEME.ZIP 2013-11-22 03:27 - 2013-11-22 12:49 - 03123272 _____ C:\Windows\SysWOW64\pbsvc.exe 2013-11-21 16:26 - 2013-11-21 16:26 - 00000231 _____ C:\Users\Julian\Desktop\Assassin's Creed IV Black Flag.url 2013-11-21 15:38 - 2013-11-21 15:38 - 00471112 _____ (1&1 Mail & Media GmbH) C:\Users\Julian\Downloads\GMX_MailCheck_chrome_setup.exe 2013-11-21 15:22 - 2013-11-18 15:06 - 00000000 ____D C:\Users\Julian\AppData\Local\Overwolf 2013-11-21 05:37 - 2013-12-11 21:01 - 00129472 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzDxgk.sys 2013-11-21 05:37 - 2013-12-11 21:01 - 00074432 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzFilter.sys 2013-11-19 20:14 - 2012-01-13 15:23 - 00001912 _____ C:\Windows\epplauncher.mif 2013-11-19 20:13 - 2012-01-13 15:23 - 00000000 ____D C:\Program Files\Microsoft Security Client 2013-11-19 20:13 - 2012-01-13 15:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client 2013-11-19 14:51 - 2013-11-19 14:51 - 00000000 ____D C:\Users\Julian\Documents\FLiNGTrainer 2013-11-19 14:50 - 2013-11-19 14:50 - 00625866 _____ C:\Users\Julian\Downloads\089b86_5190e439181b0.zip 2013-11-19 13:58 - 2013-11-19 13:58 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2013-11-19 13:58 - 2013-11-19 13:58 - 00000000 ____D C:\Program Files (x86)\Overwolf 2013-11-19 11:21 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-11-17 18:27 - 2013-11-17 18:27 - 00000000 ____D C:\Users\Julian\Downloads\MicroSoftWord2007 2013-11-17 18:22 - 2013-11-17 18:12 - 213583637 _____ C:\Users\Julian\Downloads\MicroSoftWord2007.rar 2013-11-17 12:15 - 2013-11-17 12:15 - 00000000 ____D C:\Program Files (x86)\Clownfish 2013-11-17 12:14 - 2013-11-17 12:14 - 00670408 _____ (Shark Labs) C:\Users\Julian\Downloads\CFSetup340.exe 2013-11-15 15:42 - 2013-11-15 15:42 - 03820824 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.1_125 (1).exe 2013-11-15 14:46 - 2013-11-15 14:46 - 01952720 _____ C:\Users\Julian\ts3_recording_13_11_15_14_46_19.wav 2013-11-15 13:03 - 2013-11-15 13:03 - 00000000 ____D C:\Riot Games 2013-11-15 12:58 - 2013-11-15 12:57 - 34888568 _____ (Riot Games) C:\Users\Julian\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2013-11-14 16:12 - 2013-11-14 16:12 - 03820824 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.1_125.exe 2013-11-14 12:57 - 2013-11-20 19:32 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-11-14 12:56 - 2013-11-20 19:32 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-11-14 12:56 - 2013-09-02 14:02 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2013-11-14 12:56 - 2013-09-02 14:02 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2013-11-14 12:56 - 2013-09-02 14:00 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-11-14 12:56 - 2013-09-02 14:00 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-11-14 12:56 - 2013-09-02 14:00 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-11-14 12:56 - 2013-09-02 14:00 - 00023754 _____ C:\Windows\system32\nvinfo.pb 2013-11-14 12:56 - 2013-09-02 13:59 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-11-14 12:56 - 2013-09-02 13:59 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll Files to move or delete: ==================== C:\Program Files (x86)\Music Toolbar\Datamngr\apcrtldr.dll C:\Program Files (x86)\Music Toolbar\Datamngr\x64\apcrtldr.dll Some content of TEMP: ==================== C:\Users\Julian\AppData\Local\Temp\1385723452_wedownload_manager_pro.exe C:\Users\Julian\AppData\Local\Temp\avgnt.exe C:\Users\Julian\AppData\Local\Temp\nsc1697.exe C:\Users\Julian\AppData\Local\Temp\nsc1956.exe C:\Users\Julian\AppData\Local\Temp\nscF38A.exe C:\Users\Julian\AppData\Local\Temp\nsh1BE6.exe C:\Users\Julian\AppData\Local\Temp\nshF88B.exe C:\Users\Julian\AppData\Local\Temp\nswF629.exe C:\Users\Julian\AppData\Local\Temp\sp_downloader.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-11 13:51 ==================== End Of Log ============================ --- --- --- |
14.12.2013, 14:30 | #6 | |
| Mein Freund kann nichts mehr öffnen... Also er hat es geschafft sich das selbst runterzuladen und hat den Scan durchgeführt jetzt muss er mir nur noch diese beiden Datein senden. Außerdem will ich erwähnen, dass er Musikdartein, sowie Bilder; Videos und Spiele öffnen kann. Nur z.b. Mozilla Firefox nicht, da erscheint so ein fenster, soll ich das mal kopieren und auch hier reinposten oder ist das unwichtig? so hier die FRST FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-12-2013 01 Ran by Julian (administrator) on JULIAN-PC on 14-12-2013 12:07:28 Running from C:\Users\Julian\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (AMD) C:\Windows\System32\atieclxx.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Koyote-Lab Inc.) C:\Program Files (x86)\Music Toolbar\Datamngr\DatamngrCoordinator.exe (Spotify Ltd) C:\Users\Julian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE (Koyote-Lab Inc.) C:\Program Files (x86)\Music Toolbar\Datamngr\DatamngrCoordinator.exe (SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIFDE.EXE (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Koyote-Lab Inc.) C:\Program Files (x86)\Music Toolbar\Datamngr\DatamngrUI.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe () C:\Windows\SysWOW64\PnkBstrA.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe () C:\Windows\SysWOW64\PnkBstrB.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe (Conduit) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe () C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.195\deploy\LoLLauncher.exe () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.62\deploy\LolClient.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () C:\Users\Julian\Downloads\FRST64 (1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7174728 2013-03-29] (Realtek Semiconductor) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Julian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-12-13] (Spotify Ltd) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKCU\...\Run: [EPSON SX210 Series] - C:\Windows\Temp\E_SF372.tmp [126 2013-12-10] () HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x91000000 MountPoints2: {2c2a75ca-17ad-11e3-96b5-806e6f6e6963} - F:\pushinst.exe HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\WLanGUI.exe [2105344 2010-10-22] (AVM Berlin) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG) AppInit_DLLs: C:\Program Files (x86)\Music Toolbar\Datamngr\x64\mgrldr.dll [23600 2013-11-21] () AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll C:\PROGRA~3\Wincert\WIN32C~1.DLL C:\PROGRA~2\MUSICT~1\Datamngr\mgrldr.dll [20016 2013-11-21] () IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe HKLM\...\AppCertDlls: [x86] -> C:\Program Files (x86)\Music Toolbar\Datamngr\apcrtldr.dll [486448 2013-11-21] () <===== ATTENTION HKLM\...\AppCertDlls: [x64] -> C:\Program Files (x86)\Music Toolbar\Datamngr\x64\apcrtldr.dll [658992 2013-11-21] () <===== ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFFE2435FF7D1CC01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.kiebel.de HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://syb.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2459} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=153&systemid=459&v=n10354-192&apn_uid=0121630953114636&apn_dtid=BND103&o=APN10652&apn_ptnrs=AGD&q={searchTerms} SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2459} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=153&systemid=459&v=n10354-192&apn_uid=0121630953114636&apn_dtid=BND103&o=APN10652&apn_ptnrs=AGD&q={searchTerms} SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3314759&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP63232A2A-22D0-4661-BD8E-27E30D9AAA69&q={searchTerms}&SSPV= SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3314759&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP63232A2A-22D0-4661-BD8E-27E30D9AAA69&q={searchTerms}&SSPV= SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2459} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=153&systemid=459&v=n10354-192&apn_uid=0121630953114636&apn_dtid=BND103&o=APN10652&apn_ptnrs=AGD&q={searchTerms} BHO: weDownload Manager Pro - {11111111-1111-1111-1111-110411361128} - C:\Program Files (x86)\weDownload Manager Pro\weDownload Manager Pro-bho64.dll (weDownload) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: weDownload Manager Pro - {11111111-1111-1111-1111-110411361128} - C:\Program Files (x86)\weDownload Manager Pro\weDownload Manager Pro-bho.dll (weDownload) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll No File BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Music Toolbar (Dist. by Koyote-Lab, Inc.) - {e8150ff6-e972-4a0e-80f2-8ac633ec148a} - C:\Program Files (x86)\Music Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx.dll () Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Music Toolbar (Dist. by Koyote-Lab, Inc.) - {e8150ff6-e972-4a0e-80f2-8ac633ec148a} - C:\Program Files (x86)\Music Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx.dll () Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default FF NewTab: hxxp://search.conduit.com/?ctid=CT3314759&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=&Lay=1&UM=2&UP=SP63232A2A-22D0-4661-BD8E-27E30D9AAA69 FF DefaultSearchEngine: Conduit Search FF SelectedSearchEngine: Conduit Search FF Homepage: hxxp://www.google.com FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Julian\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin HKCU: thehappycloud.com/HappyCloudPlugin - C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud) FF SearchPlugin: C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\searchplugins\conduit-search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: weDownload Manager Pro - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\Extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com FF Extension: Adblock Plus - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi Chrome: ======= CHR HomePage: http:\/\/www.google.com CHR RestoreOnStartup: "http:\/\/www.google.com" CHR DefaultSearchURL: http:\/\/search.conduit.com\/Results.aspx?ctid=CT3314759&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP63232A2A-22D0-4661-BD8E-27E30D9AAA69&q={searchTerms}&SSPV= CHR DefaultNewTabURL: CHR Extension: (Music Toolbar) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaajjdggclgejkckppicefnelmoefjp\27.64617_0 CHR Extension: (Google Docs) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Adblock Plus) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6.1_0 CHR Extension: (Google Search) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (AdBlock) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 CHR Extension: (Night Time In New York City) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnimonidkipnhnpgkhgliocfnnpgkhek\1.2_0 CHR Extension: (weDownload Manager Pro) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0 CHR Extension: (Google Wallet) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKLM-x32\...\Chrome\Extension: [aaaajjdggclgejkckppicefnelmoefjp] - C:\Users\Julian\AppData\Local\fuzezipmusictoolbardla\GC\toolbar.crx ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG) R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [1735968 2013-11-25] (Conduit) R2 DatamngrCoordinator; C:\Program Files (x86)\Music Toolbar\Datamngr\DatamngrCoordinator.exe [3425840 2013-11-21] (Koyote-Lab Inc.) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation) S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-11-11] (Overwolf Ltd) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-11-23] () R2 PnkBstrB; C:\Windows\SysWow64\PnkBstrB.exe [290184 2013-12-14] () ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG) S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-06-13] (Etron Technology Inc) S3 FLxHCIh; C:\Windows\system32\drivers\FLxHCIh.sys [77480 2013-02-25] (Fresco Logic) R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH) R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28656 2013-04-22] (Intel Corporation) S3 irstrtdv; C:\Windows\system32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation) S3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46016 2012-07-24] () S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [39704 2012-12-21] (Atheros) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation) R3 MTsensor; C:\Windows\system32\drivers\ASACPI.sys [15416 2009-05-14] () R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation) S3 rusb3hub; C:\Windows\system32\drivers\rusb3hub.sys [114568 2012-08-27] (Renesas Electronics Corporation) S3 rusb3xhc; C:\Windows\system32\drivers\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation) R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2013-11-21] (Razer, Inc.) R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2013-11-21] (Razer, Inc.) S3 xhunter1; \??\C:\Windows\xhunter1.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-13 23:13 - 2013-12-14 12:05 - 00026530 _____ C:\Users\Julian\Downloads\Addition.txt 2013-12-13 23:12 - 2013-12-14 12:07 - 00019710 _____ C:\Users\Julian\Downloads\FRST.txt 2013-12-13 23:11 - 2013-12-13 23:11 - 00000000 ____D C:\FRST 2013-12-13 23:10 - 2013-12-13 23:11 - 01927462 _____ (Farbar) C:\Users\Julian\Desktop\FRST64 (1).exe 2013-12-13 23:10 - 2013-12-13 23:10 - 00000000 ____D C:\Users\Julian\AppData\Local\CrashDumps 2013-12-13 20:56 - 2013-12-13 22:28 - 00001811 _____ C:\Users\Julian\Desktop\Spotify.lnk 2013-12-13 18:44 - 2013-12-13 18:44 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Avira 2013-12-13 18:43 - 2013-12-13 18:43 - 00000000 ____D C:\ProgramData\Avira 2013-12-13 18:43 - 2013-12-13 18:43 - 00000000 ____D C:\Program Files (x86)\Avira 2013-12-13 18:43 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-13 18:43 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-13 18:43 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-13 18:43 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-12-13 18:41 - 2013-12-13 18:42 - 129598176 _____ C:\Users\Julian\Downloads\avira_free_antivirus_de_14.0.2.286.exe 2013-12-13 18:16 - 2013-12-13 18:16 - 00000084 _____ C:\Users\Julian\Downloads\PIMMEL.txt 2013-12-13 15:24 - 2013-12-13 15:24 - 00016597 _____ C:\Users\Julian\Desktop\Unbenannt 1.odt 2013-12-12 14:40 - 2013-12-12 14:40 - 00000000 ____D C:\Users\Julian\AppData\Local\Razer 2013-12-11 21:02 - 2013-12-11 21:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_RzFilter_01009.Wdf 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\Windows\Razer Core 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\ProgramData\Razer 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\Program Files (x86)\Razer 2013-12-11 21:01 - 2013-11-21 05:37 - 00129472 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzDxgk.sys 2013-12-11 21:01 - 2013-11-21 05:37 - 00074432 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzFilter.sys 2013-12-11 20:59 - 2013-12-11 21:00 - 47307072 _____ (Razer Inc.) C:\Users\Julian\Downloads\RazerComms1.81.20.exe 2013-12-11 20:54 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-11 20:54 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-11 20:54 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-11 20:54 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-11 20:53 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-11 20:53 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-11 20:53 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-11 20:53 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-11 20:53 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-11 20:53 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-11 20:53 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-11 20:53 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-11 20:53 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-11 20:53 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-11 20:53 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-11 20:53 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-11 20:53 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-11 20:53 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-11 20:53 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-11 20:53 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-11 20:53 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-11 20:53 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-11 20:53 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-11 20:53 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-11 20:53 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-11 20:53 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-11 20:53 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-11 20:53 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-11 20:53 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-11 20:53 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-11 20:53 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-11 20:53 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-11 20:53 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-11 20:53 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-11 20:53 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-11 19:36 - 2013-12-11 20:52 - 03135866 _____ C:\Users\Julian\Downloads\675999.m.mp4.opdownload 2013-12-11 19:09 - 2013-12-11 19:09 - 00000000 _____ C:\Users\Julian\Desktop\httpsmiles-center-owl.depagesder-energiemix.php.txt 2013-12-11 17:12 - 2013-12-11 17:12 - 00000000 _____ C:\Users\Julian\Desktop\Twh=TerraWattStund.txt 2013-12-11 17:10 - 2013-12-14 12:02 - 00002290 _____ C:\Windows\Tasks\weDownload Manager Pro-firefoxinstaller.job 2013-12-11 17:10 - 2013-12-14 12:02 - 00001382 _____ C:\Windows\Tasks\weDownload Manager Pro-updater.job 2013-12-11 17:10 - 2013-12-14 12:02 - 00001284 _____ C:\Windows\Tasks\weDownload Manager Pro-codedownloader.job 2013-12-11 17:10 - 2013-12-14 12:02 - 00001184 _____ C:\Windows\Tasks\weDownload Manager Pro-enabler.job 2013-12-11 17:10 - 2013-12-11 17:10 - 00004412 _____ C:\Windows\System32\Tasks\weDownload Manager Pro-updater 