|
Plagegeister aller Art und deren Bekämpfung: GVU Trojane auf WINDOWS 8Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
30.12.2013, 22:46 | #1 |
| GVU Trojane auf WINDOWS 8 sorry habs vohin falsch gepostet hie bin ich abe glaub ich richtig : Hallo bauche dingend komme nach dem einloggen nicht meh zu desktop es kommt direkt diese GVU sche*** ich kann nicht mal task manage starten. Hab auch im abgesicheten modus versucht ging auch nicht kommt ein weißes fenste mit so einem kasten wo eigentlich die webcam angezeigt wird. systemwiederhestellung geht auch nicht obwohl ich welche punkte hatte BITTE ICH BAUCHE HILFE LAPTOP WAR NEU!! |
31.12.2013, 02:25 | #2 |
/// the machine /// TB-Ausbilder | GVU Trojane auf WINDOWS 8 hi,
__________________Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8) Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)
__________________ |
31.12.2013, 15:34 | #3 |
| GVU Trojane auf WINDOWS 8 FRST Logfile:
__________________FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013 01 Ran by SYSTEM on MININT-UADBI09 on 31-12-2013 15:27:41 Running from E:\ Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Recovery The current controlset is ControlSet001 ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log. ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtsFT] - C:\Windows\RTFTrack.exe [6334096 2012-10-17] (Realtek semiconductor) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-08-17] (Realtek Semiconductor) HKLM\...\Run: [SynLenovoGestureMgr] - C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [665400 2012-10-04] (Synaptics) HKLM\...\Run: [OnekeyStudio] - C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-08-10] (Lenovo) HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2012-12-06] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [191544 2012-12-06] (Lenovo(beijing) Limited) HKLM\...\Run: [EKIJ5000StatusMonitor] - C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe [2045440 2010-09-02] (Eastman Kodak Company) HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2958648 2012-10-04] (Synaptics Incorporated) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [277504 2012-08-16] (Intel Corporation) HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation) HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink) HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.) HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [78352 2012-05-23] (cyberlink) HKLM-x32\...\Run: [IntellingentTouchpad] - C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe [673336 2012-07-23] (Microsoft) HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated) HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] () HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\noor\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-03-01] () HKU\noor\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKU\noor\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd) HKU\noor\...\Run: [DS3 Tool] - C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe [110352 2011-01-01] (www.motioninjoy.com) HKU\noor\...\Winlogon: [Userinit] C:\Users\noor\AppData\Roaming\loadit.exe [595252 2013-12-30] () HKU\noor\...\Winlogon: [Shell] C:\Users\noor\AppData\Roaming\loadit.exe [595252 2013-12-30] () <==== ATTENTION AppInit_DLLs: [ ] () IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\browsemngr.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browsermngr.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe IFEO\cltmngsvc.exe: [Debugger] tasklist.exe IFEO\delta babylon.exe: [Debugger] tasklist.exe IFEO\delta tb.exe: [Debugger] tasklist.exe IFEO\delta2.exe: [Debugger] tasklist.exe IFEO\deltainstaller.exe: [Debugger] tasklist.exe IFEO\deltasetup.exe: [Debugger] tasklist.exe IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe IFEO\iminentsetup.exe: [Debugger] tasklist.exe IFEO\rjatydimofu.exe: [Debugger] tasklist.exe IFEO\sweetimsetup.exe: [Debugger] tasklist.exe IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe Startup: C:\Users\noor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk ShortcutTarget: AutoStarter.lnk -> C:\windows\system32\config\systemprofile\Desktop\Total.War.ROME.II.Update.2-RELOADED.exe (No File) Startup: C:\Users\noor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk Startup: C:\Users\noor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NVIDIA HD-Audio Driver.url () ==================== Services (Whitelisted) ================= S2 CLKMSVC10_3A60B698; C:\Program Files (x86)\Lenovo\PowerDVD10\NavFilter\kmsvc.exe [243728 2012-05-23] (CyberLink) S2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-03-30] (Diskeeper Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-10-18] (Intel Corporation) S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) S2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [579400 2013-02-08] (LENOVO INCORPORATED.) S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] () S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) S2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-09-17] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) S2 Yontoo Desktop Updater; C:\Program Files (x86)\Yontoo\Y2Desktop.Updater.exe [23552 2013-03-23] (Microsoft) S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation) S3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1408824 2013-10-18] (Motorola Solutions, Inc.) S1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-03-05] (DT Soft Ltd) S1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [23344 2012-03-30] (Diskeeper Corporation) S0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [95024 2012-03-30] (Diskeeper Corporation) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) S0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-12-26] (Microsoft Corporation) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) S3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) S3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation) S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation) S3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8230160 2012-10-17] (Realtek Semiconductor Corp.) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-12-26] (Microsoft Corporation) S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [44344 2012-10-04] (Synaptics Incorporated) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-31 15:27 - 2013-12-31 15:27 - 00000000 ____D C:\FRST 2013-12-30 21:13 - 2013-12-31 15:25 - 00000000 _____ C:\Recovery.txt 2013-12-30 20:52 - 2013-12-30 20:52 - 00000000 __SHD C:\found.000 2013-12-30 20:28 - 2013-12-30 20:28 - 00595252 _____ C:\Users\noor\AppData\Roaming\loadit.exe 2013-12-30 20:23 - 2013-12-21 00:11 - 69513976 _____ C:\Users\noor\Desktop\Total.War.ROME.II.Update.2-RELOADED.exe 2013-12-30 20:21 - 2013-12-30 20:21 - 00022837 _____ C:\Users\noor\Downloads\Total.War.ROME.II.Update.2-RELOADED.rar.nzb 2013-12-30 20:13 - 2013-12-30 20:28 - 00000000 ____D C:\Users\noor\Desktop\Crack 2013-12-30 18:49 - 2013-12-30 18:49 - 00000653 _____ C:\Users\Public\Desktop\Total War Rome II.lnk 2013-12-30 18:27 - 2013-12-30 20:26 - 00000000 ____D C:\Program Files\Total War Rome II 2013-12-30 17:49 - 2013-12-30 20:18 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.4-RELOADED 2013-12-30 17:48 - 2013-12-30 20:18 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.3-RELOADED 2013-12-30 17:48 - 2013-12-30 20:17 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.2-RELOADED 2013-12-30 17:39 - 2013-12-30 17:39 - 00015115 _____ C:\Users\noor\Downloads\57.nzb.gz 2013-12-30 17:39 - 2013-12-30 17:39 - 00008938 _____ C:\Users\noor\Downloads\63.nzb.gz 2013-12-30 17:23 - 2013-12-30 17:23 - 00003397 _____ C:\Users\noor\Downloads\53.nzb.gz 2013-12-30 17:22 - 2013-12-30 20:19 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.1-RELOADED 2013-12-30 17:21 - 2013-12-30 17:21 - 00000982 _____ C:\Users\noor\Downloads\37.nzb.gz 2013-12-30 12:12 - 2013-12-30 12:12 - 00535101 _____ C:\Users\noor\Downloads\rld-twr2u7.rar.nzb 2013-12-27 20:45 - 2013-12-27 20:45 - 02182873 _____ C:\Users\noor\Downloads\Prisoners.2013.German.AC3D.DL.720p.BluRay.x264-HDLoad{{Usenetrevolution.info}}.nzb 2013-12-27 20:42 - 2013-12-27 20:42 - 00345157 _____ C:\Users\noor\Downloads\Disturbia 2007 German DL 720p BluRay DTS-ES x264-msd.rar 2013-12-27 20:36 - 2013-12-27 20:36 - 01010102 _____ C:\Users\noor\Downloads\Die.Unfassbaren.Now.You.See.Me.EXTENDED.German.720p.BluRay.x264-EXQUiSiTE{{Usenetrevolution.info.nzb 2013-12-27 20:33 - 2013-12-27 20:34 - 04157852 _____ C:\Users\noor\Downloads\Fight Club 1999 German REMASTERED BluRay REPACK 10 80p x264 x264Crew.nzb 2013-12-27 20:10 - 2013-12-27 20:10 - 01217907 _____ C:\Users\noor\Downloads\Whos.Next.2012.German.DL.720p.BluRay.x264-LeetHD{{Usenetrevolution.info}}.nzb 2013-12-27 20:02 - 2013-12-27 20:02 - 01561885 _____ C:\Users\noor\Downloads\Runner.Runner.2013.German.DL.AC3.720p.BluRay.x264-QRC{{Usenetrevolution.info}}.nzb 2013-12-27 19:57 - 2013-12-27 19:57 - 00568543 _____ C:\Users\noor\Downloads\8092 (1).nzb.gz 2013-12-27 19:52 - 2013-12-27 19:53 - 00000000 ____D C:\Users\noor\AppData\Local\QuickPar 2013-12-27 19:49 - 2013-12-27 19:49 - 00001034 _____ C:\Users\noor\Desktop\QuickPar.lnk 2013-12-27 19:49 - 2013-12-27 19:49 - 00000000 ____D C:\Program Files (x86)\QuickPar 2013-12-27 19:48 - 2013-12-27 19:48 - 00503439 _____ (Peter B Clements) C:\Users\noor\Downloads\QuickPar-0.9.1.0-DEU.exe 2013-12-27 19:43 - 2013-12-30 19:00 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.GERMAN-0x0007 2013-12-27 04:07 - 2013-12-27 04:07 - 00964898 _____ C:\Users\noor\Downloads\Pain.and.Gain.German.720p.BluRay.x264-EXQUiSiTE{{Usenetrevolution.info}}.nzb 2013-12-27 02:28 - 2013-12-27 02:28 - 00100332 _____ C:\Users\noor\Downloads\The Orphan Killer UNCUT German 2011 720p BluRay x264-AMBASSADOR.rar 2013-12-26 21:47 - 2013-12-27 00:21 - 00000000 ___RD C:\Windows\BrowserChoice 2013-12-26 18:42 - 2013-12-30 18:31 - 00000000 ____D C:\Program Files (x86)\Steam 2013-12-26 18:42 - 2013-12-26 18:42 - 01133552 _____ C:\Users\noor\Downloads\SteamSetup.exe 2013-12-26 18:42 - 2013-12-26 18:42 - 00000990 _____ C:\Users\Public\Desktop\Steam.lnk 2013-12-26 02:45 - 2013-12-26 02:45 - 00568543 _____ C:\Users\noor\Downloads\8092.nzb.gz 2013-12-26 02:41 - 2013-12-30 17:13 - 00000000 __RDO C:\Users\noor\SkyDrive 2013-12-26 02:12 - 2013-12-30 20:02 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{84CCD9F6-C4E8-4D47-9ADE-146DDE960D42} 2013-12-26 02:02 - 2013-12-26 02:02 - 00000020 ___SH C:\Users\noor\ntuser.ini 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-12-26 01:59 - 2013-12-26 01:59 - 00022960 _____ C:\Windows\System32\emptyregdb.dat 2013-12-26 01:43 - 2013-12-26 01:43 - 00000000 ____D C:\Users\Default\AppData\Roaming\Intel 2013-12-26 01:43 - 2013-12-26 01:43 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Intel 2013-12-26 01:39 - 2013-12-26 01:39 - 00000000 ____D C:\Windows\System32\config\bbimigrate 2013-12-26 01:37 - 2013-12-30 21:03 - 00000000 ____D C:\users\noor 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Vorlagen 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Startmenü 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Netzwerkumgebung 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Lokale Einstellungen 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Eigene Dateien 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Druckumgebung 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Documents\Eigene Musik 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Documents\Eigene Bilder 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\AppData\Local\Verlauf 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\AppData\Local\Anwendungsdaten 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Anwendungsdaten 2013-12-26 01:33 - 2013-12-26 01:59 - 00020958 _____ C:\Windows\diagwrn.xml 2013-12-26 01:33 - 2013-12-26 01:59 - 00020958 _____ C:\Windows\diagerr.xml 2013-12-26 01:28 - 2013-12-31 15:22 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-26 01:28 - 2013-12-30 21:18 - 01788946 _____ C:\Windows\WindowsUpdate.log 2013-12-26 01:28 - 2013-12-26 01:41 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-12-26 01:28 - 2013-12-26 01:41 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-12-26 01:28 - 2013-12-26 01:28 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf 2013-12-26 01:28 - 2013-11-11 16:02 - 06674208 _____ (NVIDIA Corporation) C:\Windows\System32\nvcpl.dll 2013-12-26 01:28 - 2013-11-11 16:02 - 03490080 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvc64.dll 2013-12-26 01:28 - 2013-11-11 16:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvcr.dll 2013-12-26 01:28 - 2013-11-11 16:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe 2013-12-26 01:28 - 2013-11-11 16:01 - 00598304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\oemdspif.dll 2013-12-26 01:28 - 2013-11-11 16:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\System32\nvmctray.dll 2013-12-26 01:28 - 2013-11-11 16:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\System32\nvshext.dll 2013-12-26 01:27 - 2013-12-26 01:27 - 00000264 _____ C:\Windows\Tasks\Synaptics TouchPad Enhancements.job 2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____D C:\Program Files\Synaptics 2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____D C:\Program Files\Realtek 2013-12-26 01:24 - 2013-12-27 00:23 - 00000000 ___DC C:\Windows\Panther 2013-12-26 01:24 - 2013-12-26 01:24 - 00000000 __SHD C:\Recovery 2013-12-26 01:23 - 2013-12-26 01:23 - 23183360 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 12996608 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 05769216 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 02764288 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 01995264 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2013-12-26 01:23 - 2013-12-26 01:23 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-26 01:23 - 2013-12-26 01:23 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 01395200 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\System32\MDMAgent.exe 2013-12-26 01:23 - 2013-12-26 01:23 - 00393216 _____ (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00287744 _____ (Microsoft Corporation) C:\Windows\System32\mdmregistration.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-12-26 01:23 - 2013-12-26 01:23 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\scrrun.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00075360 _____ (Microsoft Corporation) C:\Windows\System32\imagehlp.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00000000 ____D C:\Windows.old 2013-12-26 01:22 - 2013-12-26 01:22 - 13177344 _____ (Microsoft Corporation) C:\Windows\System32\twinui.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 11674624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 07399256 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 04191744 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 04105728 _____ (Microsoft Corporation) C:\Windows\System32\SyncEngine.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 02896896 _____ (Microsoft Corporation) C:\Windows\System32\msftedit.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 02570240 _____ (Microsoft Corporation) C:\Windows\System32\SettingsHandlers.