2013-12-11 17:10 - 2013-12-11 17:10 - 00004314 _____ C:\Windows\System32\Tasks\weDownload Manager Pro-codedownloader 2013-12-11 17:10 - 2013-12-11 17:10 - 00004214 _____ C:\Windows\System32\Tasks\weDownload Manager Pro-enabler 2013-12-11 17:10 - 2013-12-11 17:10 - 00000000 ____D C:\Users\Julian\AppData\Local\SearchProtect 2013-12-11 17:10 - 2013-12-11 17:10 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2013-12-11 17:09 - 2013-12-14 12:02 - 00002014 _____ C:\Windows\Tasks\weDownload Manager Pro-chromeinstaller.job 2013-12-11 17:09 - 2013-12-14 12:02 - 00000378 _____ C:\Windows\Tasks\SmartPCFix Task.job 2013-12-11 17:09 - 2013-12-13 18:51 - 00000000 ____D C:\Program Files (x86)\SmartPCFix 2013-12-11 17:09 - 2013-12-11 17:10 - 09009660 _____ (Microsoft Corporation) C:\Users\Julian\Downloads\downloadmanager_8d590f63-da00-4058-ab93-bf04be3483b6.tmp 2013-12-11 17:09 - 2013-12-11 17:10 - 00000000 ____D C:\Program Files (x86)\weDownload Manager Pro 2013-12-11 17:09 - 2013-12-11 17:09 - 00002806 _____ C:\Windows\System32\Tasks\SmartPCFix Task 2013-12-11 17:09 - 2013-12-11 17:09 - 00000000 ____D C:\Users\Julian\AppData\Roaming\SmartPCFix 2013-12-11 17:08 - 2013-12-11 17:09 - 00606040 _____ C:\Users\Julian\Downloads\microsoft powerpoint 2010 setup (1).exe 2013-12-11 17:08 - 2013-12-11 17:08 - 00606040 _____ C:\Users\Julian\Downloads\microsoft powerpoint 2010 setup.exe 2013-12-11 13:38 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-11 13:38 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-11 13:38 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 13:38 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-11 13:38 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-11 13:38 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-11 13:38 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 13:38 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 13:38 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-11 13:38 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 13:38 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 13:38 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-11 13:38 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-11 13:38 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 13:38 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 13:38 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-11 13:38 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-11 13:38 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 13:38 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-10 21:00 - 2013-12-10 21:00 - 00021472 _____ C:\Users\Julian\Desktop\Nawi 2.odt 2013-12-10 20:47 - 2013-12-10 20:47 - 00000000 ____D C:\Users\Julian\AppData\Local\Adobe 2013-12-10 20:23 - 2013-12-10 20:23 - 00001045 _____ C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FuzeZip.lnk 2013-12-10 20:23 - 2013-12-10 20:23 - 00000000 ____D C:\Users\Julian\AppData\Local\Torch 2013-12-10 20:23 - 2013-12-10 20:23 - 00000000 ____D C:\Users\Julian\AppData\Local\FuzeZip 2013-12-10 20:22 - 2013-12-14 12:02 - 00000000 ____D C:\ProgramData\Datamngr 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\Users\Julian\AppData\Local\fuzezipmusictoolbardla 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\ProgramData\Wincert 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\Program Files (x86)\Music Toolbar 2013-12-10 20:21 - 2013-12-10 20:23 - 00000000 ____D C:\Program Files (x86)\FuzeZip 2013-12-10 20:21 - 2013-12-10 20:21 - 01327776 _____ (Koyote-Lab Inc.) C:\Users\Julian\Downloads\FuzeZipSetup-r153-w-bc.exe 2013-12-10 20:19 - 2013-12-10 20:20 - 00000000 ____D C:\ProgramData\EPSON 2013-12-10 20:19 - 2013-12-10 20:19 - 00000000 ____D C:\Program Files (x86)\epson 2013-12-10 20:19 - 2009-05-01 00:00 - 00128392 _____ (Seiko Epson Corporation) C:\Windows\system32\esdevapp.exe 2013-12-10 20:19 - 2009-05-01 00:00 - 00017408 _____ (SEIKO EPSON CORP.) C:\Windows\system32\esxcdev.dll 2013-12-10 20:19 - 2008-11-17 00:00 - 00459776 _____ (Seiko Epson Corporation) C:\Windows\system32\esxwiaud.dll 2013-12-10 20:19 - 2008-08-08 02:09 - 00108032 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ILMFDE.DLL 2013-12-10 20:19 - 2007-12-07 02:01 - 00081408 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_IBCBFDE.DLL 2013-12-10 20:19 - 2007-04-10 01:06 - 00010752 _____ (SEIKO EPSON CORP.) C:\Windows\system32\E_GCINST.DLL 2013-12-10 20:18 - 2013-12-10 20:18 - 16489472 _____ C:\Users\Julian\Downloads\epson323814eu.exe 2013-12-10 20:18 - 2013-12-10 20:18 - 12872704 _____ C:\Users\Julian\Downloads\epson323810eu.exe 2013-12-10 16:45 - 2013-12-13 23:16 - 00000000 ____D C:\Program Files (x86)\Opera 2013-12-10 16:45 - 2013-12-10 16:45 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Opera Software 2013-12-10 16:45 - 2013-12-10 16:45 - 00000000 ____D C:\Users\Julian\AppData\Local\Opera Software 2013-12-10 16:41 - 2013-12-10 16:44 - 33806104 _____ (Opera Software ASA) C:\Users\Julian\Downloads\Opera_18.0.1284.63_Setup.exe 2013-12-10 16:25 - 2013-12-10 16:25 - 00022843 _____ C:\Users\Julian\Downloads\Unbenannt 1 (2).odt 2013-12-10 16:24 - 2013-12-10 16:24 - 00022843 _____ C:\Users\Julian\Downloads\Unbenannt 1 (1).odt 2013-12-10 16:16 - 2013-12-10 16:28 - 00693973 _____ C:\Users\Julian\Desktop\Nawi-Projekt !.odt 2013-12-07 20:39 - 2013-12-07 20:39 - 00080988 _____ C:\Users\Julian\Downloads\watch_later (1) 2013-12-07 20:38 - 2013-12-07 20:38 - 00080988 _____ C:\Users\Julian\Downloads\watch_later 2013-12-06 12:31 - 2013-12-06 12:33 - 00000000 ____D C:\Users\Julian\Desktop\Gute Filme 2013-12-05 21:05 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-12-05 21:05 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-12-05 19:21 - 2013-12-05 19:21 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Frhed 2013-12-05 19:21 - 2013-12-05 19:21 - 00000000 ____D C:\Program Files (x86)\Frhed 2013-12-05 19:20 - 2013-12-05 19:20 - 00725124 _____ C:\Users\Julian\Downloads\Frhed-1.6.0-Setup.exe 2013-12-05 19:07 - 2013-12-05 19:07 - 00000000 ____D C:\Users\Julian\AppData\Local\Realmware 2013-12-05 19:06 - 2013-12-05 19:06 - 03276413 _____ (Realmware) C:\Users\Julian\Downloads\BF3SE-2.3.exe 2013-12-05 19:06 - 2013-12-05 19:06 - 00000000 ____D C:\Program Files\Realmware 2013-12-04 13:49 - 2013-12-13 20:13 - 00101648 _____ C:\Windows\PFRO.log 2013-12-01 19:59 - 2013-12-01 19:59 - 00670304 _____ (Shark Labs) C:\Users\Julian\Downloads\CFSetup342.exe 2013-12-01 13:13 - 2013-12-01 13:14 - 00000000 ____D C:\Users\Julian\AppData\Local\Windows Live Writer 2013-12-01 13:13 - 2013-12-01 13:13 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Windows Live Writer 2013-11-30 20:00 - 2013-12-14 12:02 - 00007248 _____ C:\Windows\setupact.log 2013-11-30 20:00 - 2013-11-30 20:00 - 00000000 _____ C:\Windows\setuperr.log 2013-11-28 18:06 - 2013-11-28 18:06 - 03821064 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.2_130.exe 2013-11-27 14:52 - 2013-11-27 14:52 - 03820448 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.2_129.exe 2013-11-25 18:52 - 2013-11-25 18:52 - 00000000 ____D C:\Users\Julian\AppData\Roaming\OpenOffice 2013-11-25 18:51 - 2013-11-25 18:51 - 00000000 ___SD C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 2013-11-25 18:51 - 2013-11-25 18:51 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4 2013-11-25 18:44 - 2013-11-25 18:48 - 163606685 _____ C:\Users\Julian\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe 2013-11-25 16:42 - 2013-11-25 16:42 - 00000082 _____ C:\Users\Julian\Documents\cc_20131125_164211.reg 2013-11-25 16:33 - 2013-11-25 16:33 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-25 16:33 - 2013-11-25 16:33 - 00000000 ____D C:\Program Files\CCleaner 2013-11-25 16:32 - 2013-11-25 16:32 - 00618912 _____ C:\Users\Julian\Downloads\CCleaner - CHIP-Downloader.exe 2013-11-24 18:21 - 2013-11-24 18:21 - 00050688 ___SH C:\Users\Julian\Thumbs.db 2013-11-23 00:29 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-11-23 00:26 - 2013-11-23 00:26 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-23 00:26 - 2013-11-23 00:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-23 00:26 - 2013-11-23 00:26 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-23 00:26 - 2013-11-23 00:26 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-23 00:26 - 2013-11-23 00:26 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-23 00:26 - 2013-11-23 00:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-23 00:26 - 2013-11-23 00:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-22 17:37 - 2013-11-22 17:38 - 07600226 _____ C:\Users\Julian\Downloads\ACBF_THEME (1).ZIP 2013-11-22 12:53 - 2013-11-22 12:54 - 07600226 _____ C:\Users\Julian\Downloads\ACBF_THEME.ZIP 2013-11-22 12:49 - 2013-11-22 03:27 - 03123272 _____ C:\Windows\SysWOW64\pbsvc.exe 2013-11-22 03:53 - 2013-12-06 16:43 - 00000000 ____D C:\Users\Julian\Documents\Assassin's Creed IV Black Flag 2013-11-21 16:26 - 2013-11-21 16:26 - 00000231 _____ C:\Users\Julian\Desktop\Assassin's Creed IV Black Flag.url 2013-11-21 15:38 - 2013-11-21 15:38 - 00471112 _____ (1&1 Mail & Media GmbH) C:\Users\Julian\Downloads\GMX_MailCheck_chrome_setup.exe 2013-11-20 19:32 - 2013-11-14 12:57 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-11-20 19:32 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-11-20 19:32 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-11-20 15:04 - 2013-12-03 20:53 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TeamViewer 2013-11-19 14:51 - 2013-11-19 14:51 - 00000000 ____D C:\Users\Julian\Documents\FLiNGTrainer 2013-11-19 14:50 - 2013-11-19 14:50 - 00625866 _____ C:\Users\Julian\Downloads\089b86_5190e439181b0.zip 2013-11-19 13:58 - 2013-11-19 13:58 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2013-11-19 13:58 - 2013-11-19 13:58 - 00000000 ____D C:\Program Files (x86)\Overwolf 2013-11-18 15:06 - 2013-11-21 15:22 - 00000000 ____D C:\Users\Julian\AppData\Local\Overwolf 2013-11-17 18:27 - 2013-11-17 18:27 - 00000000 ____D C:\Users\Julian\Downloads\MicroSoftWord2007 2013-11-17 18:12 - 2013-11-17 18:22 - 213583637 _____ C:\Users\Julian\Downloads\MicroSoftWord2007.rar 2013-11-17 12:15 - 2013-11-17 12:15 - 00000000 ____D C:\Program Files (x86)\Clownfish 2013-11-17 12:14 - 2013-11-17 12:14 - 00670408 _____ (Shark Labs) C:\Users\Julian\Downloads\CFSetup340.exe 2013-11-16 11:49 - 2013-12-05 21:06 - 00000000 ____D C:\Users\Julian\AppData\Local\NVIDIA Corporation 2013-11-15 15:42 - 2013-11-15 15:42 - 03820824 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.1_125 (1).exe 2013-11-15 14:46 - 2013-11-15 14:46 - 01952720 _____ C:\Users\Julian\ts3_recording_13_11_15_14_46_19.wav 2013-11-15 13:03 - 2013-11-15 13:03 - 00000000 ____D C:\Riot Games 2013-11-15 13:03 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2013-11-15 13:03 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2013-11-15 13:03 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2013-11-15 12:57 - 2013-11-15 12:58 - 34888568 _____ (Riot Games) C:\Users\Julian\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2013-11-14 16:12 - 2013-11-14 16:12 - 03820824 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.1_125.exe 2013-11-14 14:14 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-14 14:14 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-14 14:14 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-14 14:14 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-14 14:14 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-14 14:14 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-14 14:14 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-14 14:14 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-14 14:14 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-14 14:14 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-14 14:14 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-14 14:14 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-14 14:14 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-14 14:14 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-14 14:14 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-14 14:14 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-14 14:14 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-14 14:14 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-14 14:14 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-14 14:14 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-14 14:14 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-14 14:14 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-14 14:14 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-14 14:14 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-14 14:14 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-14 14:14 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-14 14:14 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-14 14:14 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-14 14:14 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-14 14:14 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys ==================== One Month Modified Files and Folders ======= 2013-12-14 12:07 - 2013-12-13 23:12 - 00019710 _____ C:\Users\Julian\Downloads\FRST.txt 2013-12-14 12:07 - 2013-09-04 11:33 - 00000000 ____D C:\Users\Julian\AppData\Local\PMB Files 2013-12-14 12:07 - 2013-09-04 11:30 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Skype 2013-12-14 12:05 - 2013-12-13 23:13 - 00026530 _____ C:\Users\Julian\Downloads\Addition.txt 2013-12-14 12:02 - 2013-12-11 17:10 - 00002290 _____ C:\Windows\Tasks\weDownload Manager Pro-firefoxinstaller.job 2013-12-14 12:02 - 2013-12-11 17:10 - 00001382 _____ C:\Windows\Tasks\weDownload Manager Pro-updater.job 2013-12-14 12:02 - 2013-12-11 17:10 - 00001284 _____ C:\Windows\Tasks\weDownload Manager Pro-codedownloader.job 2013-12-14 12:02 - 2013-12-11 17:10 - 00001184 _____ C:\Windows\Tasks\weDownload Manager Pro-enabler.job 2013-12-14 12:02 - 2013-12-11 17:09 - 00002014 _____ C:\Windows\Tasks\weDownload Manager Pro-chromeinstaller.job 2013-12-14 12:02 - 2013-12-11 17:09 - 00000378 _____ C:\Windows\Tasks\SmartPCFix Task.job 2013-12-14 12:02 - 2013-12-10 20:22 - 00000000 ____D C:\ProgramData\Datamngr 2013-12-14 12:02 - 2013-11-30 20:00 - 00007248 _____ C:\Windows\setupact.log 2013-12-14 12:02 - 2013-09-04 11:28 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-14 12:02 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-12-14 12:02 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-14 12:01 - 2013-09-02 14:05 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-14 00:25 - 2013-09-04 09:53 - 01255304 _____ C:\Windows\WindowsUpdate.log 2013-12-14 00:16 - 2013-05-21 09:53 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-14 00:09 - 2013-10-27 13:54 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr 2013-12-14 00:09 - 2013-10-27 13:43 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2013-12-14 00:08 - 2013-10-27 13:43 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2013-12-13 23:51 - 2013-09-04 11:28 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-13 23:21 - 2013-10-04 13:16 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2124055722-383917122-1893886807-1001UA.job 2013-12-13 23:20 - 2013-10-26 15:03 - 00000000 ____D C:\Program Files (x86)\Origin 2013-12-13 23:16 - 2013-12-10 16:45 - 00000000 ____D C:\Program Files (x86)\Opera 2013-12-13 23:12 - 2009-07-14 05:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-13 23:12 - 2009-07-14 05:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-13 23:11 - 2013-12-13 23:11 - 00000000 ____D C:\FRST 2013-12-13 23:11 - 2013-12-13 23:10 - 01927462 _____ (Farbar) C:\Users\Julian\Desktop\FRST64 (1).exe 2013-12-13 23:10 - 2013-12-13 23:10 - 00000000 ____D C:\Users\Julian\AppData\Local\CrashDumps 2013-12-13 22:58 - 2013-11-07 10:18 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Spotify 2013-12-13 22:28 - 2013-12-13 20:56 - 00001811 _____ C:\Users\Julian\Desktop\Spotify.lnk 2013-12-13 22:28 - 2013-11-07 10:18 - 00001797 _____ C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2013-12-13 22:24 - 2013-09-04 11:33 - 00000000 ____D C:\ProgramData\PMB Files 2013-12-13 20:13 - 2013-12-04 13:49 - 00101648 _____ C:\Windows\PFRO.log 2013-12-13 18:51 - 2013-12-11 17:09 - 00000000 ____D C:\Program Files (x86)\SmartPCFix 2013-12-13 18:44 - 2013-12-13 18:44 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Avira 2013-12-13 18:43 - 2013-12-13 18:43 - 00000000 ____D C:\ProgramData\Avira 2013-12-13 18:43 - 2013-12-13 18:43 - 00000000 ____D C:\Program Files (x86)\Avira 2013-12-13 18:42 - 2013-12-13 18:41 - 129598176 _____ C:\Users\Julian\Downloads\avira_free_antivirus_de_14.0.2.286.exe 2013-12-13 18:16 - 2013-12-13 18:16 - 00000084 _____ C:\Users\Julian\Downloads\PIMMEL.txt 2013-12-13 15:24 - 2013-12-13 15:24 - 00016597 _____ C:\Users\Julian\Desktop\Unbenannt 1.odt 2013-12-13 14:56 - 2010-11-21 07:50 - 00696620 _____ C:\Windows\system32\perfh007.dat 2013-12-13 14:56 - 2010-11-21 07:50 - 00147916 _____ C:\Windows\system32\perfc007.dat 2013-12-13 14:56 - 2009-07-14 06:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-12 17:09 - 2013-11-07 10:18 - 00000000 ____D C:\Users\Julian\AppData\Local\Spotify 2013-12-12 14:40 - 2013-12-12 14:40 - 00000000 ____D C:\Users\Julian\AppData\Local\Razer 2013-12-12 14:40 - 2009-07-14 05:45 - 00304696 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-11 21:02 - 2013-12-11 21:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_RzFilter_01009.Wdf 2013-12-11 21:02 - 2013-09-04 09:54 - 00068040 _____ C:\Users\Julian\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\Windows\Razer Core 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\ProgramData\Razer 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\Program Files (x86)\Razer 2013-12-11 21:00 - 2013-12-11 20:59 - 47307072 _____ (Razer Inc.) C:\Users\Julian\Downloads\RazerComms1.81.20.exe 2013-12-11 20:58 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-11 20:52 - 2013-12-11 19:36 - 03135866 _____ C:\Users\Julian\Downloads\675999.m.mp4.opdownload 2013-12-11 20:16 - 2013-05-21 09:53 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-11 20:16 - 2012-04-16 09:33 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-11 20:16 - 2012-01-13 14:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-11 19:09 - 2013-12-11 19:09 - 00000000 _____ C:\Users\Julian\Desktop\httpsmiles-center-owl.depagesder-energiemix.php.txt 2013-12-11 17:12 - 2013-12-11 17:12 - 00000000 _____ C:\Users\Julian\Desktop\Twh=TerraWattStund.txt 2013-12-11 17:10 - 2013-12-11 17:10 - 00004412 _____ C:\Windows\System32\Tasks\weDownload Manager Pro-updater 2013-12-11 17:10 - 2013-12-11 17:10 - 00004314 _____ C:\Windows\System32\Tasks\weDownload Manager Pro-codedownloader 2013-12-11 17:10 - 2013-12-11 17:10 - 00004214 _____ C:\Windows\System32\Tasks\weDownload Manager Pro-enabler 2013-12-11 17:10 - 2013-12-11 17:10 - 00000000 ____D C:\Users\Julian\AppData\Local\SearchProtect 2013-12-11 17:10 - 2013-12-11 17:10 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2013-12-11 17:10 - 2013-12-11 17:09 - 09009660 _____ (Microsoft Corporation) C:\Users\Julian\Downloads\downloadmanager_8d590f63-da00-4058-ab93-bf04be3483b6.tmp 2013-12-11 17:10 - 2013-12-11 17:09 - 00000000 ____D C:\Program Files (x86)\weDownload Manager Pro 2013-12-11 17:09 - 2013-12-11 17:09 - 00002806 _____ C:\Windows\System32\Tasks\SmartPCFix Task 2013-12-11 17:09 - 2013-12-11 17:09 - 00000000 ____D C:\Users\Julian\AppData\Roaming\SmartPCFix 2013-12-11 17:09 - 2013-12-11 17:08 - 00606040 _____ C:\Users\Julian\Downloads\microsoft powerpoint 2010 setup (1).exe 2013-12-11 17:08 - 2013-12-11 17:08 - 00606040 _____ C:\Users\Julian\Downloads\microsoft powerpoint 2010 setup.exe 2013-12-11 14:21 - 2013-10-04 13:16 - 00000910 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2124055722-383917122-1893886807-1001Core.job 2013-12-10 21:00 - 2013-12-10 21:00 - 00021472 _____ C:\Users\Julian\Desktop\Nawi 2.odt 2013-12-10 20:47 - 2013-12-10 20:47 - 00000000 ____D C:\Users\Julian\AppData\Local\Adobe 2013-12-10 20:47 - 2013-09-04 09:53 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Adobe 2013-12-10 20:23 - 2013-12-10 20:23 - 00001045 _____ C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FuzeZip.lnk 2013-12-10 20:23 - 2013-12-10 20:23 - 00000000 ____D C:\Users\Julian\AppData\Local\Torch 2013-12-10 20:23 - 2013-12-10 20:23 - 00000000 ____D C:\Users\Julian\AppData\Local\FuzeZip 2013-12-10 20:23 - 2013-12-10 20:21 - 00000000 ____D C:\Program Files (x86)\FuzeZip 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\Users\Julian\AppData\Local\fuzezipmusictoolbardla 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\ProgramData\Wincert 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\Program Files (x86)\Music Toolbar 2013-12-10 20:21 - 2013-12-10 20:21 - 01327776 _____ (Koyote-Lab Inc.) C:\Users\Julian\Downloads\FuzeZipSetup-r153-w-bc.exe 2013-12-10 20:20 - 2013-12-10 20:19 - 00000000 ____D C:\ProgramData\EPSON 2013-12-10 20:20 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-12-10 20:19 - 2013-12-10 20:19 - 00000000 ____D C:\Program Files (x86)\epson 2013-12-10 20:18 - 2013-12-10 20:18 - 16489472 _____ C:\Users\Julian\Downloads\epson323814eu.exe 2013-12-10 20:18 - 2013-12-10 20:18 - 12872704 _____ C:\Users\Julian\Downloads\epson323810eu.exe 2013-12-10 16:45 - 2013-12-10 16:45 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Opera Software 2013-12-10 16:45 - 2013-12-10 16:45 - 00000000 ____D C:\Users\Julian\AppData\Local\Opera Software 2013-12-10 16:44 - 2013-12-10 16:41 - 33806104 _____ (Opera Software ASA) C:\Users\Julian\Downloads\Opera_18.0.1284.63_Setup.exe 2013-12-10 16:28 - 2013-12-10 16:16 - 00693973 _____ C:\Users\Julian\Desktop\Nawi-Projekt !.odt 2013-12-10 16:26 - 2013-09-22 11:40 - 00000000 ____D C:\Users\Julian\Desktop\Informatik 2013-12-10 16:25 - 2013-12-10 16:25 - 00022843 _____ C:\Users\Julian\Downloads\Unbenannt 1 (2).odt 2013-12-10 16:24 - 2013-12-10 16:24 - 00022843 _____ C:\Users\Julian\Downloads\Unbenannt 1 (1).odt 2013-12-10 15:51 - 2013-10-16 06:41 - 00009734 _____ C:\Windows\system32\lvcoinst.log 2013-12-09 21:19 - 2013-10-16 06:41 - 00000000 ____D C:\Program Files\Common Files\logishrd 2013-12-09 11:37 - 2013-12-13 18:43 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-09 11:37 - 2013-12-13 18:43 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-09 11:37 - 2013-12-13 18:43 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-09 11:37 - 2013-12-13 18:43 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-12-07 22:25 - 2013-09-04 12:17 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TS3Client 2013-12-07 20:39 - 2013-12-07 20:39 - 00080988 _____ C:\Users\Julian\Downloads\watch_later (1) 2013-12-07 20:38 - 2013-12-07 20:38 - 00080988 _____ C:\Users\Julian\Downloads\watch_later 2013-12-06 16:43 - 2013-11-22 03:53 - 00000000 ____D C:\Users\Julian\Documents\Assassin's Creed IV Black Flag 2013-12-06 12:33 - 2013-12-06 12:31 - 00000000 ____D C:\Users\Julian\Desktop\Gute Filme 2013-12-05 21:07 - 2013-09-04 09:56 - 00000000 ____D C:\Users\Julian\AppData\Local\NVIDIA 2013-12-05 21:06 - 2013-11-16 11:49 - 00000000 ____D C:\Users\Julian\AppData\Local\NVIDIA Corporation 2013-12-05 21:06 - 2013-09-02 14:01 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-12-05 21:06 - 2013-09-02 14:01 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-05 21:06 - 2013-09-02 13:59 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-12-05 19:21 - 2013-12-05 19:21 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Frhed 2013-12-05 19:21 - 2013-12-05 19:21 - 00000000 ____D C:\Program Files (x86)\Frhed 2013-12-05 19:20 - 2013-12-05 19:20 - 00725124 _____ C:\Users\Julian\Downloads\Frhed-1.6.0-Setup.exe 2013-12-05 19:07 - 2013-12-05 19:07 - 00000000 ____D C:\Users\Julian\AppData\Local\Realmware 2013-12-05 19:06 - 2013-12-05 19:06 - 03276413 _____ (Realmware) C:\Users\Julian\Downloads\BF3SE-2.3.exe 2013-12-05 19:06 - 2013-12-05 19:06 - 00000000 ____D C:\Program Files\Realmware 2013-12-03 20:53 - 2013-11-20 15:04 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TeamViewer 2013-12-03 20:51 - 2013-09-28 17:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2013-12-01 19:59 - 2013-12-01 19:59 - 00670304 _____ (Shark Labs) C:\Users\Julian\Downloads\CFSetup342.exe 2013-12-01 13:14 - 2013-12-01 13:13 - 00000000 ____D C:\Users\Julian\AppData\Local\Windows Live Writer 2013-12-01 13:13 - 2013-12-01 13:13 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Windows Live Writer 2013-12-01 13:13 - 2013-09-04 09:53 - 00000000 ____D C:\Users\Julian\AppData\Local\Windows Live 2013-11-30 20:00 - 2013-11-30 20:00 - 00000000 _____ C:\Windows\setuperr.log 2013-11-30 19:05 - 2013-09-04 11:41 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin 2013-11-30 18:37 - 2013-10-14 21:08 - 00000000 ___RD C:\Users\Julian\Desktop\Games 2013-11-30 18:35 - 2013-11-13 14:12 - 00000000 ____D C:\Users\Julian\Desktop\Windows 7 2013-11-30 11:13 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-29 17:56 - 2013-10-29 17:54 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-11-29 17:56 - 2013-10-29 17:54 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-11-28 18:06 - 2013-11-28 18:06 - 03821064 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.2_130.exe 2013-11-28 18:06 - 2013-10-27 13:50 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins 2013-11-28 15:46 - 2013-09-04 11:28 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-11-28 15:46 - 2013-09-04 11:28 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-11-27 14:52 - 2013-11-27 14:52 - 03820448 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.2_129.exe 2013-11-26 12:54 - 2013-12-11 20:53 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-26 11:19 - 2013-12-11 20:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-26 11:18 - 2013-12-11 20:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-26 11:11 - 2013-12-11 20:53 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-26 10:48 - 2013-12-11 20:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-26 10:46 - 2013-12-11 20:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-26 10:41 - 2013-12-11 20:53 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-26 10:29 - 2013-12-11 20:53 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-26 10:27 - 2013-12-11 20:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-26 10:23 - 2013-12-11 20:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-26 10:21 - 2013-12-11 20:53 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-26 10:18 - 2013-12-11 20:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-26 10:18 - 2013-12-11 20:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-26 10:16 - 2013-12-11 20:53 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-26 09:57 - 2013-12-11 20:53 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-26 09:38 - 2013-12-11 20:53 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-26 09:38 - 2013-12-11 20:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-26 09:35 - 2013-12-11 20:53 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-26 09:32 - 2013-12-11 20:53 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-26 09:28 - 2013-12-11 20:53 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-26 09:16 - 2013-12-11 20:53 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-26 09:02 - 2013-12-11 20:53 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-26 08:48 - 2013-12-11 20:53 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-26 08:32 - 2013-12-11 20:53 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-26 08:26 - 2013-12-11 20:53 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-26 08:07 - 2013-12-11 20:53 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-26 07:40 - 2013-12-11 20:53 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-26 07:34 - 2013-12-11 20:53 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-26 07:34 - 2013-12-11 20:53 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-26 07:33 - 2013-12-11 20:53 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-26 07:27 - 2013-12-11 20:53 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-25 19:17 - 2013-09-04 11:30 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-25 19:17 - 2013-09-04 11:30 - 00000000 ____D C:\ProgramData\Skype 2013-11-25 18:52 - 2013-11-25 18:52 - 00000000 ____D C:\Users\Julian\AppData\Roaming\OpenOffice 2013-11-25 18:51 - 2013-11-25 18:51 - 00000000 ___SD C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 2013-11-25 18:51 - 2013-11-25 18:51 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4 2013-11-25 18:48 - 2013-11-25 18:44 - 163606685 _____ C:\Users\Julian\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe 2013-11-25 16:42 - 2013-11-25 16:42 - 00000082 _____ C:\Users\Julian\Documents\cc_20131125_164211.reg 2013-11-25 16:41 - 2013-11-11 17:47 - 00000000 ____D C:\Windows\pss 2013-11-25 16:36 - 2013-09-05 08:58 - 00000000 ____D C:\Program Files (x86)\Steam 2013-11-25 16:35 - 2012-01-13 13:32 - 00000000 ____D C:\Windows\Panther 2013-11-25 16:33 - 2013-11-25 16:33 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-25 16:33 - 2013-11-25 16:33 - 00000000 ____D C:\Program Files\CCleaner 2013-11-25 16:32 - 2013-11-25 16:32 - 00618912 _____ C:\Users\Julian\Downloads\CCleaner - CHIP-Downloader.exe 2013-11-24 18:21 - 2013-11-24 18:21 - 00050688 ___SH C:\Users\Julian\Thumbs.db 2013-11-24 18:21 - 2013-09-04 09:53 - 00000000 ____D C:\Users\Julian 2013-11-24 14:20 - 2013-11-07 13:57 - 00000000 ____D C:\Users\Julian\AppData\Roaming\HandBrake 2013-11-23 19:26 - 2013-12-11 13:38 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-11-23 19:26 - 2013-10-27 13:54 - 00000000 ____D C:\Users\Julian\AppData\Local\PunkBuster 2013-11-23 19:26 - 2013-10-27 13:43 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe 2013-11-23 18:47 - 2013-12-11 13:38 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-11-23 11:32 - 2013-09-04 09:53 - 00001421 _____ C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-23 11:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-23 00:26 - 2013-11-23 00:26 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-23 00:26 - 2013-11-23 00:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-23 00:26 - 2013-11-23 00:26 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-23 00:26 - 2013-11-23 00:26 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-23 00:26 - 2013-11-23 00:26 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-23 00:26 - 2013-11-23 00:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-23 00:26 - 2013-11-23 00:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-23 00:26 - 2013-11-23 00:26 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-23 00:26 - 2013-11-23 00:26 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-22 17:38 - 2013-11-22 17:37 - 07600226 _____ C:\Users\Julian\Downloads\ACBF_THEME (1).ZIP 2013-11-22 13:41 - 2013-11-10 13:48 - 00000000 ____D C:\Users\Julian\AppData\Local\Ubisoft Game Launcher 2013-11-22 12:54 - 2013-11-22 12:53 - 07600226 _____ C:\Users\Julian\Downloads\ACBF_THEME.ZIP 2013-11-22 03:27 - 2013-11-22 12:49 - 03123272 _____ C:\Windows\SysWOW64\pbsvc.exe 2013-11-21 16:26 - 2013-11-21 16:26 - 00000231 _____ C:\Users\Julian\Desktop\Assassin's Creed IV Black Flag.url 2013-11-21 15:38 - 2013-11-21 15:38 - 00471112 _____ (1&1 Mail & Media GmbH) C:\Users\Julian\Downloads\GMX_MailCheck_chrome_setup.exe 2013-11-21 15:22 - 2013-11-18 15:06 - 00000000 ____D C:\Users\Julian\AppData\Local\Overwolf 2013-11-21 05:37 - 2013-12-11 21:01 - 00129472 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzDxgk.sys 2013-11-21 05:37 - 2013-12-11 21:01 - 00074432 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzFilter.sys 2013-11-19 20:14 - 2012-01-13 15:23 - 00001912 _____ C:\Windows\epplauncher.mif 2013-11-19 20:13 - 2012-01-13 15:23 - 00000000 ____D C:\Program Files\Microsoft Security Client 2013-11-19 20:13 - 2012-01-13 15:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client 2013-11-19 14:51 - 2013-11-19 14:51 - 00000000 ____D C:\Users\Julian\Documents\FLiNGTrainer 2013-11-19 14:50 - 2013-11-19 14:50 - 00625866 _____ C:\Users\Julian\Downloads\089b86_5190e439181b0.zip 2013-11-19 13:58 - 2013-11-19 13:58 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2013-11-19 13:58 - 2013-11-19 13:58 - 00000000 ____D C:\Program Files (x86)\Overwolf 2013-11-19 11:21 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-11-17 18:27 - 2013-11-17 18:27 - 00000000 ____D C:\Users\Julian\Downloads\MicroSoftWord2007 2013-11-17 18:22 - 2013-11-17 18:12 - 213583637 _____ C:\Users\Julian\Downloads\MicroSoftWord2007.rar 2013-11-17 12:15 - 2013-11-17 12:15 - 00000000 ____D C:\Program Files (x86)\Clownfish 2013-11-17 12:14 - 2013-11-17 12:14 - 00670408 _____ (Shark Labs) C:\Users\Julian\Downloads\CFSetup340.exe 2013-11-15 15:42 - 2013-11-15 15:42 - 03820824 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.1_125 (1).exe 2013-11-15 14:46 - 2013-11-15 14:46 - 01952720 _____ C:\Users\Julian\ts3_recording_13_11_15_14_46_19.wav 2013-11-15 13:03 - 2013-11-15 13:03 - 00000000 ____D C:\Riot Games 2013-11-15 12:58 - 2013-11-15 12:57 - 34888568 _____ (Riot Games) C:\Users\Julian\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2013-11-14 16:12 - 2013-11-14 16:12 - 03820824 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.1_125.exe 2013-11-14 12:57 - 2013-11-20 19:32 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2013-11-14 12:56 - 2013-11-20 19:32 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00479520 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00357152 _____ C:\Windows\system32\NvIFROpenGL.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2013-11-14 12:56 - 2013-11-20 19:32 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2013-11-14 12:56 - 2013-09-02 14:02 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2013-11-14 12:56 - 2013-09-02 14:02 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2013-11-14 12:56 - 2013-09-02 14:00 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2013-11-14 12:56 - 2013-09-02 14:00 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-11-14 12:56 - 2013-09-02 14:00 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2013-11-14 12:56 - 2013-09-02 14:00 - 00023754 _____ C:\Windows\system32\nvinfo.pb 2013-11-14 12:56 - 2013-09-02 13:59 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2013-11-14 12:56 - 2013-09-02 13:59 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll Files to move or delete: ==================== C:\Program Files (x86)\Music Toolbar\Datamngr\apcrtldr.dll C:\Program Files (x86)\Music Toolbar\Datamngr\x64\apcrtldr.dll Some content of TEMP: ==================== C:\Users\Julian\AppData\Local\Temp\1385723452_wedownload_manager_pro.exe C:\Users\Julian\AppData\Local\Temp\avgnt.exe C:\Users\Julian\AppData\Local\Temp\nsc1697.exe C:\Users\Julian\AppData\Local\Temp\nsc1956.exe C:\Users\Julian\AppData\Local\Temp\nscF38A.exe C:\Users\Julian\AppData\Local\Temp\nsh1BE6.exe C:\Users\Julian\AppData\Local\Temp\nshF88B.exe C:\Users\Julian\AppData\Local\Temp\nswF629.exe C:\Users\Julian\AppData\Local\Temp\sp_downloader.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-11 13:51 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- --- --- ---[/QUOTE] und hier die addition Zitat:
Oh tut mir leid hab ausversehen ein neuen Post gemacht... |
15.12.2013, 07:28 | #7 | |
/// the machine /// TB-Ausbilder | Mein Freund kann nichts mehr öffnen...Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
17.12.2013, 16:17 | #8 |
| Mein Freund kann nichts mehr öffnen... Hat ja alles geklappt außer, dass er keine txt datei erstellt hat... |
18.12.2013, 09:58 | #9 |
/// the machine /// TB-Ausbilder | Mein Freund kann nichts mehr öffnen... Sicher? Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
27.12.2013, 13:26 | #10 | ||
| Mein Freund kann nichts mehr öffnen... So also wir versuchen es mit combofix nochmal und dann machen wir das mit den anderen Programmen. Sry ich war über die Weihnachtszeit nicht am Rechner mbam log Zitat:
Zitat:
|
27.12.2013, 13:28 | #11 | |