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 02143744 _____ (Microsoft Corporation) C:\Windows\System32\dwmcore.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 02140888 _____ (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 01843712 _____ (Microsoft Corporation) C:\Windows\System32\Display.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 01756160 _____ (Microsoft Corporation) C:\Windows\System32\WMPDMC.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 01642016 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi 2013-12-26 01:22 - 2013-12-26 01:22 - 01530200 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 01506680 _____ (Microsoft Corporation) C:\Windows\System32\winload.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 01476184 _____ (Microsoft Corporation) C:\Windows\System32\winresume.efi 2013-12-26 01:22 - 2013-12-26 01:22 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 01345536 _____ (Microsoft Corporation) C:\Windows\System32\winresume.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 01302528 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentServer.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00922624 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentExtensions.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00840704 _____ (Microsoft Corporation) C:\Windows\System32\WSShared.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00747008 _____ (Microsoft Corporation) C:\Windows\System32\wlidcli.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00744448 _____ (Microsoft Corporation) C:\Windows\System32\SettingSyncCore.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00637952 _____ (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00568832 _____ (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 00566784 _____ (Microsoft Corporation) C:\Windows\System32\wpncore.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00516496 _____ (Microsoft Corporation) C:\Windows\System32\dxgi.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00479744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00382808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 00372568 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 00358896 _____ (Microsoft Corporation) C:\Windows\System32\dcomp.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00325464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBXHCI.SYS 2013-12-26 01:22 - 2013-12-26 01:22 - 00254464 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentClient.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00249856 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00146776 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\SerCx2.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 00115712 _____ (Microsoft Corporation) C:\Windows\System32\winbici.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00086872 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\pdc.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 00039768 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\intelpep.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\CredentialMigrationHandler.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll 2013-12-26 01:21 - 2013-12-26 01:21 - 00262144 _____ C:\Windows\System32\config\userdiff 2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer 2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files\MSBuild 2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-12-26 01:09 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\Windows\System32\PresentationNative_v0300.dll 2013-12-26 01:09 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll 2013-12-26 01:09 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\Windows\System32\TsWpfWrp.exe 2013-12-26 01:09 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll 2013-12-26 01:09 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-12-26 01:09 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2013-12-26 00:51 - 2013-12-26 01:59 - 00006611 _____ C:\Windows\comsetup.log 2013-12-25 22:30 - 2013-12-25 22:31 - 155611672 _____ (Lenovo Group Limited ) C:\Users\noor\Downloads\1fwl08ww.exe 2013-12-25 22:20 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys 2013-12-25 22:20 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\System32\nvaudcap64v.dll 2013-12-25 22:20 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-12-25 22:18 - 2013-12-25 22:20 - 00000000 ____D C:\Users\noor\AppData\Local\NVIDIA 2013-12-25 22:18 - 2013-12-25 22:18 - 00001362 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2013-12-25 22:15 - 2013-12-25 22:15 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-12-25 22:15 - 2013-12-10 03:13 - 01100248 _____ (NVIDIA Corporation) C:\Windows\System32\nvspcap64.dll 2013-12-25 22:15 - 2013-12-10 03:13 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 30361888 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglv64.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 25257248 _____ (NVIDIA Corporation) C:\Windows\System32\nvcompiler.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 18293608 _____ (NVIDIA Corporation) C:\Windows\System32\nvwgf2umx.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 18208624 _____ (NVIDIA Corporation) C:\Windows\System32\nvd3dumx.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 12613408 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvlddmkm.sys 2013-12-25 22:12 - 2013-11-14 12:58 - 11600432 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuda.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 11514624 _____ (NVIDIA Corporation) C:\Windows\System32\nvopencl.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 03132704 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuvid.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 03125024 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuvenc.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 03069608 _____ (NVIDIA Corporation) C:\Windows\System32\nvapi64.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispco6433182.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispgenco6433182.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 01510176 _____ (NVIDIA Corporation) C:\Windows\System32\nvhdagenco64.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 00707360 _____ (NVIDIA Corporation) C:\Windows\System32\NvFBC64.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 00657184 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFR64.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 00479520 _____ (NVIDIA Corporation) C:\Windows\System32\nvEncodeAPI64.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 00405280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 00357152 _____ C:\Windows\System32\NvIFROpenGL.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 00314656 _____ C:\Windows\SysWOW64\NvIFROpenGL.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 00196384 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvhda64v.sys 2013-12-25 22:12 - 2013-11-14 12:58 - 00031520 _____ (NVIDIA Corporation) C:\Windows\System32\nvhdap64.dll 2013-12-25 22:12 - 2013-11-14 12:58 - 00029984 _____ (NVIDIA Corporation) C:\Windows\System32\SET422F.tmp 2013-12-25 22:12 - 2013-11-14 12:58 - 00023754 _____ C:\Windows\System32\nvinfo.pb 2013-12-25 22:10 - 2013-12-25 22:10 - 00000000 ____D C:\Users\noor\Documents\Meine empfangenen Dateien 2013-12-25 21:57 - 2013-12-25 21:57 - 00006230 _____ C:\Users\noor\Downloads\Driver Genius Pro 14.0.0.323 Final Multilanguage inkl.German.nfo.nzb 2013-12-25 21:55 - 2013-12-25 21:56 - 11360048 _____ (Driver-Soft Inc. ) C:\Users\noor\Downloads\Driver_Genius_Professional_12_DE.exe 2013-12-25 21:49 - 2013-12-25 21:49 - 00154283 ____H C:\Users\noor\AppData\Roaming\Masoud-wchelper.dll 2013-12-25 21:49 - 2013-12-25 21:49 - 00000000 ____D C:\Users\noor\AppData\Roaming\FlashPlayer 2013-12-25 21:48 - 2013-12-25 21:48 - 00015520 _____ C:\Users\noor\Downloads\Driver-Genius-12.0.0.1328-Final-MLCrackKey.rar.nzb 2013-12-25 21:46 - 2013-12-25 21:46 - 00341104 _____ (QuickSet) C:\Users\noor\Downloads\DriverGeniusCrk.rar.exe 2013-12-25 21:46 - 2013-12-25 21:46 - 00000000 ____D C:\ProgramData\InstallMate 2013-12-25 21:46 - 2013-12-25 21:46 - 00000000 ____D C:\ProgramData\1f2851370af833c2 2013-12-25 21:42 - 2013-12-25 22:24 - 00000000 ____D C:\ProgramData\DriverGenius 2013-12-25 21:41 - 2013-12-25 22:00 - 00001222 _____ C:\Users\noor\Desktop\Driver Genius.lnk 2013-12-25 21:41 - 2013-12-25 21:41 - 00000000 ____D C:\Program Files (x86)\Driver-Soft 2013-12-25 21:39 - 2013-12-25 21:40 - 11360728 _____ (Driver-Soft Inc. ) C:\Users\noor\Downloads\Driver_Genius_Professional_DE_12.exe 2013-12-25 16:18 - 2013-12-25 16:18 - 02578718 _____ C:\Users\noor\Downloads\Chennai.Express.2013.German.1080p.BluRay.x264-iFPD{{Usenetrevolution.info}}.nzb 2013-12-23 14:30 - 2013-12-23 14:30 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity 2013-12-23 14:29 - 2013-12-23 14:29 - 00527423 _____ ( ) C:\Users\noor\Downloads\Lame_v3.99.3_for_Windows.exe 2013-12-23 14:28 - 2013-12-23 14:28 - 01445348 _____ C:\Users\noor\Downloads\lame-3.99.5.tar.gz 2013-12-23 14:28 - 2013-12-23 14:28 - 01445348 _____ C:\Users\noor\Downloads\lame-3.99.5 (1).tar.gz 2013-12-23 14:12 - 2013-12-23 14:12 - 03740128 _____ (foobar2000.org) C:\Users\noor\Downloads\foobar2000_v1.2.9.exe 2013-12-23 14:12 - 2013-12-23 14:12 - 00001046 _____ C:\Users\Public\Desktop\foobar2000.lnk 2013-12-23 00:09 - 2013-12-23 00:09 - 03191888 _____ (McAfee, Inc.) C:\Users\noor\Downloads\MCPR_6.5.101.exe 2013-12-22 17:36 - 2013-12-22 17:36 - 00480515 _____ C:\Users\noor\Downloads\Microsoft Office Professional Plus 2013 VL x64 - x86 iso German - mcu.nfo.nzb 2013-12-22 03:42 - 2013-12-22 03:42 - 00161133 _____ C:\Users\noor\Documents\2pac.xspf 2013-12-21 19:24 - 2013-12-21 19:24 - 00087777 _____ C:\Users\noor\Downloads\One Piece Ep.521 - Xvid - HD - Anime German sub by had551.nzb 2013-12-21 19:24 - 2013-12-21 19:24 - 00083039 _____ C:\Users\noor\Downloads\One Piece Ep.523 - Xvid - HD - Anime German sub by had51.nzb 2013-12-21 19:24 - 2013-12-21 19:24 - 00083000 _____ C:\Users\noor\Downloads\One Piece Ep.525 - Xvid - HD - Anime German sub by had551.nzb 2013-12-21 19:24 - 2013-12-21 19:24 - 00079383 _____ C:\Users\noor\Downloads\One Piece Ep.522 - MP4 - Anime German sub by had551.nzb 2013-12-21 19:24 - 2013-12-21 19:24 - 00078590 _____ C:\Users\noor\Downloads\One Piece Ep.524 - Xvid - HD - Anime German sub by had551.nzb 2013-12-21 19:22 - 2013-12-21 19:22 - 00323328 _____ C:\Users\noor\Downloads\NZBIndex-download.nzb 2013-12-16 21:05 - 2013-12-16 21:05 - 00219348 _____ C:\Users\noor\Downloads\1pho.pdb 2013-12-14 23:47 - 2013-12-14 23:48 - 00973212 _____ C:\Users\noor\Downloads\Sinister 2012 German DTS DL 720p BluRay x264-RHD.nzb 2013-12-14 23:41 - 2013-12-14 23:41 - 00366170 _____ C:\Users\noor\Downloads\Youre.Next.TS.MD.German.XviD-WTR{{Usenetrevolution.info}}.nzb 2013-12-14 23:39 - 2013-12-14 23:39 - 00170844 _____ C:\Users\noor\Downloads\Youre.Next.TS.LD.German.X264-AOE{{Usenetrevolution.info}}.nzb 2013-12-14 19:30 - 2013-12-14 19:30 - 01586776 _____ C:\Users\noor\Downloads\One Piece Ep.501 bis 520 - MKV - Anime German sub by had551.nzb 2013-12-14 14:49 - 2013-12-14 14:49 - 00001285 _____ C:\Users\noor\Desktop\2Pac - Verknüpfung.lnk 2013-12-08 00:51 - 2013-12-08 00:51 - 00000000 ____D C:\Users\noor\AppData\Local\SKIDROW 2013-12-07 22:17 - 2013-12-07 22:21 - 145842626 _____ C:\Users\noor\Downloads\One Piece Pirate Warriors 2.rar 2013-12-03 16:25 - 2013-12-03 16:25 - 00014915 _____ C:\Users\noor\Documents\welkrieg zeitleiste2.odt 2013-12-03 15:15 - 2013-12-03 16:26 - 00015462 _____ C:\Users\noor\Documents\weltkrieg zeitleiste.odt 2013-12-03 12:11 - 2013-12-03 12:11 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk 2013-12-03 12:11 - 2013-12-03 12:11 - 00000000 ____D C:\Users\noor\AppData\Roaming\OpenOffice 2013-12-03 12:10 - 2013-12-03 12:11 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4 2013-12-03 12:08 - 2013-12-03 12:08 - 00000000 ____D C:\Users\noor\Desktop\OpenOffice 4.0.1 (de) Installation Files 2013-12-03 11:59 - 2013-12-03 12:04 - 163606685 _____ C:\Users\noor\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe 2013-12-01 19:53 - 2013-12-01 19:53 - 00127389 _____ C:\Users\noor\Downloads\Hours Wettlauf gegen die Zeit 2013 German DTS DL 720p BluRay x264-LeetHD.rar ==================== One Month Modified Files and Folders ======= 2013-12-31 15:27 - 2013-12-31 15:27 - 00000000 ____D C:\FRST 2013-12-31 15:25 - 2013-12-30 21:13 - 00000000 _____ C:\Recovery.txt 2013-12-31 15:24 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-31 15:22 - 2013-12-26 01:28 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-30 22:08 - 2013-03-02 00:49 - 00002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-12-30 22:08 - 2013-03-02 00:48 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-30 22:00 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\sru 2013-12-30 21:59 - 2013-11-14 08:27 - 01780340 _____ C:\Windows\System32\PerfStringBackup.INI 2013-12-30 21:59 - 2013-11-14 08:11 - 00766620 _____ C:\Windows\System32\perfh007.dat 2013-12-30 21:59 - 2013-11-14 08:11 - 00159902 _____ C:\Windows\System32\perfc007.dat 2013-12-30 21:55 - 2013-08-22 15:46 - 00290800 _____ C:\Windows\setupact.log 2013-12-30 21:18 - 2013-12-26 01:28 - 01788946 _____ C:\Windows\WindowsUpdate.log 2013-12-30 21:03 - 2013-12-26 01:37 - 00000000 ____D C:\users\noor 2013-12-30 20:52 - 2013-12-30 20:52 - 00000000 __SHD C:\found.000 2013-12-30 20:28 - 2013-12-30 20:28 - 00595252 _____ C:\Users\noor\AppData\Roaming\loadit.exe 2013-12-30 20:28 - 2013-12-30 20:13 - 00000000 ____D C:\Users\noor\Desktop\Crack 2013-12-30 20:26 - 2013-12-30 18:27 - 00000000 ____D C:\Program Files\Total War Rome II 2013-12-30 20:23 - 2013-03-23 19:33 - 00000000 ____D C:\Users\noor\AppData\Roaming\vlc 2013-12-30 20:21 - 2013-12-30 20:21 - 00022837 _____ C:\Users\noor\Downloads\Total.War.ROME.II.Update.2-RELOADED.rar.nzb 2013-12-30 20:19 - 2013-12-30 17:22 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.1-RELOADED 2013-12-30 20:18 - 2013-12-30 17:49 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.4-RELOADED 2013-12-30 20:18 - 2013-12-30 17:48 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.3-RELOADED 2013-12-30 20:17 - 2013-12-30 17:48 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.Update.2-RELOADED 2013-12-30 20:02 - 2013-12-26 02:12 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{84CCD9F6-C4E8-4D47-9ADE-146DDE960D42} 2013-12-30 19:54 - 2013-03-02 00:48 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-30 19:50 - 2013-09-08 16:37 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-30 19:00 - 2013-12-27 19:43 - 00000000 ____D C:\Users\noor\Desktop\Total.War.ROME.II.GERMAN-0x0007 2013-12-30 18:54 - 2013-03-01 19:34 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3994570472-1178723934-3272383085-1002 2013-12-30 18:49 - 2013-12-30 18:49 - 00000653 _____ C:\Users\Public\Desktop\Total War Rome II.lnk 2013-12-30 18:31 - 2013-12-26 18:42 - 00000000 ____D C:\Program Files (x86)\Steam 2013-12-30 17:43 - 2013-03-01 22:15 - 00000000 ____D C:\Users\noor\AppData\Local\PMB Files 2013-12-30 17:39 - 2013-12-30 17:39 - 00015115 _____ C:\Users\noor\Downloads\57.nzb.gz 2013-12-30 