| Mein Freund kann nichts mehr öffnen... AdwCleaner AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 26/12/2013 um 20:37:32 # Aktualisiert 23/12/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Julian - JULIAN-PC # Gestartet von : C:\Users\Julian\Downloads\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\wincert Ordner Gelöscht : C:\Program Files (x86)\Music Toolbar Ordner Gelöscht : C:\Program Files (x86)\weDownload Manager Pro Ordner Gelöscht : C:\Users\Julian\AppData\Local\Searchprotect Ordner Gelöscht : C:\Users\Julian\AppData\Local\torch Ordner Gelöscht : C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\Extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com Ordner Gelöscht : C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb Datei Gelöscht : C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\searchplugins\conduit-search.xml ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422362228} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455365528} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466366628} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3614D305-2DBB-4991-9297-750DD60FFC73} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{13a747ac-0f75-4834-889a-033e8f849beb} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2ff0943e-3ec4-4e3a-94c4-b7a2d3650ff6} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c325bb22-92cd-42c3-99e5-6cb47d88377c} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c93b67c2-12bf-469d-9b8c-a20a807e7d99} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d71aadf3-fa71-478f-bd7a-c531dd46acb2} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422362228} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455365528} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466366628} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{13a747ac-0f75-4834-889a-033e8f849beb} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2ff0943e-3ec4-4e3a-94c4-b7a2d3650ff6} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c325bb22-92cd-42c3-99e5-6cb47d88377c} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c93b67c2-12bf-469d-9b8c-a20a807e7d99} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d71aadf3-fa71-478f-bd7a-c531dd46acb2} Schlüssel Gelöscht : HKCU\Software\APN DTX Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKCU\Software\WEDLMNGR Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\weDownload Manager Pro Schlüssel Gelöscht : HKLM\Software\DataMngr Schlüssel Gelöscht : HKLM\Software\SearchProtect Schlüssel Gelöscht : HKLM\Software\weDownload Manager Pro Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\weDownload Manager Pro Daten Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\wincert\win32c~1.dll Daten Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\searchprotect\searchprotect\bin\spvc32loader.dll Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\Wincert\WIN64C~1.DLL Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\MUSICT~1\Datamngr\x64\mgrldr.dll ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Mozilla Firefox v25.0 (de) [ Datei : C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\prefs.js ] Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://search.conduit.com/?ctid=CT3314759&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=&Lay=1&UM=2&UP=SP63232A2A-22D0-4661-BD8E-27E30D9AAA69"); Zeile gelöscht : user_pref("browser.search.defaultenginename", "Conduit Search"); Zeile gelöscht : user_pref("browser.search.selectedEngine", "Conduit Search"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.InstallationThankYouPage", true); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.InstallationTime", 1386876073); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.active", true); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.addressbar", "NA"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.addressbarenhanced", ""); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.asyncdb_dbWasSet", true); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.asyncdb_dbWasSet_FF25_FIX", true); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.asyncinternaldb_dbWasSet", true); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.asyncinternaldb_dbWasSet_FF25_FIX", true); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.backgroundver", 1); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.certdomaininstaller", ""); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.changeprevious", false); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.cookie.InstallationTime.value", "1386876073"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.description", "Enhance your search results with direct download links and information for apps and[...] Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.domain", ""); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.enablesearch", false); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.homepage", ""); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.iframe", false); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%223499CFFAF0FF4320AB9FB81F745BF[...] Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22000529%22%2C%22sub_id%22%3A%22ver[...] Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%223499CFFAF0FF4320AB9F[...] Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.Resources_appVer.value", "47"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.Resources_lastVersion.value", "2"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.Resources_meta.value", "%7B%22extension.css%22%3A%7B%22id%22%3A311159%2C%22ver%22%3A2%2[...] Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.Resources_nextCheck.expiration", "Fri Dec 13 2013 02:21:23 GMT+0100"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.Resources_nextCheck.value", "true"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.Resources_queue.value", "%7B%7D"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.Resources_resource_311159.expiration", "Wed Mar 12 2014 20:21:23 GMT+0100"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.Resources_resource_311159.value", "%22.crossrider-nofity-34345-body-theme-white-black%2[...] Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%223499CFFA[...] Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.lastDailyReport", "1386876082097"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.lastUpdate", "1386876074762"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.manifesturl", ""); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.name", "weDownload Manager Pro"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.newtab", ""); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.opensearch", ""); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/43628/plugins/093/ff/plugins.json"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.pluginsversion", 43); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.publisher", "weDownload"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.searchstatus", 0); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.setnewtab", false); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.thankyou", ""); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.updateinterval", 360); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.43628.ver", 47); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.apps", "43628"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.bic", "142e8417514356514baaacbc8879aad1"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.cid", 43628); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.firstrun", false); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.hadappinstalled", true); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.installationdate", 1386876073); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.modetype", "production"); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.reportInstall", true); Zeile gelöscht : user_pref("extensions.a008abed2b43a46c99a5ba771c87b82da1ad61d532bdc4484a26bb888ecae1906com43628.statsDailyCounter", 1); Zeile gelöscht : user_pref("extensions.crossrider.bic", "142e8417514356514baaacbc8879aad1"); -\\ Google Chrome v31.0.1650.63 [ Datei : C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\preferences ] Gelöscht : icon_url ************************* AdwCleaner[R0].txt - [20119 octets] - [26/12/2013 20:36:45] AdwCleaner[S0].txt - [16173 octets] - [26/12/2013 20:37:32] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [16234 octets] ########## JRT Zitat:
neues FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-12-2013 Ran by Julian (administrator) on JULIAN-PC on 26-12-2013 21:20:09 Running from C:\Users\Julian\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (AMD) C:\Windows\System32\atieclxx.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.EXE (SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (Overwolf) C:\Program Files (x86)\Overwolf\Overwolf.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper.exe (Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper64.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7174728 2013-03-29] (Realtek Semiconductor) HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\WLanGUI.exe [2105344 2010-10-22] (AVM Berlin) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKCU\...\Run: [Desura] - C:\Program Files (x86)\Desura\desura.exe [2529096 2013-12-25] (Desura Pty Ltd) HKCU\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [35768 2013-12-09] (Overwolf) HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x91000000 AppInit_DLLs: [ ] () AppInit_DLLs-x32: [ ] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFFE2435FF7D1CC01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2459} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=153&systemid=459&v=n10354-192&apn_uid=0121630953114636&apn_dtid=BND103&o=APN10652&apn_ptnrs=AGD&q={searchTerms} BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: ArcPluginIEBHO Class - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll No File BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default FF Homepage: hxxp://www.google.com FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Julian\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin HKCU: thehappycloud.com/HappyCloudPlugin - C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Adblock Plus - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi Chrome: ======= CHR Extension: (Music Toolbar) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaajjdggclgejkckppicefnelmoefjp\27.64617_0 CHR Extension: (Google Docs) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Adblock Plus) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6.1_0 CHR Extension: (Google Search) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (AdBlock) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 CHR Extension: (Night Time In New York City) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnimonidkipnhnpgkhgliocfnnpgkhek\1.2_0 CHR Extension: (Google Wallet) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKLM-x32\...\Chrome\Extension: [aaaajjdggclgejkckppicefnelmoefjp] - C:\Users\Julian\AppData\Local\fuzezipmusictoolbardla\GC\toolbar.crx ==================== Services (Whitelisted) ================= R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [96184 2013-12-09] (Overwolf) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-11-23] () S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [x] ==================== Drivers (Whitelisted) ==================== S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin) S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-06-13] (Etron Technology Inc) S3 FLxHCIh; C:\Windows\system32\drivers\FLxHCIh.sys [77480 2013-02-25] (Fresco Logic) R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH) R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28656 2013-04-22] (Intel Corporation) S3 irstrtdv; C:\Windows\system32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation) S3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46016 2012-07-24] () S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [37248 2012-05-22] (Abelssoft GmbH) S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [39704 2012-12-21] (Atheros) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation) R3 MTsensor; C:\Windows\system32\drivers\ASACPI.sys [15416 2009-05-14] () R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) S3 rusb3hub; C:\Windows\system32\drivers\rusb3hub.sys [114568 2012-08-27] (Renesas Electronics Corporation) S3 rusb3xhc; C:\Windows\system32\drivers\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation) R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2013-11-21] (Razer, Inc.) R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2013-11-21] (Razer, Inc.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 xhunter1; \??\C:\Windows\xhunter1.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-26 20:47 - 2013-12-26 20:47 - 00001197 _____ C:\Users\Julian\Desktop\JRT.txt 2013-12-26 20:42 - 2013-12-26 20:42 - 00000000 ____D C:\Windows\ERUNT 2013-12-26 20:41 - 2013-12-26 20:41 - 01034531 _____ (Thisisu) C:\Users\Julian\Downloads\JRT.exe 2013-12-26 20:36 - 2013-12-26 20:37 - 00000000 ____D C:\AdwCleaner 2013-12-26 20:35 - 2013-12-26 20:36 - 01233962 _____ C:\Users\Julian\Downloads\adwcleaner.exe 2013-12-26 18:35 - 2013-12-26 18:35 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-26 18:35 - 2013-12-26 18:35 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Malwarebytes 2013-12-26 18:35 - 2013-12-26 18:35 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-26 18:35 - 2013-12-26 18:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-26 18:35 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-12-26 18:34 - 2013-12-26 18:34 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Julian\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-26 18:31 - 2013-12-26 18:32 - 00000000 ____D C:\32788R22FWJFW 2013-12-26 16:52 - 2013-12-26 16:54 - 00001971 _____ C:\Users\Public\Desktop\Overwolf.lnk 2013-12-26 16:50 - 2013-12-26 16:52 - 00001211 _____ C:\Users\Julian\Desktop\TeamSpeak 3 Client.lnk 2013-12-26 16:47 - 2013-12-26 16:49 - 32520760 _____ (TeamSpeak Systems GmbH) C:\Users\Julian\Downloads\TeamSpeak3-Client-win64-3.0.13.1.exe 2013-12-26 14:45 - 2013-12-26 14:45 - 00000219 _____ C:\Users\Julian\Desktop\Left 4 Dead 2.url 2013-12-25 18:17 - 2013-12-25 18:17 - 01214299 _____ C:\Users\Julian\Downloads\Julian.htm 2013-12-25 18:17 - 2013-12-25 18:17 - 00000000 ____D C:\Users\Julian\Downloads\Julian_files 2013-12-23 10:50 - 2013-12-25 19:12 - 00001859 _____ C:\Users\Public\Desktop\Desura.lnk 2013-12-23 00:13 - 2013-12-23 00:13 - 00000000 ____D C:\Users\Julian\AppData\Local\Desura 2013-12-23 00:03 - 2013-12-23 00:04 - 21452408 _____ C:\Users\Julian\Downloads\AC_Mod_Pack.rar 2013-12-22 23:55 - 2013-12-25 19:13 - 00000000 ____D C:\Program Files (x86)\Desura 2013-12-22 23:55 - 2013-12-22 23:55 - 00000000 ____D C:\ProgramData\Desura 2013-12-22 23:54 - 2013-12-22 23:55 - 01252424 _____ C:\Users\Julian\Downloads\DesuraInstaller.exe 2013-12-22 16:12 - 2013-12-22 23:57 - 00034308 _____ C:\Windows\SysWOW64\bassmod.dll 2013-12-22 16:12 - 2013-12-22 16:12 - 00403463 _____ C:\Users\Julian\Downloads\d2a536_4e9f41d31ec4c.zip 2013-12-22 16:12 - 2013-12-22 16:12 - 00003180 _____ C:\Windows\System32\Tasks\{72480F35-5D47-411B-9910-6C607904743A} 2013-12-22 15:57 - 2013-12-22 15:57 - 00009094 _____ C:\Users\Julian\Downloads\SweetFX_Settings_Assassin's Creed II_AC2 total improvements .txt 2013-12-22 15:51 - 2013-12-22 15:51 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SweetFX Configurator 2013-12-22 15:50 - 2013-12-22 15:50 - 00492398 _____ C:\Users\Julian\Downloads\SweetFX-Configurator_1.3.3.zip 2013-12-22 15:50 - 2013-12-22 15:50 - 00281567 _____ C:\Users\Julian\Downloads\SweetFX-Configurator_standalone_1.3.3.zip 2013-12-21 21:33 - 2013-12-21 21:33 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Ubisoft 2013-12-21 21:33 - 2013-12-21 21:33 - 00000000 ____D C:\ProgramData\Ubisoft 2013-12-20 20:12 - 2013-12-20 20:12 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Meine Der Herr der Ringe™, Aufstieg des Hexenkönigs™-Dateien 2013-12-20 20:07 - 2013-12-20 20:07 - 00003048 _____ C:\Windows\System32\Tasks\{4651D125-218E-4E31-9687-62E6ACBE8661} 2013-12-20 20:04 - 2013-12-20 20:04 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-12-20 20:04 - 2013-12-20 20:04 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Meine Die Schlacht um Mittelerde™ II-Dateien 2013-12-20 20:00 - 2013-12-21 21:28 - 00049017 _____ C:\Windows\DirectX.log 2013-12-20 19:54 - 2013-12-20 20:08 - 00000000 ____D C:\Program Files (x86)\Electronic Arts 2013-12-20 19:52 - 2013-12-20 19:52 - 00003048 _____ C:\Windows\System32\Tasks\{7CA66842-3541-4E5E-9177-D1BF627B43F4} 2013-12-20 17:21 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-12-20 17:21 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-12-19 21:33 - 2013-12-19 21:33 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps 2013-12-18 10:50 - 2013-12-18 10:50 - 00000000 ____D C:\Users\Julian\AppData\Local\Abelssoft 2013-12-18 10:50 - 2013-12-18 10:50 - 00000000 ____D C:\Program Files (x86)\JetDrive 2013-12-18 10:50 - 2013-11-11 11:20 - 00009728 _____ C:\Windows\SysWOW64\WindowsClosingService.exe 2013-12-18 10:50 - 2012-05-22 11:21 - 00037248 _____ (Abelssoft GmbH) C:\Windows\system32\Drivers\jddrv.sys 2013-12-18 10:50 - 2012-05-22 11:21 - 00023040 _____ () C:\Windows\system32\jddac.dll 2013-12-18 10:50 - 2012-05-22 11:21 - 00022016 _____ () C:\Windows\system32\jdnat.dll 2013-12-18 10:50 - 2012-05-22 11:21 - 00008192 _____ () C:\Windows\system32\jdboot.exe 2013-12-18 10:47 - 2013-12-18 10:48 - 30588821 _____ C:\Users\Julian\Downloads\tag18jetdrive.zip 2013-12-16 16:04 - 2013-12-26 20:13 - 00000000 ____D C:\Schule-Bewerbung 2013-12-15 14:00 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2013-12-15 14:00 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2013-12-15 14:00 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-12-15 