17:39 - 2013-12-30 17:39 - 00008938 _____ C:\Users\noor\Downloads\63.nzb.gz 2013-12-30 17:23 - 2013-12-30 17:23 - 00003397 _____ C:\Users\noor\Downloads\53.nzb.gz 2013-12-30 17:21 - 2013-12-30 17:21 - 00000982 _____ C:\Users\noor\Downloads\37.nzb.gz 2013-12-30 17:13 - 2013-12-26 02:41 - 00000000 __RDO C:\Users\noor\SkyDrive 2013-12-30 17:13 - 2013-03-01 19:24 - 00000000 ____D C:\Users\noor\AppData\Local\VirtualStore 2013-12-30 16:56 - 2013-03-01 22:15 - 00000000 ____D C:\ProgramData\PMB Files 2013-12-30 16:55 - 2013-03-07 20:04 - 00000271 _____ C:\Users\noor\AppData\Local\RegisteredPackageInformation.xml 2013-12-30 14:31 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\System32\config\BBI 2013-12-30 13:54 - 2013-03-04 23:21 - 00000000 ____D C:\Users\noor\AppData\Roaming\Skype 2013-12-30 12:12 - 2013-12-30 12:12 - 00535101 _____ C:\Users\noor\Downloads\rld-twr2u7.rar.nzb 2013-12-28 16:47 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness 2013-12-27 20:45 - 2013-12-27 20:45 - 02182873 _____ C:\Users\noor\Downloads\Prisoners.2013.German.AC3D.DL.720p.BluRay.x264-HDLoad{{Usenetrevolution.info}}.nzb 2013-12-27 20:42 - 2013-12-27 20:42 - 00345157 _____ C:\Users\noor\Downloads\Disturbia 2007 German DL 720p BluRay DTS-ES x264-msd.rar 2013-12-27 20:36 - 2013-12-27 20:36 - 01010102 _____ C:\Users\noor\Downloads\Die.Unfassbaren.Now.You.See.Me.EXTENDED.German.720p.BluRay.x264-EXQUiSiTE{{Usenetrevolution.info.nzb 2013-12-27 20:34 - 2013-12-27 20:33 - 04157852 _____ C:\Users\noor\Downloads\Fight Club 1999 German REMASTERED BluRay REPACK 10 80p x264 x264Crew.nzb 2013-12-27 20:10 - 2013-12-27 20:10 - 01217907 _____ C:\Users\noor\Downloads\Whos.Next.2012.German.DL.720p.BluRay.x264-LeetHD{{Usenetrevolution.info}}.nzb 2013-12-27 20:02 - 2013-12-27 20:02 - 01561885 _____ C:\Users\noor\Downloads\Runner.Runner.2013.German.DL.AC3.720p.BluRay.x264-QRC{{Usenetrevolution.info}}.nzb 2013-12-27 19:57 - 2013-12-27 19:57 - 00568543 _____ C:\Users\noor\Downloads\8092 (1).nzb.gz 2013-12-27 19:53 - 2013-12-27 19:52 - 00000000 ____D C:\Users\noor\AppData\Local\QuickPar 2013-12-27 19:49 - 2013-12-27 19:49 - 00001034 _____ C:\Users\noor\Desktop\QuickPar.lnk 2013-12-27 19:49 - 2013-12-27 19:49 - 00000000 ____D C:\Program Files (x86)\QuickPar 2013-12-27 19:48 - 2013-12-27 19:48 - 00503439 _____ (Peter B Clements) C:\Users\noor\Downloads\QuickPar-0.9.1.0-DEU.exe 2013-12-27 04:07 - 2013-12-27 04:07 - 00964898 _____ C:\Users\noor\Downloads\Pain.and.Gain.German.720p.BluRay.x264-EXQUiSiTE{{Usenetrevolution.info}}.nzb 2013-12-27 02:28 - 2013-12-27 02:28 - 00100332 _____ C:\Users\noor\Downloads\The Orphan Killer UNCUT German 2011 720p BluRay x264-AMBASSADOR.rar 2013-12-27 00:23 - 2013-12-26 01:24 - 00000000 ___DC C:\Windows\Panther 2013-12-27 00:21 - 2013-12-26 21:47 - 00000000 ___RD C:\Windows\BrowserChoice 2013-12-27 00:21 - 2013-03-01 19:24 - 00000000 ____D C:\Users\noor\AppData\Local\Packages 2013-12-26 21:48 - 2013-08-22 15:44 - 00512264 _____ C:\Windows\System32\FNTCACHE.DAT 2013-12-26 21:46 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\restore 2013-12-26 18:42 - 2013-12-26 18:42 - 01133552 _____ C:\Users\noor\Downloads\SteamSetup.exe 2013-12-26 18:42 - 2013-12-26 18:42 - 00000990 _____ C:\Users\Public\Desktop\Steam.lnk 2013-12-26 02:45 - 2013-12-26 02:45 - 00568543 _____ C:\Users\noor\Downloads\8092.nzb.gz 2013-12-26 02:41 - 2013-05-29 11:14 - 00000000 ___RD C:\Users\noor\SkyDrive.old 2013-12-26 02:05 - 2013-11-14 09:24 - 00000000 ___HD C:\$Windows.~BT 2013-12-26 02:02 - 2013-12-26 02:02 - 00000020 ___SH C:\Users\noor\ntuser.ini 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-12-26 02:00 - 2013-12-26 02:00 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-12-26 02:00 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Registration 2013-12-26 02:00 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT 2013-12-26 02:00 - 2013-08-22 14:36 - 00000000 __RHD C:\users\Default 2013-12-26 01:59 - 2013-12-26 01:59 - 00022960 _____ C:\Windows\System32\emptyregdb.dat 2013-12-26 01:59 - 2013-12-26 01:33 - 00020958 _____ C:\Windows\diagwrn.xml 2013-12-26 01:59 - 2013-12-26 01:33 - 00020958 _____ C:\Windows\diagerr.xml 2013-12-26 01:59 - 2013-12-26 00:51 - 00006611 _____ C:\Windows\comsetup.log 2013-12-26 01:53 - 2013-08-22 16:36 - 00000000 __RSD C:\Windows\Media 2013-12-26 01:53 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries 2013-12-26 01:50 - 2012-12-06 16:06 - 01804472 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-26 01:44 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\System32\Sysprep 2013-12-26 01:44 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\System32\config\ELAM 2013-12-26 01:44 - 2012-12-06 16:05 - 00000000 ____D C:\Windows\SysWOW64\Atheros_L1e 2013-12-26 01:43 - 2013-12-26 01:43 - 00000000 ____D C:\Users\Default\AppData\Roaming\Intel 2013-12-26 01:43 - 2013-12-26 01:43 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Intel 2013-12-26 01:43 - 2013-08-22 16:37 - 00004893 _____ C:\Windows\DtcInstall.log 2013-12-26 01:43 - 2012-07-26 06:37 - 00000000 ____D C:\users\Default.migrated 2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\SysWOW64\winrm 2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\SysWOW64\WCN 2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\SysWOW64\sysprep 2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\SysWOW64\slmgr 2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts 2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\System32\winrm 2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\System32\WCN 2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\System32\slmgr 2013-12-26 01:42 - 2013-11-14 08:11 - 00000000 ____D C:\Windows\System32\Printing_Admin_Scripts 2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\WinStore 2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\MUI 2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\migwiz 2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\IME 2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\WinBioPlugIns 2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\SystemResetPlatform 2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\spool 2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\NDF 2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\MUI 2013-12-26 01:42 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\IME 2013-12-26 01:42 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\SysWOW64\SMI 2013-12-26 01:42 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\System32\oobe 2013-12-26 01:42 - 2013-06-29 19:08 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin 2013-12-26 01:42 - 2013-04-23 18:38 - 00000000 ____D C:\Windows\SysWOW64\jmdp 2013-12-26 01:42 - 2013-04-23 18:38 - 00000000 ____D C:\Windows\SysWOW64\ARFC 2013-12-26 01:42 - 2012-12-06 16:04 - 00000000 ____D C:\Windows\SysWOW64\SDA 2013-12-26 01:41 - 2013-12-26 01:28 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-12-26 01:41 - 2013-12-26 01:28 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-12-26 01:41 - 2013-11-14 08:13 - 00000000 ____D C:\Program Files\Windows Journal 2013-12-26 01:41 - 2013-08-22 16:43 - 00000000 ____D C:\Windows\DigitalLocker 2013-12-26 01:41 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar 2013-12-26 01:41 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2013-12-26 01:41 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel 2013-12-26 01:41 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\IME 2013-12-26 01:41 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Help 2013-12-26 01:41 - 2012-08-01 16:53 - 00000000 ____D C:\ProgramData\PRICache 2013-12-26 01:40 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-12-26 01:39 - 2013-12-26 01:39 - 00000000 ____D C:\Windows\System32\config\bbimigrate 2013-12-26 01:39 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\System32\Recovery 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Vorlagen 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Startmenü 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Netzwerkumgebung 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Lokale Einstellungen 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Eigene Dateien 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Druckumgebung 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Documents\Eigene Musik 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Documents\Eigene Bilder 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\AppData\Local\Verlauf 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\AppData\Local\Anwendungsdaten 2013-12-26 01:37 - 2013-12-26 01:37 - 00000000 _SHDL C:\Users\noor\Anwendungsdaten 2013-12-26 01:28 - 2013-12-26 01:28 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf 2013-12-26 01:28 - 2013-08-22 15:46 - 00000168 _____ C:\Windows\setuperr.log 2013-12-26 01:27 - 2013-12-26 01:27 - 00000264 _____ C:\Windows\Tasks\Synaptics TouchPad Enhancements.job 2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____D C:\Program Files\Synaptics 2013-12-26 01:27 - 2013-12-26 01:27 - 00000000 ____D C:\Program Files\Realtek 2013-12-26 01:25 - 2013-11-13 23:18 - 00000808 _____ C:\Windows\PFRO.log 2013-12-26 01:24 - 2013-12-26 01:24 - 00000000 __SHD C:\Recovery 2013-12-26 01:23 - 2013-12-26 01:23 - 23183360 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 12996608 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 05769216 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 02764288 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 01995264 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2013-12-26 01:23 - 2013-12-26 01:23 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-26 01:23 - 2013-12-26 01:23 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 01395200 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\System32\MDMAgent.exe 2013-12-26 01:23 - 2013-12-26 01:23 - 00393216 _____ (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00287744 _____ (Microsoft Corporation) C:\Windows\System32\mdmregistration.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-12-26 01:23 - 2013-12-26 01:23 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\scrrun.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00075360 _____ (Microsoft Corporation) C:\Windows\System32\imagehlp.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-26 01:23 - 2013-12-26 01:23 - 00000000 ____D C:\Windows.old 2013-12-26 01:23 - 2013-08-22 16:36 - 00262144 _____ C:\Windows\System32\config\BCD-Template 2013-12-26 01:22 - 2013-12-26 01:22 - 13177344 _____ (Microsoft Corporation) C:\Windows\System32\twinui.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 11674624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 07399256 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 04191744 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 04105728 _____ (Microsoft Corporation) C:\Windows\System32\SyncEngine.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 02896896 _____ (Microsoft Corporation) C:\Windows\System32\msftedit.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 02570240 _____ (Microsoft Corporation) C:\Windows\System32\SettingsHandlers.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 02143744 _____ (Microsoft Corporation) C:\Windows\System32\dwmcore.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 02140888 _____ (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 01843712 _____ (Microsoft Corporation) C:\Windows\System32\Display.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 01756160 _____ (Microsoft Corporation) C:\Windows\System32\WMPDMC.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 01642016 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi 2013-12-26 01:22 - 2013-12-26 01:22 - 01530200 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 01506680 _____ (Microsoft Corporation) C:\Windows\System32\winload.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 01476184 _____ (Microsoft Corporation) C:\Windows\System32\winresume.efi 2013-12-26 01:22 - 2013-12-26 01:22 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 01345536 _____ (Microsoft Corporation) C:\Windows\System32\winresume.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 01302528 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentServer.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00922624 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentExtensions.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00840704 _____ (Microsoft Corporation) C:\Windows\System32\WSShared.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00747008 _____ (Microsoft Corporation) C:\Windows\System32\wlidcli.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00744448 _____ (Microsoft Corporation) C:\Windows\System32\SettingSyncCore.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00637952 _____ (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00568832 _____ (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 00566784 _____ (Microsoft Corporation) C:\Windows\System32\wpncore.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00516496 _____ (Microsoft Corporation) C:\Windows\System32\dxgi.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00479744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe 2013-12-26 01:22 - 2013-12-26 01:22 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00382808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 00372568 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 00358896 _____ (Microsoft Corporation) C:\Windows\System32\dcomp.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00325464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBXHCI.SYS 2013-12-26 01:22 - 2013-12-26 01:22 - 00254464 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentClient.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00249856 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00146776 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\SerCx2.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 00115712 _____ (Microsoft Corporation) C:\Windows\System32\winbici.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00086872 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\pdc.