14:00 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-12-15 14:00 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-12-15 14:00 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2013-12-15 14:00 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2013-12-15 14:00 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2013-12-15 13:59 - 2013-12-15 14:26 - 00000000 ____D C:\ComboFix 2013-12-15 12:50 - 2013-12-15 14:00 - 00000000 ____D C:\Qoobox 2013-12-15 12:50 - 2013-12-15 12:50 - 00000000 ____D C:\Windows\erdnt 2013-12-15 12:49 - 2013-12-26 18:32 - 05158590 ____R (Swearware) C:\Users\Julian\Downloads\ComboFix.exe 2013-12-14 14:23 - 2013-12-14 14:24 - 00026944 _____ C:\Addition.txt 2013-12-14 14:22 - 2013-12-26 21:20 - 00015006 _____ C:\Users\Julian\Desktop\FRST.txt 2013-12-14 14:21 - 2013-12-26 21:20 - 01928716 _____ (Farbar) C:\Users\Julian\Desktop\FRST64.exe 2013-12-14 14:21 - 2013-12-26 21:20 - 00000000 ____D C:\Users\Julian\Desktop\FRST-OlderVersion 2013-12-13 23:13 - 2013-12-14 12:05 - 00026530 _____ C:\Users\Julian\Downloads\Addition.txt 2013-12-13 23:12 - 2013-12-14 12:41 - 00090096 _____ C:\Users\Julian\Downloads\FRST.txt 2013-12-13 23:11 - 2013-12-26 21:20 - 00000000 ____D C:\FRST 2013-12-13 23:10 - 2013-12-23 18:22 - 00000000 ____D C:\Users\Julian\AppData\Local\CrashDumps 2013-12-13 18:41 - 2013-12-13 18:42 - 129598176 _____ C:\Users\Julian\Downloads\avira_free_antivirus_de_14.0.2.286.exe 2013-12-13 18:16 - 2013-12-13 18:16 - 00000084 _____ C:\Users\Julian\Downloads\PIMMEL.txt 2013-12-12 14:40 - 2013-12-12 14:40 - 00000000 ____D C:\Users\Julian\AppData\Local\Razer 2013-12-11 21:02 - 2013-12-11 21:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_RzFilter_01009.Wdf 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\Windows\Razer Core 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\ProgramData\Razer 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\Program Files (x86)\Razer 2013-12-11 21:01 - 2013-11-21 05:37 - 00129472 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzDxgk.sys 2013-12-11 21:01 - 2013-11-21 05:37 - 00074432 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzFilter.sys 2013-12-11 20:59 - 2013-12-11 21:00 - 47307072 _____ (Razer Inc.) C:\Users\Julian\Downloads\RazerComms1.81.20.exe 2013-12-11 20:54 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-11 20:54 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-11 20:54 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-11 20:54 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-11 20:53 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-11 20:53 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-11 20:53 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-11 20:53 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-11 20:53 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-11 20:53 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-11 20:53 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-11 20:53 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-11 20:53 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-11 20:53 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-11 20:53 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-11 20:53 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-11 20:53 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-11 20:53 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-11 20:53 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-11 20:53 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-11 20:53 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-11 20:53 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-11 20:53 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-11 20:53 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-11 20:53 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-11 20:53 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-11 20:53 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-11 20:53 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-11 20:53 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-11 20:53 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-11 20:53 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-11 20:53 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-11 20:53 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-11 20:53 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-11 20:53 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-11 19:36 - 2013-12-11 20:52 - 03135866 _____ C:\Users\Julian\Downloads\675999.m.mp4.opdownload 2013-12-11 17:09 - 2013-12-26 21:04 - 00000378 _____ C:\Windows\Tasks\SmartPCFix Task.job 2013-12-11 17:09 - 2013-12-13 18:51 - 00000000 ____D C:\Program Files (x86)\SmartPCFix 2013-12-11 17:09 - 2013-12-11 17:10 - 09009660 _____ (Microsoft Corporation) C:\Users\Julian\Downloads\downloadmanager_8d590f63-da00-4058-ab93-bf04be3483b6.tmp 2013-12-11 17:09 - 2013-12-11 17:09 - 00002806 _____ C:\Windows\System32\Tasks\SmartPCFix Task 2013-12-11 17:09 - 2013-12-11 17:09 - 00000000 ____D C:\Users\Julian\AppData\Roaming\SmartPCFix 2013-12-11 13:38 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-11 13:38 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-11 13:38 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 13:38 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-11 13:38 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-11 13:38 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-11 13:38 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 13:38 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 13:38 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-11 13:38 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 13:38 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 13:38 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-11 13:38 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-11 13:38 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 13:38 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 13:38 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-11 13:38 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-11 13:38 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 13:38 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-10 21:00 - 2013-12-10 21:00 - 00021472 _____ C:\Users\Julian\Desktop\Nawi 2.odt 2013-12-10 20:47 - 2013-12-10 20:47 - 00000000 ____D C:\Users\Julian\AppData\Local\Adobe 2013-12-10 20:23 - 2013-12-10 20:23 - 00001045 _____ C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FuzeZip.lnk 2013-12-10 20:23 - 2013-12-10 20:23 - 00000000 ____D C:\Users\Julian\AppData\Local\FuzeZip 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\Users\Julian\AppData\Local\fuzezipmusictoolbardla 2013-12-10 20:21 - 2013-12-10 20:23 - 00000000 ____D C:\Program Files (x86)\FuzeZip 2013-12-10 20:21 - 2013-12-10 20:21 - 01327776 _____ (Koyote-Lab Inc.) C:\Users\Julian\Downloads\FuzeZipSetup-r153-w-bc.exe 2013-12-10 20:19 - 2013-12-10 20:20 - 00000000 ____D C:\ProgramData\EPSON 2013-12-10 20:19 - 2013-12-10 20:19 - 00000000 ____D C:\Program Files (x86)\epson 2013-12-10 20:19 - 2009-05-01 00:00 - 00128392 _____ (Seiko Epson Corporation) C:\Windows\system32\esdevapp.exe 2013-12-10 20:19 - 2009-05-01 00:00 - 00017408 _____ (SEIKO EPSON CORP.) C:\Windows\system32\esxcdev.dll 2013-12-10 20:19 - 2008-11-17 00:00 - 00459776 _____ (Seiko Epson Corporation) C:\Windows\system32\esxwiaud.dll 2013-12-10 20:19 - 2008-08-08 02:09 - 00108032 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ILMFDE.DLL 2013-12-10 20:19 - 2007-12-07 02:01 - 00081408 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_IBCBFDE.DLL 2013-12-10 20:19 - 2007-04-10 01:06 - 00010752 _____ (SEIKO EPSON CORP.) C:\Windows\system32\E_GCINST.DLL 2013-12-10 20:18 - 2013-12-10 20:18 - 16489472 _____ C:\Users\Julian\Downloads\epson323814eu.exe 2013-12-10 20:18 - 2013-12-10 20:18 - 12872704 _____ C:\Users\Julian\Downloads\epson323810eu.exe 2013-12-10 16:45 - 2013-12-16 16:35 - 00000000 ____D C:\Program Files (x86)\Opera 2013-12-10 16:45 - 2013-12-10 16:45 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Opera Software 2013-12-10 16:45 - 2013-12-10 16:45 - 00000000 ____D C:\Users\Julian\AppData\Local\Opera Software 2013-12-10 16:41 - 2013-12-10 16:44 - 33806104 _____ (Opera Software ASA) C:\Users\Julian\Desktop\Opera_18.0.1284.63_Setup.exe 2013-12-10 16:25 - 2013-12-10 16:25 - 00022843 _____ C:\Users\Julian\Downloads\Unbenannt 1 (2).odt 2013-12-10 16:24 - 2013-12-10 16:24 - 00022843 _____ C:\Users\Julian\Downloads\Unbenannt 1 (1).odt 2013-12-10 16:16 - 2013-12-10 16:28 - 00693973 _____ C:\Users\Julian\Desktop\Nawi-Projekt !.odt 2013-12-07 20:39 - 2013-12-07 20:39 - 00080988 _____ C:\Users\Julian\Downloads\watch_later (1) 2013-12-07 20:38 - 2013-12-07 20:38 - 00080988 _____ C:\Users\Julian\Downloads\watch_later 2013-12-06 12:31 - 2013-12-06 12:33 - 00000000 ____D C:\Users\Julian\Desktop\Gute Filme 2013-12-05 19:21 - 2013-12-05 19:21 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Frhed 2013-12-05 19:21 - 2013-12-05 19:21 - 00000000 ____D C:\Program Files (x86)\Frhed 2013-12-05 19:20 - 2013-12-05 19:20 - 00725124 _____ C:\Users\Julian\Downloads\Frhed-1.6.0-Setup.exe 2013-12-05 19:07 - 2013-12-05 19:07 - 00000000 ____D C:\Users\Julian\AppData\Local\Realmware 2013-12-05 19:06 - 2013-12-05 19:06 - 03276413 _____ (Realmware) C:\Users\Julian\Downloads\BF3SE-2.3.exe 2013-12-05 19:06 - 2013-12-05 19:06 - 00000000 ____D C:\Program Files\Realmware 2013-12-04 13:49 - 2013-12-26 20:16 - 00383942 _____ C:\Windows\PFRO.log 2013-12-01 19:59 - 2013-12-01 19:59 - 00670304 _____ (Shark Labs) C:\Users\Julian\Downloads\CFSetup342.exe 2013-12-01 13:13 - 2013-12-01 13:14 - 00000000 ____D C:\Users\Julian\AppData\Local\Windows Live Writer 2013-12-01 13:13 - 2013-12-01 13:13 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Windows Live Writer 2013-11-30 20:00 - 2013-12-26 21:04 - 00015841 _____ C:\Windows\setupact.log 2013-11-30 20:00 - 2013-11-30 20:00 - 00000000 _____ C:\Windows\setuperr.log 2013-11-28 18:06 - 2013-11-28 18:06 - 03821064 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.2_130.exe 2013-11-27 14:52 - 2013-11-27 14:52 - 03820448 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.2_129.exe ==================== One Month Modified Files and Folders ======= 2013-12-26 21:20 - 2013-12-14 14:22 - 00015006 _____ C:\Users\Julian\Desktop\FRST.txt 2013-12-26 21:20 - 2013-12-14 14:21 - 01928716 _____ (Farbar) C:\Users\Julian\Desktop\FRST64.exe 2013-12-26 21:20 - 2013-12-14 14:21 - 00000000 ____D C:\Users\Julian\Desktop\FRST-OlderVersion 2013-12-26 21:20 - 2013-12-13 23:11 - 00000000 ____D C:\FRST 2013-12-26 21:19 - 2013-09-04 11:30 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Skype 2013-12-26 21:16 - 2013-05-21 09:53 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-26 21:11 - 2009-07-14 05:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-26 21:11 - 2009-07-14 05:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-26 21:07 - 2013-09-04 09:53 - 02064429 _____ C:\Windows\WindowsUpdate.log 2013-12-26 21:04 - 2013-12-11 17:09 - 00000378 _____ C:\Windows\Tasks\SmartPCFix Task.job 2013-12-26 21:04 - 2013-11-30 20:00 - 00015841 _____ C:\Windows\setupact.log 2013-12-26 21:04 - 2013-11-18 15:06 - 00000000 ____D C:\Users\Julian\AppData\Local\Overwolf 2013-12-26 21:04 - 2013-09-04 11:28 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-26 21:04 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-26 21:03 - 2013-09-02 14:05 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-26 20:51 - 2013-09-04 11:28 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-26 20:47 - 2013-12-26 20:47 - 00001197 _____ C:\Users\Julian\Desktop\JRT.txt 2013-12-26 20:42 - 2013-12-26 20:42 - 00000000 ____D C:\Windows\ERUNT 2013-12-26 20:41 - 2013-12-26 20:41 - 01034531 _____ (Thisisu) C:\Users\Julian\Downloads\JRT.exe 2013-12-26 20:37 - 2013-12-26 20:36 - 00000000 ____D C:\AdwCleaner 2013-12-26 20:36 - 2013-12-26 20:35 - 01233962 _____ C:\Users\Julian\Downloads\adwcleaner.exe 2013-12-26 20:21 - 2013-10-04 13:16 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2124055722-383917122-1893886807-1001UA.job 2013-12-26 20:16 - 2013-12-04 13:49 - 00383942 _____ C:\Windows\PFRO.log 2013-12-26 20:13 - 2013-12-16 16:04 - 00000000 ____D C:\Schule-Bewerbung 2013-12-26 18:35 - 2013-12-26 18:35 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-26 18:35 - 2013-12-26 18:35 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Malwarebytes 2013-12-26 18:35 - 2013-12-26 18:35 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-26 18:35 - 2013-12-26 18:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-26 18:34 - 2013-12-26 18:34 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Julian\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-26 18:32 - 2013-12-26 18:31 - 00000000 ____D C:\32788R22FWJFW 2013-12-26 18:32 - 2013-12-15 12:49 - 05158590 ____R (Swearware) C:\Users\Julian\Downloads\ComboFix.exe 2013-12-26 18:26 - 2013-09-04 11:33 - 00000000 ____D C:\Users\Julian\AppData\Local\PMB Files 2013-12-26 17:09 - 2013-09-04 12:17 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TS3Client 2013-12-26 16:54 - 2013-12-26 16:52 - 00001971 _____ C:\Users\Public\Desktop\Overwolf.lnk 2013-12-26 16:54 - 2013-11-19 13:58 - 00000000 ____D C:\Program Files (x86)\Overwolf 2013-12-26 16:52 - 2013-12-26 16:50 - 00001211 _____ C:\Users\Julian\Desktop\TeamSpeak 3 Client.lnk 2013-12-26 16:49 - 2013-12-26 16:47 - 32520760 _____ (TeamSpeak Systems GmbH) C:\Users\Julian\Downloads\TeamSpeak3-Client-win64-3.0.13.1.exe 2013-12-26 15:16 - 2013-09-05 08:58 - 00000000 ____D C:\Program Files (x86)\Steam 2013-12-26 14:45 - 2013-12-26 14:45 - 00000219 _____ C:\Users\Julian\Desktop\Left 4 Dead 2.url 2013-12-26 14:45 - 2013-09-04 11:33 - 00000000 ____D C:\ProgramData\PMB Files 2013-12-26 14:21 - 2013-10-04 13:16 - 00000910 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2124055722-383917122-1893886807-1001Core.job 2013-12-25 19:13 - 2013-12-22 23:55 - 00000000 ____D C:\Program Files (x86)\Desura 2013-12-25 19:12 - 2013-12-23 10:50 - 00001859 _____ C:\Users\Public\Desktop\Desura.lnk 2013-12-25 18:17 - 2013-12-25 18:17 - 01214299 _____ C:\Users\Julian\Downloads\Julian.htm 2013-12-25 18:17 - 2013-12-25 18:17 - 00000000 ____D C:\Users\Julian\Downloads\Julian_files 2013-12-23 20:52 - 2013-10-27 13:54 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr 2013-12-23 20:52 - 2013-10-27 13:43 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2013-12-23 20:52 - 2013-10-27 13:43 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2013-12-23 20:51 - 2013-10-26 15:03 - 00000000 ____D C:\Program Files (x86)\Origin 2013-12-23 18:22 - 2013-12-13 23:10 - 00000000 ____D C:\Users\Julian\AppData\Local\CrashDumps 2013-12-23 00:13 - 2013-12-23 00:13 - 00000000 ____D C:\Users\Julian\AppData\Local\Desura 2013-12-23 00:11 - 2013-09-04 11:28 - 00000000 ____D C:\Users\Julian\AppData\Local\Deployment 2013-12-23 00:04 - 2013-12-23 00:03 - 21452408 _____ C:\Users\Julian\Downloads\AC_Mod_Pack.rar 2013-12-22 23:57 - 2013-12-22 16:12 - 00034308 _____ C:\Windows\SysWOW64\bassmod.dll 2013-12-22 23:55 - 2013-12-22 23:55 - 00000000 ____D C:\ProgramData\Desura 2013-12-22 23:55 - 2013-12-22 23:54 - 01252424 _____ C:\Users\Julian\Downloads\DesuraInstaller.exe 2013-12-22 16:24 - 2013-11-15 13:03 - 00000000 ____D C:\Users\Julian\Desktop\Riot Games 2013-12-22 16:12 - 2013-12-22 16:12 - 00403463 _____ C:\Users\Julian\Downloads\d2a536_4e9f41d31ec4c.zip 2013-12-22 16:12 - 2013-12-22 16:12 - 00003180 _____ C:\Windows\System32\Tasks\{72480F35-5D47-411B-9910-6C607904743A} 2013-12-22 15:57 - 2013-12-22 15:57 - 00009094 _____ C:\Users\Julian\Downloads\SweetFX_Settings_Assassin's Creed II_AC2 total improvements .txt 2013-12-22 15:51 - 2013-12-22 15:51 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SweetFX Configurator 2013-12-22 15:51 - 2013-09-04 11:28 - 00000000 ____D C:\Users\Julian\AppData\Local\Apps\2.0 2013-12-22 15:50 - 2013-12-22 15:50 - 00492398 _____ C:\Users\Julian\Downloads\SweetFX-Configurator_1.3.3.zip 2013-12-22 15:50 - 2013-12-22 15:50 - 00281567 _____ C:\Users\Julian\Downloads\SweetFX-Configurator_standalone_1.3.3.zip 2013-12-21 21:33 - 2013-12-21 21:33 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Ubisoft 2013-12-21 21:33 - 2013-12-21 21:33 - 00000000 ____D C:\ProgramData\Ubisoft 2013-12-21 21:28 - 2013-12-20 20:00 - 00049017 _____ C:\Windows\DirectX.log 2013-12-21 21:20 - 2013-11-10 13:48 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-12-21 21:20 - 2013-09-20 17:31 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-12-20 20:12 - 2013-12-20 20:12 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Meine Der Herr der Ringe™, Aufstieg des Hexenkönigs™-Dateien 2013-12-20 20:12 - 2013-10-14 21:08 - 00000000 ___RD C:\Users\Julian\Desktop\Games 2013-12-20 20:11 - 2013-09-04 09:53 - 00000000 ____D C:\Users\Julian\AppData\Local\Windows Live 2013-12-20 20:08 - 2013-12-20 19:54 - 00000000 ____D C:\Program Files (x86)\Electronic Arts 2013-12-20 20:07 - 2013-12-20 20:07 - 00003048 _____ C:\Windows\System32\Tasks\{4651D125-218E-4E31-9687-62E6ACBE8661} 2013-12-20 20:04 - 2013-12-20 20:04 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2013-12-20 20:04 - 2013-12-20 20:04 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Meine Die Schlacht um Mittelerde™ II-Dateien 2013-12-20 20:04 - 2013-09-04 09:54 - 00000000 ____D C:\Users\Julian\AppData\Local\VirtualStore 2013-12-20 19:52 - 2013-12-20 19:52 - 00003048 _____ C:\Windows\System32\Tasks\{7CA66842-3541-4E5E-9177-D1BF627B43F4} 2013-12-20 19:46 - 2013-11-07 10:18 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Spotify 2013-12-20 11:49 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-19 21:33 - 2013-12-19 21:33 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps 2013-12-19 14:40 - 2013-11-07 10:18 - 00000000 ____D C:\Users\Julian\AppData\Local\Spotify 2013-12-18 11:01 - 2013-11-07 10:18 - 00001797 _____ C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2013-12-18 