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 00039768 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\intelpep.sys 2013-12-26 01:22 - 2013-12-26 01:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\CredentialMigrationHandler.dll 2013-12-26 01:22 - 2013-12-26 01:22 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll 2013-12-26 01:22 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ToastData 2013-12-26 01:22 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\MediaViewer 2013-12-26 01:22 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\FileManager 2013-12-26 01:22 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Camera 2013-12-26 01:21 - 2013-12-26 01:21 - 00262144 _____ C:\Windows\System32\config\userdiff 2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer 2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files\MSBuild 2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2013-12-26 01:10 - 2013-12-26 01:10 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-12-26 00:56 - 2012-12-06 16:05 - 01252231 _____ C:\Windows\WindowsUpdate (1).log 2013-12-26 00:36 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent 2013-12-25 22:31 - 2013-12-25 22:30 - 155611672 _____ (Lenovo Group Limited ) C:\Users\noor\Downloads\1fwl08ww.exe 2013-12-25 22:24 - 2013-12-25 21:42 - 00000000 ____D C:\ProgramData\DriverGenius 2013-12-25 22:20 - 2013-12-25 22:18 - 00000000 ____D C:\Users\noor\AppData\Local\NVIDIA 2013-12-25 22:20 - 2013-03-03 01:22 - 00000000 ____D C:\Users\noor\AppData\Local\NVIDIA Corporation 2013-12-25 22:20 - 2012-12-06 15:59 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-12-25 22:19 - 2013-11-21 17:26 - 00000000 ____D C:\Intel 2013-12-25 22:18 - 2013-12-25 22:18 - 00001362 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2013-12-25 22:15 - 2013-12-25 22:15 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-12-25 22:10 - 2013-12-25 22:10 - 00000000 ____D C:\Users\noor\Documents\Meine empfangenen Dateien 2013-12-25 22:10 - 2012-12-06 15:55 - 00000000 ____D C:\Program Files (x86)\Intel 2013-12-25 22:00 - 2013-12-25 21:41 - 00001222 _____ C:\Users\noor\Desktop\Driver Genius.lnk 2013-12-25 21:57 - 2013-12-25 21:57 - 00006230 _____ C:\Users\noor\Downloads\Driver Genius Pro 14.0.0.323 Final Multilanguage inkl.German.nfo.nzb 2013-12-25 21:56 - 2013-12-25 21:55 - 11360048 _____ (Driver-Soft Inc. ) C:\Users\noor\Downloads\Driver_Genius_Professional_12_DE.exe 2013-12-25 21:49 - 2013-12-25 21:49 - 00154283 ____H C:\Users\noor\AppData\Roaming\Masoud-wchelper.dll 2013-12-25 21:49 - 2013-12-25 21:49 - 00000000 ____D C:\Users\noor\AppData\Roaming\FlashPlayer 2013-12-25 21:48 - 2013-12-25 21:48 - 00015520 _____ C:\Users\noor\Downloads\Driver-Genius-12.0.0.1328-Final-MLCrackKey.rar.nzb 2013-12-25 21:46 - 2013-12-25 21:46 - 00341104 _____ (QuickSet) C:\Users\noor\Downloads\DriverGeniusCrk.rar.exe 2013-12-25 21:46 - 2013-12-25 21:46 - 00000000 ____D C:\ProgramData\InstallMate 2013-12-25 21:46 - 2013-12-25 21:46 - 00000000 ____D C:\ProgramData\1f2851370af833c2 2013-12-25 21:41 - 2013-12-25 21:41 - 00000000 ____D C:\Program Files (x86)\Driver-Soft 2013-12-25 21:40 - 2013-12-25 21:39 - 11360728 _____ (Driver-Soft Inc. ) C:\Users\noor\Downloads\Driver_Genius_Professional_DE_12.exe 2013-12-25 21:20 - 2013-03-03 01:26 - 586697113 _____ C:\Windows\MEMORY.DMP 2013-12-25 16:18 - 2013-12-25 16:18 - 02578718 _____ C:\Users\noor\Downloads\Chennai.Express.2013.German.1080p.BluRay.x264-iFPD{{Usenetrevolution.info}}.nzb 2013-12-23 17:12 - 2013-03-01 20:07 - 00000000 ____D C:\Users\noor\Documents\Youcam 2013-12-23 14:31 - 2013-11-20 21:03 - 00000000 ____D C:\Users\noor\AppData\Roaming\foobar2000 2013-12-23 14:31 - 2013-10-17 12:17 - 00000000 ____D C:\Users\noor\Desktop\Filme 2013-12-23 14:30 - 2013-12-23 14:30 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity 2013-12-23 14:29 - 2013-12-23 14:29 - 00527423 _____ ( ) C:\Users\noor\Downloads\Lame_v3.99.3_for_Windows.exe 2013-12-23 14:28 - 2013-12-23 14:28 - 01445348 _____ C:\Users\noor\Downloads\lame-3.99.5.tar.gz 2013-12-23 14:28 - 2013-12-23 14:28 - 01445348 _____ C:\Users\noor\Downloads\lame-3.99.5 (1).tar.gz 2013-12-23 14:12 - 2013-12-23 14:12 - 03740128 _____ (foobar2000.org) C:\Users\noor\Downloads\foobar2000_v1.2.9.exe 2013-12-23 14:12 - 2013-12-23 14:12 - 00001046 _____ C:\Users\Public\Desktop\foobar2000.lnk 2013-12-23 14:12 - 2013-11-20 21:03 - 00000000 ____D C:\Program Files (x86)\foobar2000 2013-12-23 00:10 - 2012-07-26 09:12 - 00000000 ___HD C:\Windows\ELAMBKUP 2013-12-23 00:09 - 2013-12-23 00:09 - 03191888 _____ (McAfee, Inc.) C:\Users\noor\Downloads\MCPR_6.5.101.exe 2013-12-22 21:16 - 2013-11-24 11:59 - 00000000 ____D C:\Program Files\Assassins Creed IV Black Flag 2013-12-22 21:16 - 2013-11-24 01:10 - 00291944 _____ C:\Windows\SysWOW64\PnkBstrB.xtr 2013-12-22 21:16 - 2013-03-05 00:36 - 00291944 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2013-12-22 17:36 - 2013-12-22 17:36 - 00480515 _____ C:\Users\noor\Downloads\Microsoft Office Professional Plus 2013 VL x64 - x86 iso German - mcu.nfo.nzb 2013-12-22 17:22 - 2013-03-02 19:53 - 00000000 ____D C:\Users\noor\Desktop\USB STICK 2013-12-22 17:16 - 2013-03-21 22:15 - 00663552 ___SH C:\Users\noor\Downloads\Thumbs.db 2013-12-22 03:42 - 2013-12-22 03:42 - 00161133 _____ C:\Users\noor\Documents\2pac.xspf 2013-12-22 00:52 - 2013-10-24 15:26 - 00000000 ____D C:\Program Files (x86)\Saints Row IV 2013-12-21 19:24 - 2013-12-21 19:24 - 00087777 _____ C:\Users\noor\Downloads\One Piece Ep.521 - Xvid - HD - Anime German sub by had551.nzb 2013-12-21 19:24 - 2013-12-21 19:24 - 00083039 _____ C:\Users\noor\Downloads\One Piece Ep.523 - Xvid - HD - Anime German sub by had51.nzb 2013-12-21 19:24 - 2013-12-21 19:24 - 00083000 _____ C:\Users\noor\Downloads\One Piece Ep.525 - Xvid - HD - Anime German sub by had551.nzb 2013-12-21 19:24 - 2013-12-21 19:24 - 00079383 _____ C:\Users\noor\Downloads\One Piece Ep.522 - MP4 - Anime German sub by had551.nzb 2013-12-21 19:24 - 2013-12-21 19:24 - 00078590 _____ C:\Users\noor\Downloads\One Piece Ep.524 - Xvid - HD - Anime German sub by had551.nzb 2013-12-21 19:22 - 2013-12-21 19:22 - 00323328 _____ C:\Users\noor\Downloads\NZBIndex-download.nzb 2013-12-21 19:22 - 2013-10-24 02:01 - 00000000 ____D C:\Users\noor\AppData\Roaming\UseNeXT 2013-12-21 00:11 - 2013-12-30 20:23 - 69513976 _____ C:\Users\noor\Desktop\Total.War.ROME.II.Update.2-RELOADED.exe 2013-12-16 21:05 - 2013-12-16 21:05 - 00219348 _____ C:\Users\noor\Downloads\1pho.pdb 2013-12-16 20:40 - 2013-08-16 00:41 - 00000000 ____D C:\Windows\System32\MRT 2013-12-16 20:39 - 2013-03-02 12:04 - 90708896 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-12-16 16:03 - 2013-04-20 15:16 - 00089600 ___SH C:\Users\noor\Desktop\Thumbs.db 2013-12-14 23:48 - 2013-12-14 23:47 - 00973212 _____ C:\Users\noor\Downloads\Sinister 2012 German DTS DL 720p BluRay x264-RHD.nzb 2013-12-14 23:41 - 2013-12-14 23:41 - 00366170 _____ C:\Users\noor\Downloads\Youre.Next.TS.MD.German.XviD-WTR{{Usenetrevolution.info}}.nzb 2013-12-14 23:39 - 2013-12-14 23:39 - 00170844 _____ C:\Users\noor\Downloads\Youre.Next.TS.LD.German.X264-AOE{{Usenetrevolution.info}}.nzb 2013-12-14 19:30 - 2013-12-14 19:30 - 01586776 _____ C:\Users\noor\Downloads\One Piece Ep.501 bis 520 - MKV - Anime German sub by had551.nzb 2013-12-14 14:49 - 2013-12-14 14:49 - 00001285 _____ C:\Users\noor\Desktop\2Pac - Verknüpfung.lnk 2013-12-11 19:50 - 2013-09-08 16:37 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-10 03:13 - 2013-12-25 22:15 - 01100248 _____ (NVIDIA Corporation) C:\Windows\System32\nvspcap64.dll 2013-12-10 03:13 - 2013-12-25 22:15 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2013-12-08 00:51 - 2013-12-08 00:51 - 00000000 ____D C:\Users\noor\AppData\Local\SKIDROW 2013-12-08 00:49 - 2013-11-24 12:33 - 00000000 ____D C:\Program Files (x86)\SpeedFan 2013-12-07 22:21 - 2013-12-07 22:17 - 145842626 _____ C:\Users\noor\Downloads\One Piece Pirate Warriors 2.rar 2013-12-06 19:42 - 2013-03-05 00:36 - 00291944 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2013-12-06 16:59 - 2013-03-04 23:21 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-12-06 16:59 - 2013-03-04 23:21 - 00000000 ____D C:\ProgramData\Skype 2013-12-05 09:42 - 2013-12-25 22:20 - 00039200 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys 2013-12-05 09:42 - 2013-12-25 22:20 - 00035104 _____ (NVIDIA Corporation) C:\Windows\System32\nvaudcap64v.dll 2013-12-05 09:42 - 2013-12-25 22:20 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2013-12-04 01:05 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-04 01:05 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-03 16:26 - 2013-12-03 15:15 - 00015462 _____ C:\Users\noor\Documents\weltkrieg zeitleiste.odt 2013-12-03 16:25 - 2013-12-03 16:25 - 00014915 _____ C:\Users\noor\Documents\welkrieg zeitleiste2.odt 2013-12-03 12:11 - 2013-12-03 12:11 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk 2013-12-03 12:11 - 2013-12-03 12:11 - 00000000 ____D C:\Users\noor\AppData\Roaming\OpenOffice 2013-12-03 12:11 - 2013-12-03 12:10 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4 2013-12-03 12:08 - 2013-12-03 12:08 - 00000000 ____D C:\Users\noor\Desktop\OpenOffice 4.0.1 (de) Installation Files 2013-12-03 12:04 - 2013-12-03 11:59 - 163606685 _____ C:\Users\noor\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe 2013-12-01 19:53 - 2013-12-01 19:53 - 00127389 _____ C:\Users\noor\Downloads\Hours Wettlauf gegen die Zeit 2013 German DTS DL 720p BluRay x264-LeetHD.rar 2013-12-01 18:49 - 2013-03-02 00:48 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-01 18:49 - 2013-03-02 00:48 - 00003860 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore ==================== Known DLLs (Whitelisted) ================ ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= ==================== Memory info =========================== Percentage of memory in use: 11% Total physical RAM: 8139.27 MB Available physical RAM: 7177.24 MB Total Pagefile: 8139.27 MB Available Pagefile: 7205.38 MB Total Virtual: 131072 MB Available Virtual: 131071.85 MB ==================== Drives ================================ Drive c: (Windows8_OS) (Fixed) (Total:883.84 GB) (Free:339.54 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.65 GB) NTFS Drive e: (MILAD) (Removable) (Total:59.41 GB) (Free:59.41 GB) FAT32 Drive g: () (Fixed) (Total:0.34 GB) (Free:0 GB) NTFS Drive x: (Boot) (Fixed) (Total:0.5 GB) (Free:0.5 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 15 GB) (Disk ID: E4837710) Partition: GPT Partition Type ======================================================== Disk: 1 (Size: 932 GB) (Disk ID: E4837711) Partition: GPT Partition Type ======================================================== Disk: 2 (Size: 60 GB) (Disk ID: 9EE7B8A1) Partition 1: (Active) - (Size=60 GB) - (Type=0B) LastRegBack: 2013-12-26 01:25 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- Geändert von afgbozz187 (31.12.2013 um 14:34 Uhr) |
01.01.2014, 13:21 | #4 |
/// the machine /// TB-Ausbilder | GVU Trojane auf WINDOWS 8 Eigentlich müsste ich dich mit dem System so hängen lassen, bei der ganzen gecrackten Scheisse die auf dem Rechner ist. Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKU\noor\...\Winlogon: [Userinit] C:\Users\noor\AppData\Roaming\loadit.exe [595252 2013-12-30] () HKU\noor\...\Winlogon: [Shell] C:\Users\noor\AppData\Roaming\loadit.exe [595252 2013-12-30] () <==== ATTENTION AppInit_DLLs: [ ] () IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\browsemngr.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browsermngr.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe IFEO\cltmngsvc.exe: [Debugger] tasklist.exe IFEO\delta babylon.exe: [Debugger] tasklist.exe IFEO\delta tb.exe: [Debugger] tasklist.exe IFEO\delta2.exe: [Debugger] tasklist.exe IFEO\deltainstaller.exe: [Debugger] tasklist.exe IFEO\deltasetup.exe: [Debugger] tasklist.exe IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe IFEO\iminentsetup.exe: [Debugger] tasklist.exe IFEO\rjatydimofu.exe: [Debugger] tasklist.exe IFEO\sweetimsetup.exe: [Debugger] tasklist.exe IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe Startup: C:\Users\noor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk 2013-12-30 20:28 - 2013-12-30 20:28 - 00595252 _____ C:\Users\noor\AppData\Roaming\loadit.exe
Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier. Rechner normal starten. Wir sind dann noch nit fertig, aber es geht erst weiter wenn der ganze Scheiss gelöscht wurde.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
02.01.2014, 13:41 | #5 |
| GVU Trojane auf WINDOWS 8 Danke das sie mich nicht hängen lassen Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-12-2013 01 Ran by SYSTEM at 2014-01-01 13:51:23 Run:1 Running from E:\ Boot Mode: Recovery ============================================== Content of fixlist: ***************** HKU\noor\...\Winlogon: [Userinit] C:\Users\noor\AppData\Roaming\loadit.exe [595252 2013-12-30] () HKU\noor\...\Winlogon: [Shell] C:\Users\noor\AppData\Roaming\loadit.exe [595252 2013-12-30] () <==== ATTENTION AppInit_DLLs: [ ] () IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\browsemngr.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browsermngr.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe IFEO\cltmngsvc.exe: [Debugger] tasklist.exe IFEO\delta babylon.exe: [Debugger] tasklist.exe IFEO\delta tb.exe: [Debugger] tasklist.exe IFEO\delta2.exe: [Debugger] tasklist.exe IFEO\deltainstaller.exe: [Debugger] tasklist.exe IFEO\deltasetup.exe: [Debugger] tasklist.exe IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe IFEO\iminentsetup.exe: [Debugger] tasklist.exe IFEO\rjatydimofu.exe: [Debugger] tasklist.exe IFEO\sweetimsetup.exe: [Debugger] tasklist.exe IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe Startup: C:\Users\noor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk 2013-12-30 20:28 - 2013-12-30 20:28 - 00595252 _____ C:\Users\noor\AppData\Roaming\loadit.exe ***************** HKU\noor\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Userinit => Value deleted successfully. HKU\noor\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bitguard.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bprotect.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browsemngr.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserdefender.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browsermngr.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserprotect.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bundlesweetimsetup.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\cltmngsvc.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\delta babylon.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\delta tb.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\delta2.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\deltainstaller.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\deltasetup.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\deltatb_2501-c733154b.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\iminentsetup.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\rjatydimofu.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\sweetimsetup.exe => Key deleted successfully. HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\tbdelta.exetoolbar783881609.exe => Key deleted successfully. C:\Users\noor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk => Moved successfully. C:\Users\noor\AppData\Roaming\loadit.exe => Moved successfully. ==== End of Fixlog ==== ok hab es geschafft den virus mit Malwarebytes zu entfernen laptop startet jetzt normal, han aber jetzt das problem das ich den laptop nicht herunterfahren kann, da steht er würde herunterfahren dann wird der bildschirm schwarz und ich komme dann zum sperrschirm. Geändert von afgbozz187 (01.01.2014 um 22:53 Uhr) |
03.01.2014, 12:01 | #6 |
/// the machine /// TB-Ausbilder | GVU Trojane auf WINDOWS 8 Dann lass den PC an. Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Scan im normalen Modus machen. Und erstmal die Cracks löschen.
__________________ --> GVU Trojane auf WINDOWS 8 |
Themen zu GVU Trojane auf WINDOWS 8 |
angezeigt, desktop, dinge, direkt, einloggen, ellung, falsch, gepostet, hilfe, laptop, modus, neu, punkte, richtig, starte, starten., troja, trojane, versuch, versucht, webcam, weißes, windows, windows 8 |