10:50 - 2013-12-18 10:50 - 00000000 ____D C:\Users\Julian\AppData\Local\Abelssoft 2013-12-18 10:50 - 2013-12-18 10:50 - 00000000 ____D C:\Program Files (x86)\JetDrive 2013-12-18 10:48 - 2013-12-18 10:47 - 30588821 _____ C:\Users\Julian\Downloads\tag18jetdrive.zip 2013-12-16 16:35 - 2013-12-10 16:45 - 00000000 ____D C:\Program Files (x86)\Opera 2013-12-15 19:10 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-15 14:26 - 2013-12-15 13:59 - 00000000 ____D C:\ComboFix 2013-12-15 14:22 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2013-12-15 14:00 - 2013-12-15 12:50 - 00000000 ____D C:\Qoobox 2013-12-15 12:50 - 2013-12-15 12:50 - 00000000 ____D C:\Windows\erdnt 2013-12-14 14:24 - 2013-12-14 14:23 - 00026944 _____ C:\Addition.txt 2013-12-14 12:41 - 2013-12-13 23:12 - 00090096 _____ C:\Users\Julian\Downloads\FRST.txt 2013-12-14 12:05 - 2013-12-13 23:13 - 00026530 _____ C:\Users\Julian\Downloads\Addition.txt 2013-12-14 12:02 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-12-13 18:51 - 2013-12-11 17:09 - 00000000 ____D C:\Program Files (x86)\SmartPCFix 2013-12-13 18:42 - 2013-12-13 18:41 - 129598176 _____ C:\Users\Julian\Downloads\avira_free_antivirus_de_14.0.2.286.exe 2013-12-13 18:16 - 2013-12-13 18:16 - 00000084 _____ C:\Users\Julian\Downloads\PIMMEL.txt 2013-12-13 14:56 - 2010-11-21 07:50 - 00696620 _____ C:\Windows\system32\perfh007.dat 2013-12-13 14:56 - 2010-11-21 07:50 - 00147916 _____ C:\Windows\system32\perfc007.dat 2013-12-13 14:56 - 2009-07-14 06:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-12 14:40 - 2013-12-12 14:40 - 00000000 ____D C:\Users\Julian\AppData\Local\Razer 2013-12-12 14:40 - 2009-07-14 05:45 - 00304696 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-11 21:02 - 2013-12-11 21:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_RzFilter_01009.Wdf 2013-12-11 21:02 - 2013-09-04 09:54 - 00068040 _____ C:\Users\Julian\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\Windows\Razer Core 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\ProgramData\Razer 2013-12-11 21:01 - 2013-12-11 21:01 - 00000000 ____D C:\Program Files (x86)\Razer 2013-12-11 21:00 - 2013-12-11 20:59 - 47307072 _____ (Razer Inc.) C:\Users\Julian\Downloads\RazerComms1.81.20.exe 2013-12-11 20:52 - 2013-12-11 19:36 - 03135866 _____ C:\Users\Julian\Downloads\675999.m.mp4.opdownload 2013-12-11 20:16 - 2013-05-21 09:53 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-11 20:16 - 2012-04-16 09:33 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-11 20:16 - 2012-01-13 14:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-11 17:10 - 2013-12-11 17:09 - 09009660 _____ (Microsoft Corporation) C:\Users\Julian\Downloads\downloadmanager_8d590f63-da00-4058-ab93-bf04be3483b6.tmp 2013-12-11 17:09 - 2013-12-11 17:09 - 00002806 _____ C:\Windows\System32\Tasks\SmartPCFix Task 2013-12-11 17:09 - 2013-12-11 17:09 - 00000000 ____D C:\Users\Julian\AppData\Roaming\SmartPCFix 2013-12-10 21:00 - 2013-12-10 21:00 - 00021472 _____ C:\Users\Julian\Desktop\Nawi 2.odt 2013-12-10 20:47 - 2013-12-10 20:47 - 00000000 ____D C:\Users\Julian\AppData\Local\Adobe 2013-12-10 20:47 - 2013-09-04 09:53 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Adobe 2013-12-10 20:23 - 2013-12-10 20:23 - 00001045 _____ C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FuzeZip.lnk 2013-12-10 20:23 - 2013-12-10 20:23 - 00000000 ____D C:\Users\Julian\AppData\Local\FuzeZip 2013-12-10 20:23 - 2013-12-10 20:21 - 00000000 ____D C:\Program Files (x86)\FuzeZip 2013-12-10 20:22 - 2013-12-10 20:22 - 00000000 ____D C:\Users\Julian\AppData\Local\fuzezipmusictoolbardla 2013-12-10 20:21 - 2013-12-10 20:21 - 01327776 _____ (Koyote-Lab Inc.) C:\Users\Julian\Downloads\FuzeZipSetup-r153-w-bc.exe 2013-12-10 20:20 - 2013-12-10 20:19 - 00000000 ____D C:\ProgramData\EPSON 2013-12-10 20:20 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-12-10 20:19 - 2013-12-10 20:19 - 00000000 ____D C:\Program Files (x86)\epson 2013-12-10 20:18 - 2013-12-10 20:18 - 16489472 _____ C:\Users\Julian\Downloads\epson323814eu.exe 2013-12-10 20:18 - 2013-12-10 20:18 - 12872704 _____ C:\Users\Julian\Downloads\epson323810eu.exe 2013-12-10 16:45 - 2013-12-10 16:45 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Opera Software 2013-12-10 16:45 - 2013-12-10 16:45 - 00000000 ____D C:\Users\Julian\AppData\Local\Opera Software 2013-12-10 16:44 - 2013-12-10 16:41 - 33806104 _____ (Opera Software ASA) C:\Users\Julian\Desktop\Opera_18.0.1284.63_Setup.exe 2013-12-10 16:28 - 2013-12-10 16:16 - 00693973 _____ C:\Users\Julian\Desktop\Nawi-Projekt !.odt 2013-12-10 16:26 - 2013-09-22 11:40 - 00000000 ____D C:\Users\Julian\Desktop\Informatik 2013-12-10 16:25 - 2013-12-10 16:25 - 00022843 _____ C:\Users\Julian\Downloads\Unbenannt 1 (2).odt 2013-12-10 16:24 - 2013-12-10 16:24 - 00022843 _____ C:\Users\Julian\Downloads\Unbenannt 1 (1).odt 2013-12-10 15:51 - 2013-10-16 06:41 - 00009734 _____ C:\Windows\system32\lvcoinst.log 2013-12-10 03:13 - 2013-10-29 17:54 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2013-12-10 03:13 - 2013-10-29 17:54 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-12-09 21:19 - 2013-10-16 06:41 - 00000000 ____D C:\Program Files\Common Files\logishrd 2013-12-07 20:39 - 2013-12-07 20:39 - 00080988 _____ C:\Users\Julian\Downloads\watch_later (1) 2013-12-07 20:38 - 2013-12-07 20:38 - 00080988 _____ C:\Users\Julian\Downloads\watch_later 2013-12-06 16:43 - 2013-11-22 03:53 - 00000000 ____D C:\Users\Julian\Documents\Assassin's Creed IV Black Flag 2013-12-06 12:33 - 2013-12-06 12:31 - 00000000 ____D C:\Users\Julian\Desktop\Gute Filme 2013-12-05 21:07 - 2013-09-04 09:56 - 00000000 ____D C:\Users\Julian\AppData\Local\NVIDIA 2013-12-05 21:06 - 2013-11-16 11:49 - 00000000 ____D C:\Users\Julian\AppData\Local\NVIDIA Corporation 2013-12-05 21:06 - 2013-09-02 14:01 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-12-05 21:06 - 2013-09-02 14:01 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-05 21:06 - 2013-09-02 13:59 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-12-05 19:21 - 2013-12-05 19:21 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Frhed 2013-12-05 19:21 - 2013-12-05 19:21 - 00000000 ____D C:\Program Files (x86)\Frhed 2013-12-05 19:20 - 2013-12-05 19:20 - 00725124 _____ C:\Users\Julian\Downloads\Frhed-1.6.0-Setup.exe 2013-12-05 19:07 - 2013-12-05 19:07 - 00000000 ____D C:\Users\Julian\AppData\Local\Realmware 2013-12-05 19:06 - 2013-12-05 19:06 - 03276413 _____ (Realmware) C:\Users\Julian\Downloads\BF3SE-2.3.exe 2013-12-05 19:06 - 2013-12-05 19:06 - 00000000 ____D C:\Program Files\Realmware 2013-12-05 09:42 - 2013-12-20 17:21 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2013-12-05 09:42 - 2013-12-20 17:21 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-12-05 09:42 - 2013-09-04 11:24 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2013-12-03 20:53 - 2013-11-20 15:04 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TeamViewer 2013-12-03 20:51 - 2013-09-28 17:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2013-12-01 19:59 - 2013-12-01 19:59 - 00670304 _____ (Shark Labs) C:\Users\Julian\Downloads\CFSetup342.exe 2013-12-01 13:14 - 2013-12-01 13:13 - 00000000 ____D C:\Users\Julian\AppData\Local\Windows Live Writer 2013-12-01 13:13 - 2013-12-01 13:13 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Windows Live Writer 2013-11-30 20:00 - 2013-11-30 20:00 - 00000000 _____ C:\Windows\setuperr.log 2013-11-30 18:35 - 2013-11-13 14:12 - 00000000 ____D C:\Users\Julian\Desktop\Windows 7 2013-11-28 18:06 - 2013-11-28 18:06 - 03821064 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.2_130.exe 2013-11-28 18:06 - 2013-10-27 13:50 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins 2013-11-28 15:46 - 2013-09-04 11:28 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-11-28 15:46 - 2013-09-04 11:28 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-11-27 14:52 - 2013-11-27 14:52 - 03820448 _____ C:\Users\Julian\Downloads\battlelog-web-plugins_2.3.2_129.exe 2013-11-26 12:54 - 2013-12-11 20:53 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-26 11:19 - 2013-12-11 20:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-26 11:18 - 2013-12-11 20:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-26 11:11 - 2013-12-11 20:53 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-26 10:48 - 2013-12-11 20:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-26 10:46 - 2013-12-11 20:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-26 10:41 - 2013-12-11 20:53 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-26 10:29 - 2013-12-11 20:53 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-26 10:27 - 2013-12-11 20:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-26 10:23 - 2013-12-11 20:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-26 10:21 - 2013-12-11 20:53 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-26 10:18 - 2013-12-11 20:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-26 10:18 - 2013-12-11 20:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-26 10:16 - 2013-12-11 20:53 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-26 09:57 - 2013-12-11 20:53 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-26 09:38 - 2013-12-11 20:53 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-26 09:38 - 2013-12-11 20:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-26 09:35 - 2013-12-11 20:53 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-26 09:32 - 2013-12-11 20:53 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-26 09:28 - 2013-12-11 20:53 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-26 09:16 - 2013-12-11 20:53 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-26 09:02 - 2013-12-11 20:53 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-26 08:48 - 2013-12-11 20:53 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-26 08:32 - 2013-12-11 20:53 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-26 08:26 - 2013-12-11 20:53 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-26 08:07 - 2013-12-11 20:53 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-26 07:40 - 2013-12-11 20:53 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-26 07:34 - 2013-12-11 20:53 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-26 07:34 - 2013-12-11 20:53 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-26 07:33 - 2013-12-11 20:53 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-26 07:27 - 2013-12-11 20:53 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll Some content of TEMP: ==================== C:\Users\Julian\AppData\Local\Temp\AutoRun.exe C:\Users\Julian\AppData\Local\Temp\AutoRunGUI.dll C:\Users\Julian\AppData\Local\Temp\avgnt.exe C:\Users\Julian\AppData\Local\Temp\EAInstall.dll C:\Users\Julian\AppData\Local\Temp\eauninstall.exe C:\Users\Julian\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-20 20:43 ==================== End Of Log ============================ --- --- --- Übrigens das mit Combofix hat irgendwie nicht funktioniert.. |
27.12.2013, 14:04 | #12 |
| Mein Freund kann nichts mehr öffnen... ah hier ist die Combofix.txt Combofix Logfile: Code:
ATTFilter ComboFix 13-12-26.01 - Julian 27.12.2013 13:22:38.2.6 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8174.5875 [GMT 1:00] ausgeführt von:: c:\users\Julian\Downloads\ComboFix.exe AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F} SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Neuer Wiederherstellungspunkt wurde erstellt . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\SysWow64\frapsvid.dll . ---- Vorheriger Suchlauf ------- . c:\program files (x86)\SearchProtect c:\program files (x86)\SearchProtect\EULA.txt c:\program files (x86)\SearchProtect\Main\bin\CltMngSvc.exe c:\program files (x86)\SearchProtect\Main\bin\SPTool.dll c:\program files (x86)\SearchProtect\Main\bin\uninstall.exe c:\program files (x86)\SearchProtect\Main\rep\SystemRepository.dat c:\program files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe c:\program files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe c:\program files (x86)\SearchProtect\SearchProtect\bin\SPVC32.dll c:\program files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll c:\program files (x86)\SearchProtect\SearchProtect\bin\SPVC64.dll c:\program files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll c:\program files (x86)\SearchProtect\UI\bin\cltmngui.exe c:\program files (x86)\SearchProtect\UI\dialogs\bubble\bubble.css c:\program files (x86)\SearchProtect\UI\dialogs\bubble\bubble.html c:\program files (x86)\SearchProtect\UI\dialogs\bubble\bubble.js c:\program files (x86)\SearchProtect\UI\dialogs\bubble\defaults.js c:\program files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\bg.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\hez.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\text-field.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\v.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\x.png c:\program files (x86)\SearchProtect\UI\dialogs\libs\defaults.js c:\program files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js c:\program files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js c:\program files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js c:\program files (x86)\SearchProtect\UI\dialogs\libs\main.js c:\program files (x86)\SearchProtect\UI\dialogs\libs\SPDialogAPI.js c:\program files (x86)\SearchProtect\UI\dialogs\protection\defaults.js c:\program files (x86)\SearchProtect\UI\dialogs\protection\protection.css c:\program files (x86)\SearchProtect\UI\dialogs\protection\protection.html c:\program files (x86)\SearchProtect\UI\dialogs\protection\protection.js c:\program files (x86)\SearchProtect\UI\dialogs\settings.html c:\program files (x86)\SearchProtect\UI\dialogs\settings\defaults.js c:\program files (x86)\SearchProtect\UI\dialogs\settings\settings.css c:\program files (x86)\SearchProtect\UI\dialogs\settings\settings.html c:\program files (x86)\SearchProtect\UI\dialogs\settings\settings.js c:\program files (x86)\SearchProtect\UI\dialogs\style.css c:\program files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js c:\program files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css c:\program files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html c:\program files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js c:\program files (x86)\weDownload Manager Pro\weDOwnload manager pro-bho.dll c:\programdata\Wincert\WIN32C~1.DLL c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_kikjpgpbpnapbimplfcbcbakjacpgceb_0 c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_kikjpgpbpnapbimplfcbcbakjacpgceb_0\2 c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\background.html c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\crossriderManifest.json c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\manifest.xml c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins.json c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\1_base.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\102_dealply_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\103_intext_5_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\104_jollywallet_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\105_corticas_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\108_icm_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\117_coupons_intext_ads_5_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\119_similar_web_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\120_luck_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\123_intext_adv_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\125_arcadi2_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\126_revizer_ws_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\127_revizer_p_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\128_superfish_pricora_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\13_CrossriderAppUtils.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\135_arcadi3_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\138_getdeal_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\14_CrossriderUtils.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\141_corticas_ru_m.js.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\142_intext_fa_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\155_ibario_pops_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\158_50onred_ads_only_no_fb_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\159_cortica_rollover_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\17_jQuery.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\171_arcadi2_sourceID_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\175_coolmirage_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\178_revizer_ws_dynamic_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\179_revizer_p_dynamic_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\180_bpo_serp_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\184_noproblemppc_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\189_active_sanity.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\19_CHAppAPIWrapper.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\190_pops_5_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\191_ciuvo_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\194_retargeting_bi_m.js.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\21_debug.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\22_resources.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\28_initializer.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\4_jquery_1_7_1.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\47_resources_background.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\5_notifications.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\64_appApiMessage.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\7_hooks.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\72_appApiValidation.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\78_CrossriderInfo.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\80_CHPopupAppAPI.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\87_ginyas_wrapper.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\9_search_engine_hook.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\91_monetizationLoader.js.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\93_superfish_no_coupons_m.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\plugins\97_resourceApiWrapper.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\userCode\background.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\extensionData\userCode\extension.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\icons\actions\1.png c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\icons\icon128.png c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\icons\icon16.png c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\icons\icon48.png c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\api\chrome.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\api\cookie.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\api\message.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\api\pageAction.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\api\pageActionBG.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\background.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\app_api.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\bg_app_api.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\consts.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\cookie_store.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\crossriderAPI.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\delegate.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\events.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\extensionDataStore.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\installer.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\logFile.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\logging.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\onBGDocumentLoad.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\popupResource\newPopup.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\popupResource\popup.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\reports.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\storageWrapper.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\updateManager.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\util.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\lib\xhr.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\js\main.js c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\manifest.json c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikjpgpbpnapbimplfcbcbakjacpgceb\1.25.32_0\popup.html c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kikjpgpbpnapbimplfcbcbakjacpgceb c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kikjpgpbpnapbimplfcbcbakjacpgceb\000005.ldb c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kikjpgpbpnapbimplfcbcbakjacpgceb\000014.ldb c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kikjpgpbpnapbimplfcbcbakjacpgceb\000035.ldb c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kikjpgpbpnapbimplfcbcbakjacpgceb\000036.log c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kikjpgpbpnapbimplfcbcbakjacpgceb\CURRENT c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kikjpgpbpnapbimplfcbcbakjacpgceb\LOCK c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kikjpgpbpnapbimplfcbcbakjacpgceb\LOG c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kikjpgpbpnapbimplfcbcbakjacpgceb\LOG.old c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kikjpgpbpnapbimplfcbcbakjacpgceb\MANIFEST-000034 c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kikjpgpbpnapbimplfcbcbakjacpgceb_0.localstorage-journal c:\users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kikjpgpbpnapbimplfcbcbakjacpgceb_0.localstorage c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome.manifest c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\asyncDB.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\background.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\browserAction.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\contextMenu.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\dbManager.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\dom_bg.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\fileManager.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\firefox.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\firefoxNotifications.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\firefoxOmnibox.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\message.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\pageAction.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\request.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\tabs.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\api\webRequest.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\background.html c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\baseObject.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\browser.xul c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\console.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\consts.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\delegate.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\extensionDataStore.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\folderIOWrapper.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\httpObserver.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\IDBWrapper.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\installer.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\logFile.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\prefs.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\progressListenerObserver.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\registry.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\reloadObserver.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\reports.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\requestObject.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\searchSettings.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\uninstallObserver.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\updateManager.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\utils.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\core\xhr.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\dialog.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\main.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\options.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\options.xul c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\chrome\content\search_dialog.xul c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\defaults\preferences\prefs.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\manifest.xml c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins.json c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\1_base.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\102_dealply_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\103_intext_5_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\104_jollywallet_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\105_corticas_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\108_icm_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\117_coupons_intext_ads_5_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\119_similar_web_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\120_luck_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\123_intext_adv_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\125_arcadi2_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\126_revizer_ws_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\127_revizer_p_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\128_superfish_pricora_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\13_CrossriderAppUtils.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\135_arcadi3_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\138_getdeal_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\14_CrossriderUtils.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\141_corticas_ru_m.js.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\142_intext_fa_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\155_ibario_pops_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\158_50onred_ads_only_no_fb_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\159_cortica_rollover_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\16_FFAppAPIWrapper.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\17_jQuery.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\171_arcadi2_sourceID_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\175_coolmirage_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\177_crossriderDashboard.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\178_revizer_ws_dynamic_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\179_revizer_p_dynamic_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\180_bpo_serp_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\182_openUrl.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\183_tabsWrapper.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\184_noproblemppc_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\189_active_sanity.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\190_pops_5_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\191_ciuvo_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\194_retargeting_bi_m.js.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\195_icm_convertmedia_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\197_kreapixel_pops_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\199_superfish_no_coupons_plushd_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\200_foxydeal_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\204_pricedetect_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\21_debug.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\22_resources.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\28_initializer.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\4_jquery_1_7_1.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\47_resources_background.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\5_notifications.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\64_appApiMessage.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\7_hooks.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\72_appApiValidation.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\78_CrossriderInfo.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\79_CrossriderDailyPing.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\87_ginyas_wrapper.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\9_search_engine_hook.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\91_monetizationLoader.js.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\93_superfish_no_coupons_m.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\plugins\98_omniCommands.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\userCode\background.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\extensionData\userCode\extension.js c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\install.rdf c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\locale\en-US\translations.dtd c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\button1.png c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\button2.png c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\button3.png c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\button4.png c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\button5.png c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\crossrider_statusbar.png c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\icon128.png c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\icon16.png c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\icon24.png c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\icon48.png c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\panelarrow-up.png c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\popup.html c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\skin.css c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\extensions\008abed2-b43a-46c9-9a5b-a771c87b82da@1ad61d53-2bdc-4484-a26b-b888ecae1906.com\skin\update.css c:\windows\SysWow64\frapsvid.dll . . ((((((((((((((((((((((( Dateien erstellt von 2013-11-27 bis 2013-12-27 )))))))))))))))))))))))))))))) . . 2013-12-27 12:27 . 2013-12-27 12:27 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-12-26 19:42 . 2013-12-26 19:42 -------- d-----w- c:\windows\ERUNT 2013-12-26 19:36 . 2013-12-26 19:37 -------- d-----w- C:\AdwCleaner 2013-12-26 19:27 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F67AA3A3-70B6-448D-9D97-6D87D4A53954}\mpengine.dll 2013-12-26 17:35 . 2013-12-26 17:35 -------- d-----w- c:\users\Julian\AppData\Roaming\Malwarebytes 2013-12-26 17:35 . 2013-12-26 17:35 -------- d-----w- c:\programdata\Malwarebytes 2013-12-26 17:35 . 2013-12-26 17:35 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2013-12-26 17:35 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2013-12-26 15:52 . 2013-12-26 15:52 -------- d-----w- c:\program files (x86)\Common Files\Overwolf 2013-12-25 17:15 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2013-12-22 23:13 . 2013-12-22 23:13 -------- d-----w- c:\users\Julian\AppData\Local\Desura 2013-12-22 22:56 . 2013-12-22 22:56 -------- d-----w- c:\program files (x86)\Common Files\Desura 2013-12-22 22:55 . 2013-12-22 22:55 -------- d-----w- c:\programdata\Desura 2013-12-22 22:55 . 2013-12-25 18:13 -------- d-----w- c:\program files (x86)\Desura 2013-12-21 20:33 . 2013-12-21 20:33 -------- d-----w- c:\users\Julian\AppData\Roaming\Ubisoft 2013-12-21 20:33 . 2013-12-21 20:33 -------- d-----w- c:\programdata\Ubisoft 2013-12-20 19:12 . 2013-12-20 19:12 -------- d-----w- c:\users\Julian\AppData\Roaming\Meine Der Herr der Ringe™, Aufstieg des Hexenkönigs™-Dateien 2013-12-20 19:04 . 2013-12-20 19:04 -------- d-----w- c:\users\Julian\AppData\Roaming\Meine Die Schlacht um Mittelerde™ II-Dateien 2013-12-20 18:54 . 2013-12-20 19:08 -------- d-----w- c:\program files (x86)\Electronic Arts 2013-12-20 16:21 . 2013-12-05 08:42 39200 ----a-w- c:\windows\system32\drivers\nvvad64v.sys 2013-12-20 16:21 . 2013-12-05 08:42 32544 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll 2013-12-18 09:50 . 2012-05-22 10:21 8192 ----a-w- c:\windows\system32\jdboot.exe 2013-12-18 09:50 . 2012-05-22 10:21 37248 ----a-w- c:\windows\system32\drivers\jddrv.sys 2013-12-18 09:50 . 2012-05-22 10:21 23040 ----a-w- c:\windows\system32\jddac.dll 2013-12-18 09:50 . 2012-05-22 10:21 22016 ----a-w- c:\windows\system32\jdnat.dll 2013-12-18 09:50 . 2013-12-18 09:50 -------- d-----w- c:\users\Julian\AppData\Local\Abelssoft 2013-12-18 09:50 . 2013-11-11 10:20 9728 ----a-w- c:\windows\SysWow64\WindowsClosingService.exe 2013-12-18 09:50 . 2013-12-18 09:50 -------- d-----w- c:\program files (x86)\JetDrive 2013-12-18 09:49 . 2013-12-18 09:49 -------- d-----w- c:\users\Julian\AppData\Local\Programs 2013-12-16 15:04 . 2013-12-26 19:13 -------- d-----w- C:\Schule-Bewerbung 2013-12-13 22:11 . 2013-12-26 20:20 -------- d-----w- C:\FRST 2013-12-13 22:10 . 2013-12-23 17:22 -------- d-----w- c:\users\Julian\AppData\Local\CrashDumps 2013-12-12 13:40 . 2013-12-12 13:40 -------- d-----w- c:\users\Julian\AppData\Local\Razer 2013-12-11 20:01 . 2013-11-21 04:37 74432 ----a-w- c:\windows\system32\drivers\RzFilter.sys 2013-12-11 20:01 . 2013-11-21 04:37 129472 ----a-w- c:\windows\system32\drivers\RzDxgk.sys 2013-12-11 20:01 . 2013-12-11 20:01 -------- d-----w- c:\windows\Razer Core 2013-12-11 20:01 . 2013-12-11 20:01 -------- d-----w- c:\programdata\Razer 2013-12-11 20:01 . 2013-12-11 20:01 -------- d-----w- c:\program files (x86)\Razer 2013-12-11 19:54 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL 2013-12-11 19:54 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe 2013-12-11 19:54 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe 2013-12-11 19:54 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL 2013-12-11 19:54 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll 2013-12-11 16:09 . 2013-12-11 16:09 -------- d-----w- c:\users\Julian\AppData\Roaming\SmartPCFix 2013-12-11 16:09 . 2013-12-13 17:51 -------- d-----w- c:\program files (x86)\SmartPCFix 2013-12-10 19:47 . 2013-12-10 19:47 -------- d-----w- c:\users\Julian\AppData\Local\Adobe 2013-12-10 19:23 . 2013-12-10 19:23 -------- d-----w- c:\users\Julian\AppData\Local\FuzeZip 2013-12-10 19:22 . 2013-12-10 19:22 -------- d-----w- c:\users\Julian\AppData\Local\fuzezipmusictoolbardla 2013-12-10 19:21 . 2013-12-10 19:23 -------- d-----w- c:\program files (x86)\FuzeZip 2013-12-10 19:19 . 2008-08-08 01:09 108032 ----a-w- c:\windows\system32\E_ILMFDE.DLL 2013-12-10 19:19 . 2007-12-07 01:01 81408 ----a-w- c:\windows\system32\E_IBCBFDE.DLL 2013-12-10 19:19 . 2007-04-10 00:06 10752 ----a-w- c:\windows\system32\E_GCINST.DLL 2013-12-10 19:19 . 2009-04-30 23:00 17408 ----a-w- c:\windows\system32\esxcdev.dll 2013-12-10 19:19 . 2009-04-30 23:00 128392 ----a-w- c:\windows\system32\esdevapp.exe 2013-12-10 19:19 . 2008-11-16 23:00 459776 ----a-w- c:\windows\system32\esxwiaud.dll 2013-12-10 19:19 . 2013-12-10 19:19 -------- d-----w- c:\program files (x86)\epson 2013-12-10 19:19 . 2013-12-10 19:20 -------- d-----w- c:\programdata\EPSON 2013-12-10 19:13 . 2009-07-14 01:40 38912 ----a-w- c:\windows\system32\Spool\prtprocs\x64\EP0NPP01.DLL 2013-12-10 15:45 . 2013-12-10 15:45 -------- d-----w- c:\users\Julian\AppData\Local\Opera Software 2013-12-10 15:45 . 2013-12-10 15:45 -------- d-----w- c:\users\Julian\AppData\Roaming\Opera Software 2013-12-10 15:45 . 2013-12-16 15:35 -------- d-----w- c:\program files (x86)\Opera 2013-12-06 13:55 . 2013-10-18 12:41 965000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D03E5CE6-BA6A-43FA-89DA-4B2401DB3EE5}\gapaengine.dll 2013-12-05 18:21 . 2013-12-05 18:21 -------- d-----w- c:\program files (x86)\Frhed 2013-12-05 18:07 . 2013-12-05 18:07 -------- d-----w- c:\users\Julian\AppData\Local\Realmware 2013-12-05 18:06 . 2013-12-05 18:06 -------- d-----w- c:\program files\Realmware 2013-12-01 12:13 . 2013-12-01 12:14 -------- d-----w- c:\users\Julian\AppData\Local\Windows Live Writer 2013-12-01 12:13 . 2013-12-01 12:13 -------- d-----w- c:\users\Julian\AppData\Roaming\Windows Live Writer . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-12-27 01:00 . 2013-10-27 12:54 290184 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2013-12-27 01:00 . 2013-10-27 12:43 290184 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2013-12-27 01:00 . 2013-10-27 12:43 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2013-12-11 19:16 . 2012-04-16 08:33 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-12-11 19:16 . 2012-01-13 13:34 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-12-10 02:13 . 2013-10-29 16:54 982232 ----a-w- c:\windows\SysWow64\nvspcap.dll 2013-12-10 02:13 . 2013-10-29 16:54 1100248 ----a-w- c:\windows\system32\nvspcap64.dll 2013-12-05 08:42 . 2013-09-04 10:24 35104 ----a-w- c:\windows\system32\nvaudcap64v.dll 2013-11-23 18:26 . 2013-10-27 12:43 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe 2013-11-22 23:26 . 2013-11-22 23:26 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-11-22 23:26 . 2013-11-22 23:26 194048 ----a-w- c:\windows\SysWow64\elshyph.dll 2013-11-22 23:26 . 2013-11-22 23:26 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe 2013-11-22 23:26 . 2013-11-22 23:26 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll 2013-11-22 23:26 . 2013-11-22 23:26 62464 ----a-w- c:\windows\SysWow64\tdc.ocx 2013-11-22 23:26 . 2013-11-22 23:26 61952 ----a-w- c:\windows\SysWow64\iesetup.dll 2013-11-22 23:26 . 2013-11-22 23:26 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll 2013-11-22 23:26 . 2013-11-22 23:26 337408 ----a-w- c:\windows\SysWow64\html.iec 2013-11-22 23:26 . 2013-11-22 23:26 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll 2013-11-22 23:26 . 2013-11-22 23:26 235008 ----a-w- c:\windows\system32\elshyph.dll 2013-11-22 23:26 . 2013-11-22 23:26 182272 ----a-w- c:\windows\SysWow64\msls31.dll 2013-11-22 23:26 . 2013-11-22 23:26 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll 2013-11-22 23:26 . 2013-11-22 23:26 942592 ----a-w- c:\windows\system32\jsIntl.dll 2013-11-22 23:26 . 2013-11-22 23:26 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll 2013-11-22 23:26 . 2013-11-22 23:26 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe 2013-11-22 23:26 . 2013-11-22 23:26 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe 2013-11-22 23:26 . 2013-11-22 23:26 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll 2013-11-22 23:26 . 2013-11-22 23:26 52224 ----a-w- c:\windows\system32\msfeedsbs.dll 2013-11-22 23:26 . 2013-11-22 23:26 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll 2013-11-22 23:26 . 2013-11-22 23:26 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll 2013-11-22 23:26 . 2013-11-22 23:26 454656 ----a-w- c:\windows\SysWow64\vbscript.dll 2013-11-22 23:26 . 2013-11-22 23:26 36352 ----a-w- c:\windows\SysWow64\imgutil.dll 2013-11-22 23:26 . 2013-11-22 23:26 247808 ----a-w- c:\windows\system32\msls31.dll 2013-11-22 23:26 . 2013-11-22 23:26 195584 ----a-w- c:\windows\system32\msrating.dll 2013-11-22 23:26 . 2013-11-22 23:26 151552 ----a-w- c:\windows\SysWow64\iexpress.exe 2013-11-22 23:26 . 2013-11-22 23:26 139264 ----a-w- c:\windows\SysWow64\wextract.exe 2013-11-22 23:26 . 2013-11-22 23:26 13312 ----a-w- c:\windows\SysWow64\mshta.exe 2013-11-22 23:26 . 2013-11-22 23:26 13312 ----a-w- c:\windows\system32\msfeedssync.exe 2013-11-22 23:26 . 2013-11-22 23:26 131072 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-11-22 23:26 . 2013-11-22 23:26 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2013-11-22 23:26 . 2013-11-22 23:26 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll 2013-11-22 23:26 . 2013-11-22 23:26 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-11-22 23:26 . 2013-11-22 23:26 84992 ----a-w- c:\windows\system32\mshtmled.dll 2013-11-22 23:26 . 2013-11-22 23:26 83968 ----a-w- c:\windows\system32\MshtmlDac.dll 2013-11-22 23:26 . 2013-11-22 23:26 81408 ----a-w- c:\windows\system32\icardie.dll 2013-11-22 23:26 . 2013-11-22 23:26 774144 ----a-w- c:\windows\system32\jscript.dll 2013-11-22 23:26 . 2013-11-22 23:26 77312 ----a-w- c:\windows\system32\tdc.ocx 2013-11-22 23:26 . 2013-11-22 23:26 626176 ----a-w- c:\windows\system32\msfeeds.dll 2013-11-22 23:26 . 2013-11-22 23:26 62464 ----a-w- c:\windows\system32\pngfilt.dll 2013-11-22 23:26 . 2013-11-22 23:26 616104 ----a-w- c:\windows\system32\ieapfltr.dat 2013-11-22 23:26 . 2013-11-22 23:26 548352 ----a-w- c:\windows\system32\vbscript.dll 2013-11-22 23:26 . 2013-11-22 23:26 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-11-22 23:26 . 2013-11-22 23:26 48128 ----a-w- c:\windows\system32\imgutil.dll 2013-11-22 23:26 . 2013-11-22 23:26 453120 ----a-w- c:\windows\system32\dxtmsft.dll 2013-11-22 23:26 . 2013-11-22 23:26 413696 ----a-w- c:\windows\system32\html.iec 2013-11-22 23:26 . 2013-11-22 23:26 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll 2013-11-22 23:26 . 2013-11-22 23:26 30208 ----a-w- c:\windows\system32\licmgr10.dll 2013-11-22 23:26 . 2013-11-22 23:26 296960 ----a-w- c:\windows\system32\dxtrans.dll 2013-11-22 23:26 . 2013-11-22 23:26 263376 ----a-w- c:\windows\system32\iedkcs32.dll 2013-11-22 23:26 . 2013-11-22 23:26 243200 ----a-w- c:\windows\system32\webcheck.dll 2013-11-22 23:26 . 2013-11-22 23:26 235520 ----a-w- c:\windows\system32\url.dll 2013-11-22 23:26 . 2013-11-22 23:26 167424 ----a-w- c:\windows\system32\iexpress.exe 2013-11-22 23:26 . 2013-11-22 23:26 147968 ----a-w- c:\windows\system32\occache.dll 2013-11-22 23:26 . 2013-11-22 23:26 143872 ----a-w- c:\windows\system32\wextract.exe 2013-11-22 23:26 . 2013-11-22 23:26 13824 ----a-w- c:\windows\system32\mshta.exe 2013-11-22 23:26 . 2013-11-22 23:26 135680 ----a-w- c:\windows\system32\iepeers.dll 2013-11-22 23:26 . 2013-11-22 23:26 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-11-22 23:26 . 2013-11-22 23:26 105984 ----a-w- c:\windows\system32\iesysprep.dll 2013-11-22 23:26 . 2013-11-22 23:26 101376 ----a-w- c:\windows\system32\inseng.dll 2013-11-22 02:27 . 2013-11-22 11:49 3123272 ----a-w- c:\windows\SysWow64\pbsvc.exe 2013-11-19 10:21 . 2010-11-21 03:27 267936 ------w- c:\windows\system32\MpSigStub.exe 2013-11-14 11:57 . 2013-11-20 18:32 1510176 ----a-w- c:\windows\system32\nvhdagenco64.dll 2013-11-14 11:56 . 2013-09-02 13:02 61216 ----a-w- c:\windows\system32\OpenCL.dll 2013-11-14 11:56 . 2013-09-02 13:02 53024 ----a-w- c:\windows\SysWow64\OpenCL.dll 2013-11-14 11:56 . 2013-09-02 13:00 18293608 ----a-w- c:\windows\system32\nvwgf2umx.dll 2013-11-14 11:56 . 2013-11-20 18:32 15862272 ----a-w- c:\windows\SysWow64\nvwgf2um.dll 2013-11-14 11:56 . 2013-11-20 18:32 1242400 ----a-w- c:\windows\SysWow64\nvumdshim.dll 2013-11-14 11:56 . 2013-09-02 13:00 1436528 ----a-w- c:\windows\system32\nvumdshimx.dll 2013-11-14 11:56 . 2013-11-20 18:32 9619872 ----a-w- c:\windows\SysWow64\nvopencl.dll 2013-11-14 11:56 . 2013-11-20 18:32 11514624 ----a-w- c:\windows\system32\nvopencl.dll 2013-11-14 11:56 . 2013-11-20 18:32 30361888 ----a-w- c:\windows\system32\nvoglv64.dll 2013-11-14 11:56 . 2013-11-20 18:32 317472 ----a-w- c:\windows\system32\nvoglshim64.dll 2013-11-14 11:56 . 2013-11-20 18:32 22951200 ----a-w- c:\windows\SysWow64\nvoglv32.dll 2013-11-14 11:56 . 2013-11-20 18:32 266984 ----a-w- c:\windows\SysWow64\nvoglshim32.dll 2013-11-14 11:56 . 2013-11-20 18:32 12613408 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys 2013-11-14 11:56 . 2013-11-20 18:32 707360 ----a-w- c:\windows\system32\NvFBC64.dll 2013-11-14 11:56 . 2013-11-20 18:32 657184 ----a-w- c:\windows\system32\NvIFR64.dll 2013-11-14 11:56 . 2013-11-20 18:32 609568 ----a-w- c:\windows\SysWow64\NvFBC.dll 2013-11-14 11:56 . 2013-11-20 18:32 562464 ----a-w- c:\windows\SysWow64\NvIFR.dll 2013-11-14 11:56 . 2013-11-20 18:32 479520 ----a-w- c:\windows\system32\nvEncodeAPI64.dll 2013-11-14 11:56 . 2013-11-20 18:32 405280 ----a-w- c:\windows\SysWow64\nvEncodeAPI.dll 2013-11-14 11:56 . 2013-11-20 18:32 357152 ----a-w- c:\windows\system32\NvIFROpenGL.dll 2013-11-14 11:56 . 2013-11-20 18:32 314656 ----a-w- c:\windows\SysWow64\NvIFROpenGL.dll 2013-11-14 11:56 . 2013-11-20 18:32 168616 ----a-w- c:\windows\system32\nvinitx.dll 2013-11-14 11:56 . 2013-11-20 18:32 1511712 ----a-w- c:\windows\system32\nvdispgenco6433182.dll 2013-11-14 11:56 . 2013-11-20 18:32 141336 ----a-w- c:\windows\SysWow64\nvinit.dll 2013-11-14 11:56 . 2013-11-20 18:32 1884448 ----a-w- c:\windows\system32\nvdispco6433182.dll 2013-11-14 11:56 . 2013-11-20 18:32 18208624 ----a-w- c:\windows\system32\nvd3dumx.dll 2013-11-14 11:56 . 2013-09-02 13:00 15218504 ----a-w- c:\windows\SysWow64\nvd3dum.dll 2013-11-14 11:56 . 2013-11-20 18:32 3132704 ----a-w- c:\windows\system32\nvcuvid.dll 2013-11-14 11:56 . 2013-11-20 18:32 2947872 ----a-w- c:\windows\SysWow64\nvcuvid.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-11-14 20584608] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584] "Desura"="c:\program files (x86)\Desura\desura.exe" [2013-12-25 2529096] "Overwolf"="c:\program files (x86)\Overwolf\Overwolf.exe" [2013-12-09 35768] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "AVMWlanClient"="c:\program files (x86)\avmwlanstick\wlangui.exe" [2010-10-22 2105344] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 JetDrive WindowsClosingService;JetDrive WindowsClosingService;c:\windows\System32\WindowsClosingService;c:\windows\SYSNATIVE\WindowsClosingService [x] R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x] R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\drivers\amdhub30.sys;c:\windows\SYSNATIVE\drivers\amdhub30.sys [x] R3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\drivers\amdxhc.sys;c:\windows\SYSNATIVE\drivers\amdxhc.sys [x] R3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\drivers\asmthub3.sys;c:\windows\SYSNATIVE\drivers\asmthub3.sys [x] R3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\drivers\asmtxhci.sys;c:\windows\SYSNATIVE\drivers\asmtxhci.sys [x] R3 AthDfu;Qualcomm Atheros Valkyrie USB BootROM;c:\windows\System32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x] R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x] R3 BTATH_BUS;Qualcomm Atheros Bluetooth Bus;c:\windows\system32\drivers\btath_bus.sys;c:\windows\SYSNATIVE\drivers\btath_bus.sys [x] R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\drivers\btath_hcrp.sys;c:\windows\SYSNATIVE\drivers\btath_hcrp.sys [x] R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\drivers\btath_rcp.sys;c:\windows\SYSNATIVE\drivers\btath_rcp.sys [x] R3 Desura Install Service;Desura Install Service;c:\program files (x86)\Common Files\Desura\desura_service.exe;c:\program files (x86)\Common Files\Desura\desura_service.exe [x] R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\System32\Drivers\EtronHub3.sys;c:\windows\SYSNATIVE\Drivers\EtronHub3.sys [x] R3 EtronSTOR;Etron Enhance USB BOT/UASP Mass Storage Driver;c:\windows\System32\Drivers\EtronSTOR.sys;c:\windows\SYSNATIVE\Drivers\EtronSTOR.sys [x] R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\System32\Drivers\EtronXHCI.sys;c:\windows\SYSNATIVE\Drivers\EtronXHCI.sys [x] R3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver;c:\windows\system32\drivers\FLxHCIc.sys;c:\windows\SYSNATIVE\drivers\FLxHCIc.sys [x] R3 FLxHCIh;Fresco Logic xHCI (USB3) Hub Device Driver;c:\windows\system32\drivers\FLxHCIh.sys;c:\windows\SYSNATIVE\drivers\FLxHCIh.sys [x] R3 iaStorA;iaStorA;c:\windows\system32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys;c:\windows\SYSNATIVE\drivers\Impcd.sys [x] R3 irstrtdv;Intel(R) Rapid Start Technology Driver;c:\windows\system32\drivers\irstrtdv.sys;c:\windows\SYSNATIVE\drivers\irstrtdv.sys [x] R3 ISCT;Intel(R) Smart Connect Technology Device Driver;c:\windows\system32\drivers\ISCTD64.sys;c:\windows\SYSNATIVE\drivers\ISCTD64.sys [x] R3 jetdrive;jddrv;c:\windows\system32\DRIVERS\jddrv.sys;c:\windows\SYSNATIVE\DRIVERS\jddrv.sys [x] R3 lehidmini;Bluetooth Low Energy Hid Device;c:\windows\system32\drivers\leath_hid.sys;c:\windows\SYSNATIVE\drivers\leath_hid.sys [x] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x] R3 mv91cons;mv91cons;c:\windows\system32\drivers\mv91cons.sys;c:\windows\SYSNATIVE\drivers\mv91cons.sys [x] R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys;c:\windows\SYSNATIVE\drivers\nusb3hub.sys [x] R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys;c:\windows\SYSNATIVE\drivers\nusb3xhc.sys [x] R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\drivers\nvstusb.sys;c:\windows\SYSNATIVE\drivers\nvstusb.sys [x] R3 OverwolfUpdaterService;Overwolf Updater Service;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 rusb3hub;Renesas Electronics USB 3.0 Hub Driver (Version 3.0);c:\windows\system32\drivers\rusb3hub.sys;c:\windows\SYSNATIVE\drivers\rusb3hub.sys [x] R3 rusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver (Version 3.0);c:\windows\system32\drivers\rusb3xhc.sys;c:\windows\SYSNATIVE\drivers\rusb3xhc.sys [x] R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x] R3 tihub3;TI USB3 Hub Service;c:\windows\system32\drivers\tihub3.sys;c:\windows\SYSNATIVE\drivers\tihub3.sys [x] R3 tixhci;TI XHCI Service;c:\windows\system32\drivers\tixhci.sys;c:\windows\SYSNATIVE\drivers\tixhci.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 xhunter1;xhunter1;c:\windows\xhunter1.sys;c:\windows\xhunter1.sys [x] S0 iaStorF;iaStorF;c:\windows\system32\drivers\iaStorF.sys;c:\windows\SYSNATIVE\drivers\iaStorF.sys [x] S0 RzFilter;RzFilter;c:\windows\system32\drivers\RzFilter.sys;c:\windows\SYSNATIVE\drivers\RzFilter.sys [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe [x] S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x] S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x] S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x] S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [x] S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe [x] S3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb.sys [x] S3 LVUVC64;Logitech HD Webcam C270(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x] S3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] S3 RzDxgk;RzDxgk;c:\windows\system32\drivers\RzDxgk.sys;c:\windows\SYSNATIVE\drivers\RzDxgk.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-12-06 09:55 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2013-12-27 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-16 19:16] . 2013-12-26 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2124055722-383917122-1893886807-1001Core.job - c:\users\Julian\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-10-04 12:16] . 2013-12-27 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2124055722-383917122-1893886807-1001UA.job - c:\users\Julian\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-10-04 12:16] . 2013-12-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-04 10:28] . 2013-12-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-04 10:28] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2013-03-29 7174728] . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = fritz.box TCP: DhcpNameServer = 192.168.178.1 FF - ProfilePath - c:\users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\3o037z6f.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.google.com . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Toolbar-Locked - (no file) Toolbar-10 - (no file) ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - c:\users\Administrator\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - c:\users\Administrator\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - c:\users\Administrator\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start Toolbar-Locked - (no file) Toolbar-10 - (no file) ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - c:\users\Administrator\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - c:\users\Administrator\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - c:\users\Administrator\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll AddRemove-C9(Continent of the Ninth Seal)_is1 - c:\program files (x86)\WEBZEN\C9\unins000.exe AddRemove-ESN Sonar-0.70.4 - c:\program files (x86)\Battlelog Web Plugins\Sonar\esnsonar_uninstall.exe AddRemove-LOLReplay - c:\program files (x86)\LOLReplay\uninstall.exe AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe AddRemove-{CED8E25B-122A-4E80-B612-7F99B93284B3} - c:\program files (x86)\InstallShield Installation Information\{CED8E25B-122A-4E80-B612-7F99B93284B3}\setup.exe AddRemove-SkyDriveSetup.exe - c:\users\Administrator\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveSetup.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\JetDrive WindowsClosingService] "ImagePath"="c:\windows\System32\WindowsClosingService" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2013-12-27 13:29:25 ComboFix-quarantined-files.txt 2013-12-27 12:29 . Vor Suchlauf: 14 Verzeichnis(se), 21.748.961.280 Bytes frei Nach Suchlauf: 15 Verzeichnis(se), 21.934.305.280 Bytes frei . - - End Of File - - 4091719C86D7380EA64A409EC9FC236A A36C5E4F47E84449FF07ED3517B43A31 [/QUOTE] |
28.12.2013, 12:42 | #13 |
/// the machine /// TB-Ausbilder | Mein Freund kann nichts mehr öffnen... Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Mein Freund kann nichts mehr öffnen... |
andere, beseitigen, erscheint, hack, nichts, pc herunterfahren, problem, pup.optional.bundleinstaller.a, pup.optional.conduit.a, pup.optional.crossrider.a, pup.optional.crossrider.m, pup.optional.datamngr.a, pup.optional.musicboxtoolbar.a, pup.optional.musictoolbar.a, pup.optional.searchqu, pup.optional.wedownload.a, öffnen |